Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/zJ-339Z61LlzBHPqqKE0rLAac08.roa
File: zJ-339Z61LlzBHPqqKE0rLAac08.roa (raw, json)
Hash identifier: mro8s2r6gCoqnBPCthdxrg3SxuNEoyWQzIvkxyNSDnI=
Subject key identifier: CC:9F:B7:DF:D6:7A:D4:B9:73:04:73:EA:A8:A1:34:AC:B0:1A:73:4F
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 01869EB46A3A03D7A994A38A13F87CCDDC6F
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/zJ-339Z61LlzBHPqqKE0rLAac08.roa
Signing time: Wed 01 Mar 2023 19:44:29 +0000
ROA not before: Wed 01 Mar 2023 19:44:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206995
IP address blocks: 188.191.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Apr 2023 18:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9e:b4:6a:3a:03:d7:a9:94:a3:8a:13:f8:7c:cd:dc:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Mar 1 19:44:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc9fb7dfd67ad4b9730473eaa8a134acb01a734f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:74:db:2b:54:dd:c2:e6:dd:df:32:ce:a3:b2:
73:1c:99:bb:f1:76:a1:92:f9:b3:46:79:dd:e1:2a:
2b:ce:52:00:5a:71:95:7f:2b:34:23:30:1e:f2:87:
1a:3b:d1:fa:ba:09:b7:12:ea:ae:f0:5b:58:26:53:
56:41:2f:d0:e3:3d:62:50:93:fa:0b:51:b5:72:cd:
70:0c:cb:18:ee:c0:72:16:bd:63:d0:d9:9d:ee:3b:
c5:bc:19:db:72:dc:3c:a1:30:ed:ec:60:c0:5b:ce:
b0:24:6e:27:03:30:27:53:9f:83:6c:b9:89:12:ed:
4b:4f:92:ac:9f:94:70:a3:e9:ab:56:cd:c5:17:c6:
6d:04:78:6f:87:d1:09:89:52:a0:1a:3f:32:31:8b:
67:31:08:1b:e5:a7:6c:a8:db:09:79:4a:2f:24:de:
cd:a5:cb:38:33:7c:30:e9:44:ce:65:6e:73:94:6e:
7e:c3:95:53:f4:7a:97:3a:01:79:8f:03:61:6b:94:
39:67:44:c2:0b:f6:b6:c1:9e:33:61:26:2b:f5:09:
4d:68:01:a7:02:b9:e3:24:5a:ec:0d:41:45:a0:48:
90:6b:7c:b3:39:db:41:57:0e:20:fd:82:01:7b:e1:
20:e4:2e:da:af:df:42:83:de:3a:70:ee:46:88:5e:
4e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9F:B7:DF:D6:7A:D4:B9:73:04:73:EA:A8:A1:34:AC:B0:1A:73:4F
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/zJ-339Z61LlzBHPqqKE0rLAac08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.104.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f4:b9:63:e6:84:c5:6d:c7:33:2c:f8:46:e3:6b:be:e7:1e:
b7:cd:4a:a7:33:0d:16:88:16:b2:ac:d0:bd:d3:c2:55:a1:46:
1c:6d:05:98:7d:94:2e:65:04:ad:d9:37:db:ff:43:77:42:af:
8c:fc:cf:54:c7:47:01:26:6c:b1:7c:16:a7:05:ed:64:58:8f:
8d:bc:8a:cc:2f:2a:92:92:c1:73:af:a7:09:7e:b3:46:97:fa:
ae:74:c8:03:f5:bc:f9:d4:70:b8:c2:7c:d8:af:de:74:fc:69:
57:43:6d:67:72:df:3f:98:bb:f3:e6:0e:74:a2:a8:31:7f:d0:
ef:df:a7:d2:8c:63:2b:ed:15:55:c0:88:d2:99:1b:80:e6:1d:
c8:20:7d:52:7a:69:e4:f5:c6:ac:26:d5:6d:46:8f:2b:70:54:
2c:c3:f2:5f:7c:e2:09:2b:10:af:13:8d:e0:30:d3:9a:6d:c5:
1a:84:31:22:c7:38:3a:4a:18:73:b4:e2:58:51:ca:62:af:2e:
17:54:34:c8:17:cb:ba:71:25:e9:ce:be:39:58:46:8b:ad:96:
ff:dd:87:d6:14:2e:9a:84:62:d5:23:cb:57:2a:72:f5:d0:25:
b8:7c:db:fe:d8:48:c9:2d:71:6a:64:75:c1:54:f3:a4:6f:5c:
79:3e:27:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:06 2024 by rpki-client on console-fra.rpki-client.org