Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/ZHizKmez5L3D2AxM7I9DMp-BwYM.roa
File: ZHizKmez5L3D2AxM7I9DMp-BwYM.roa (raw, json)
Hash identifier: eeY2v1wZAz6/A5HPMaTGPaL+3Ep6y3uTatpNpkk1Uas=
Subject key identifier: 64:78:B3:2A:67:B3:E4:BD:C3:D8:0C:4C:EC:8F:43:32:9F:81:C1:83
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 0188E7998084A2B43D71FC37F065DC109B43
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/ZHizKmez5L3D2AxM7I9DMp-BwYM.roa
Signing time: Fri 23 Jun 2023 09:32:56 +0000
ROA not before: Fri 23 Jun 2023 09:32:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 193.34.49.0/24 maxlen: 24
193.34.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e7:99:80:84:a2:b4:3d:71:fc:37:f0:65:dc:10:9b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Jun 23 09:32:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6478b32a67b3e4bdc3d80c4cec8f43329f81c183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:da:f2:43:55:cb:54:41:61:65:00:cd:29:fd:
cc:ec:7a:0a:8f:ae:1f:6f:09:36:8e:52:2a:d8:5a:
c1:5d:a0:e0:e4:85:33:70:11:db:53:cd:93:3b:fd:
e4:d3:6a:74:e4:fa:d7:c6:1c:9f:8f:3c:2b:3f:57:
d4:66:dc:77:fa:9c:3e:4f:80:89:e0:b5:73:66:92:
be:f1:bf:34:50:0d:a4:27:94:04:67:68:de:30:fb:
37:61:87:14:0c:23:7b:f7:65:3d:c6:9b:dc:1a:23:
6b:d5:b6:88:24:be:93:a1:34:f2:36:94:c6:5d:de:
49:68:4f:28:f5:e7:0e:34:58:3b:f3:29:44:c1:88:
48:2c:12:22:97:25:e5:3b:ad:e4:4d:3f:31:cd:9a:
ca:93:b1:05:f5:c1:41:48:00:9f:e6:b3:71:5a:d2:
9a:62:93:bb:c4:81:d8:76:12:32:f2:ad:24:41:c1:
35:d6:72:0e:cb:7b:21:59:c5:25:06:9a:e2:7e:51:
76:34:67:31:a2:f1:ea:a8:0c:f6:a5:f5:f9:d8:36:
44:36:64:06:91:47:d9:f7:78:dc:4c:47:9a:ea:5d:
8f:f9:78:9d:e9:f1:1f:77:06:a4:94:5a:7f:86:8f:
34:df:f9:74:f9:a5:a6:41:f7:86:6c:ce:3c:5e:18:
06:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:78:B3:2A:67:B3:E4:BD:C3:D8:0C:4C:EC:8F:43:32:9F:81:C1:83
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/ZHizKmez5L3D2AxM7I9DMp-BwYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.49.0/24
193.34.51.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:b7:6a:5b:53:7e:11:07:0d:28:e1:fa:46:91:a7:4f:7b:d6:
f9:76:31:76:49:df:4b:f7:f4:ae:67:9d:b0:87:7c:62:b1:c2:
8a:58:9b:e4:62:3e:62:ef:cd:3a:d4:e4:0e:41:71:61:4d:70:
74:0f:e5:bb:8b:6c:ec:f0:d4:5c:62:a8:52:6e:33:fd:07:be:
bd:74:66:8f:3b:c5:bb:84:02:3c:5b:c2:96:b4:c2:21:7e:c7:
15:f9:f4:2f:8b:6c:6a:2d:07:31:0a:eb:79:13:71:34:92:40:
47:75:06:2a:85:fc:c1:87:49:07:ee:99:30:5c:4b:53:cb:ab:
84:e8:49:cb:7f:ac:df:79:cc:90:26:ce:d8:f9:99:52:73:6b:
38:83:31:0b:3f:18:5f:f0:ea:86:34:d7:fd:5b:62:2b:ab:58:
5b:26:8e:40:37:3a:2d:aa:a7:a4:dd:dc:5a:e0:08:f6:ed:68:
85:67:56:ca:a4:d3:ce:83:21:8f:be:c5:b6:2a:06:d2:0a:c0:
b2:b0:88:5e:95:60:cc:47:bb:5f:e0:8a:31:3f:bc:7c:89:7d:
f4:26:22:38:0b:1e:d6:91:18:8d:ea:5e:00:70:0c:fa:6d:bc:
55:db:56:cd:c1:08:63:ee:1d:02:7a:a2:d7:e6:bc:d1:62:c9:
ac:69:f6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 13:10:45 2023 by rpki-client on console-fra.rpki-client.org