Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zvYPFrWad4uDGrQHKIUbTWpfgIw.roa
File: zvYPFrWad4uDGrQHKIUbTWpfgIw.roa (raw, json)
Hash identifier: 1uNAOu9DdbxM82HI7+CffEmEQQDeIYv9YrFuu6xd4Qg=
Subject key identifier: CE:F6:0F:16:B5:9A:77:8B:83:1A:B4:07:28:85:1B:4D:6A:5F:80:8C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0187FABF3DBB0C42CE132E8BA660B75AAE32
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zvYPFrWad4uDGrQHKIUbTWpfgIw.roa
Signing time: Mon 08 May 2023 09:44:09 +0000
ROA not before: Mon 08 May 2023 09:44:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7411
IP address blocks: 188.212.121.0/24 maxlen: 24
92.114.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Jun 2023 18:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fa:bf:3d:bb:0c:42:ce:13:2e:8b:a6:60:b7:5a:ae:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 8 09:44:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cef60f16b59a778b831ab40728851b4d6a5f808c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:92:07:2a:bf:4e:5e:46:80:71:04:ed:da:fb:
3e:d7:b3:b3:82:ea:b4:14:bd:43:54:f5:78:da:31:
c3:ac:a8:41:eb:a7:3a:ef:b3:5e:cd:63:3e:29:88:
12:d6:58:b7:50:fb:2a:f8:1c:d0:de:b0:c7:a0:5f:
35:56:52:e8:ed:cf:d7:0a:37:6f:2a:1f:d7:98:dd:
47:dd:53:a5:34:2b:97:70:48:76:a2:47:93:3e:d9:
be:d2:9a:dd:21:86:22:8a:ed:21:f4:09:8f:07:bf:
f7:f2:43:f1:34:01:10:e0:86:df:fc:b0:9e:08:88:
3c:9e:fb:fc:88:3e:72:b2:68:60:b4:ad:15:4c:80:
0b:fc:d2:28:9a:53:83:78:74:18:b1:27:38:01:1d:
bb:f8:12:3f:47:b3:d7:f5:5a:aa:b2:a0:ee:8a:4f:
f2:0d:75:bf:2f:74:32:1b:7e:40:c0:1b:17:c1:36:
2c:59:22:cd:4d:b8:30:13:16:17:1a:49:79:b2:de:
b1:04:eb:01:76:17:8d:d7:a8:8b:24:1b:88:23:a1:
67:3c:b9:59:1e:9b:f6:90:b8:54:ae:5a:0f:18:e5:
1d:32:d2:f6:ce:2c:97:30:d3:51:bf:88:61:b0:47:
50:69:bc:49:d2:c6:29:d6:40:29:84:b8:70:96:5a:
ec:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F6:0F:16:B5:9A:77:8B:83:1A:B4:07:28:85:1B:4D:6A:5F:80:8C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zvYPFrWad4uDGrQHKIUbTWpfgIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.93.0/24
188.212.121.0/24
Signature Algorithm: sha256WithRSAEncryption
10:7a:eb:97:cc:c7:2c:ec:30:73:20:40:13:b3:04:46:c5:b5:
31:e2:7f:00:58:20:ba:f7:5c:f5:64:8e:21:b1:2f:3e:95:c5:
e8:8c:0f:db:2b:fb:dc:e7:e4:49:c5:f9:df:03:55:70:b8:de:
c7:d5:25:60:33:71:e7:f9:ff:91:38:92:46:19:5e:87:78:e6:
c9:0f:2e:ee:bc:38:48:6f:1c:85:54:5d:87:f7:6d:84:77:c6:
57:03:ac:4e:0c:cd:6f:70:46:a0:b8:ed:75:45:ee:8d:1b:16:
90:af:53:b3:67:27:07:bd:0b:a9:7a:d2:10:c1:3c:f7:c5:4b:
ef:6d:cc:67:fa:4d:ec:94:0c:0c:b9:39:4b:a3:a7:45:9f:94:
00:bf:60:58:8f:e4:a0:94:da:ad:00:76:e0:4b:40:eb:03:91:
33:81:1c:3b:60:14:6c:b0:a9:09:a3:ea:a1:de:26:6a:cd:9c:
cb:41:d2:36:4d:6b:0a:9e:7b:c9:65:b8:61:c1:86:70:d4:14:
b4:2e:3d:47:82:58:36:ac:a3:87:58:1a:c1:03:82:20:4f:62:
3a:88:eb:1f:74:dd:c4:5e:f7:5d:73:88:ee:0b:b5:5e:6a:38:
27:83:ee:d9:31:c4:78:c5:0d:99:6a:c3:5d:6d:72:1e:d4:62:
24:49:3a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:15 2024 by rpki-client on console-ams.rpki-client.org