Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/2ZH3yFVVRGbX8VfDeXtyilS0DL8.roa
File: 2ZH3yFVVRGbX8VfDeXtyilS0DL8.roa (raw, json)
Hash identifier: /dPQVS1YesvKBqywCP5MbvhPFOKMMpAdv7K68HSm5d4=
Subject key identifier: D9:91:F7:C8:55:55:44:66:D7:F1:57:C3:79:7B:72:8A:54:B4:0C:BF
Certificate issuer: /CN=64d4e8723450d0a710c32d90ffea18529104e538
Certificate serial: 01879380C2DAD5B77D7D16B7F343AAB5D5B8
Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/2ZH3yFVVRGbX8VfDeXtyilS0DL8.roa
Signing time: Tue 18 Apr 2023 08:35:01 +0000
ROA not before: Tue 18 Apr 2023 08:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204957
IP address blocks: 193.203.49.0/24 maxlen: 24
193.203.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:80:c2:da:d5:b7:7d:7d:16:b7:f3:43:aa:b5:d5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538
Validity
Not Before: Apr 18 08:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d991f7c855554466d7f157c3797b728a54b40cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c1:dd:78:0a:57:f0:16:7f:8c:cb:76:66:27:
4c:e9:bb:cf:50:1c:48:86:2c:69:46:b6:86:de:f1:
15:2e:00:e6:e8:64:af:1f:5d:59:5d:84:7c:bb:70:
5d:12:18:97:13:4e:9b:06:f5:3e:6e:9a:17:cf:23:
0b:13:97:b1:3e:9e:6d:5d:cd:37:1c:38:d0:b8:d7:
f7:34:78:b2:7d:9d:b5:25:25:e1:ff:b7:ee:ba:ed:
2f:48:09:a6:e6:db:29:34:eb:ef:c3:1f:ac:40:8d:
bf:fe:18:67:a8:07:c0:f3:e8:2a:50:89:f9:52:29:
94:40:3f:94:c4:3f:0b:7f:9e:1d:1e:34:67:a7:9a:
84:17:9f:f6:52:c5:10:aa:3b:32:9d:63:27:d3:82:
da:c3:a3:74:d2:c6:c0:30:9b:86:e9:f5:53:d8:00:
0f:17:af:40:7f:4a:78:fc:3c:8a:af:af:55:29:11:
45:58:d6:6f:db:2d:8c:2b:81:30:24:4a:ed:95:ca:
b8:80:6b:19:99:07:ac:83:c9:35:0f:3f:95:fc:2b:
7e:4f:27:21:f4:41:19:0a:b4:71:89:cb:60:7c:e1:
5e:5a:73:27:d9:69:ae:d5:ba:6d:c3:8c:31:70:69:
c6:3e:00:a4:a3:1a:20:a6:b5:26:00:fb:90:27:96:
e0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:91:F7:C8:55:55:44:66:D7:F1:57:C3:79:7B:72:8A:54:B4:0C:BF
X509v3 Authority Key Identifier:
keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/2ZH3yFVVRGbX8VfDeXtyilS0DL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.48.0/23
Signature Algorithm: sha256WithRSAEncryption
77:9c:2a:5c:dd:3a:38:19:f2:78:ad:b6:91:5a:d6:b4:f3:23:
4a:14:58:ee:64:b8:0c:97:ce:5b:4f:e8:db:02:11:43:2b:86:
90:5d:9f:c9:58:ce:9c:63:ca:9b:bc:94:be:ff:0b:00:62:f9:
dc:dd:dc:86:4d:d9:3d:a3:a0:11:75:64:01:73:1b:b9:a9:4b:
0c:7d:d3:22:7c:f3:3e:6f:80:c1:7d:d4:81:08:2d:dc:a4:83:
2f:3a:72:66:17:47:18:e9:9f:fe:b1:8a:62:d4:ec:98:40:dc:
98:13:55:99:20:f6:55:04:52:4f:a6:ad:fe:78:9d:b0:00:9a:
2a:18:30:a7:14:84:89:00:11:5b:ac:da:88:6a:ed:34:c2:0e:
ab:67:71:e6:01:53:40:e1:49:93:ac:27:c3:68:59:1d:7f:e8:
cb:c2:8c:d1:a1:f2:e9:9d:60:dd:0c:25:9e:6e:04:04:8d:d6:
fa:b5:7b:9a:93:96:34:ee:1e:2e:aa:1f:b1:da:bf:93:3e:f7:
ec:d8:31:63:f0:5d:95:4b:6e:7d:56:e4:76:bc:2c:4e:f6:38:
55:e6:25:69:ad:6c:4c:80:22:b4:af:3e:a1:63:eb:e0:1c:16:
2e:4c:18:ec:54:62:34:be:55:6e:bb:72:e5:22:44:6a:02:c6:
72:85:2e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:33 2023 by rpki-client on console-fra.rpki-client.org