Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/zqn1TX1dIDD5Zn4d1dGfJxDfmxw.roa
File: zqn1TX1dIDD5Zn4d1dGfJxDfmxw.roa (raw, json)
Hash identifier: rNlJGx4d9grrOFrCf6o9L6vo+IbG2b9MmeEzpm5XbgY=
Subject key identifier: CE:A9:F5:4D:7D:5D:20:30:F9:66:7E:1D:D5:D1:9F:27:10:DF:9B:1C
Certificate issuer: /CN=2f3136ed10998580a517d9598abca33d9ba66599
Certificate serial: 018C6E3EEBF4E7F8BC2CC2D78B062EA98F03
Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/zqn1TX1dIDD5Zn4d1dGfJxDfmxw.roa
Signing time: Fri 15 Dec 2023 16:11:06 +0000
ROA not before: Fri 15 Dec 2023 16:11:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 145.224.192.0/19 maxlen: 24
145.224.192.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6e:3e:eb:f4:e7:f8:bc:2c:c2:d7:8b:06:2e:a9:8f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599
Validity
Not Before: Dec 15 16:11:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cea9f54d7d5d2030f9667e1dd5d19f2710df9b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a6:d7:23:e0:f1:1a:b4:92:23:c5:9b:63:92:
f8:b5:73:bb:c7:c1:7d:59:02:5b:68:e7:7c:79:8d:
73:7c:07:ca:60:cb:20:f0:1c:47:cc:39:02:cb:76:
11:dc:bf:4a:5e:2e:22:3b:1c:6f:e0:89:01:fa:66:
34:fa:d1:c5:d3:33:a8:bc:78:be:9e:39:f4:37:98:
dd:99:96:11:f4:e7:98:fa:4e:87:87:c6:68:03:ce:
c9:b0:bb:3b:61:40:85:9f:d4:2e:ce:29:13:97:db:
18:f2:e6:ea:07:3e:cc:1f:ac:98:0b:7a:8a:45:76:
b3:f8:e9:2d:b6:7c:7b:67:c6:4c:bd:2a:76:b7:69:
e6:7d:f7:20:7b:e3:27:76:af:79:12:af:05:5f:9b:
16:33:85:2b:2f:ce:bf:a3:79:c3:f6:1e:38:5b:4a:
15:0b:6c:13:c6:9a:a4:fc:75:88:df:b6:f9:78:fb:
34:bc:37:68:e3:23:76:a7:67:37:9f:5a:2f:fb:b4:
97:65:ec:25:61:ba:e0:d5:61:d4:8d:32:23:f6:90:
91:5b:3b:c9:8e:db:f1:23:a1:b2:81:ae:41:de:9f:
54:f7:99:37:2b:04:9f:04:da:00:2e:6e:13:77:ec:
e8:f2:28:81:42:53:0d:94:cd:ae:57:b4:27:75:24:
b6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A9:F5:4D:7D:5D:20:30:F9:66:7E:1D:D5:D1:9F:27:10:DF:9B:1C
X509v3 Authority Key Identifier:
keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/zqn1TX1dIDD5Zn4d1dGfJxDfmxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.224.192.0/19
Signature Algorithm: sha256WithRSAEncryption
b1:f5:60:df:ee:ef:fa:b5:d7:3a:40:13:f3:d6:e3:f5:18:37:
b8:09:cf:b4:eb:42:c6:46:ab:76:cb:18:62:21:52:a6:e1:93:
df:29:85:39:58:3f:53:69:7c:75:7f:30:2c:71:da:4d:80:43:
70:58:bb:3a:98:52:e5:15:77:68:1b:29:f7:12:12:45:4a:be:
f5:1e:0e:4f:9c:12:42:94:b8:80:b8:b8:72:bb:75:94:c0:c5:
7b:7e:c1:47:fb:c9:c1:43:b7:91:a8:73:f8:6c:e7:d1:30:00:
56:93:57:f5:9c:79:35:2b:4c:e7:8b:42:29:c2:b1:16:8e:62:
aa:86:23:17:49:25:67:a7:a7:06:99:68:eb:86:06:af:fe:c3:
c1:83:65:85:55:aa:13:46:03:18:3e:5d:a2:fb:e8:31:c4:6c:
8d:1a:45:04:55:6c:ad:99:e6:fc:e0:b2:b2:69:99:58:a1:e1:
7c:3c:d4:80:5e:22:95:27:c8:45:92:04:b4:3b:43:4c:a6:19:
3b:8d:25:3f:1e:d4:97:9d:ff:25:b1:f2:b2:16:4c:93:41:43:
c1:37:ef:f4:ce:87:f9:78:b1:68:ee:7c:d0:6f:26:1d:45:1d:
5f:d3:9d:c5:a6:76:fc:d8:c0:78:6c:8e:a5:99:be:17:38:f6:
05:8b:d9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:54 2024 by rpki-client on console-ams.rpki-client.org