Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/wN8ClS89sJrH0E3ncmuIIDir_zk.roa
File: wN8ClS89sJrH0E3ncmuIIDir_zk.roa (raw, json)
Hash identifier: KzI6exBdvFILGYbCwp7jZp4w3U7yuRrVBzWeuxFvG1M=
Subject key identifier: C0:DF:02:95:2F:3D:B0:9A:C7:D0:4D:E7:72:6B:88:20:38:AB:FF:39
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018B71229EF275E925171BD546A16F6CB90D
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/wN8ClS89sJrH0E3ncmuIIDir_zk.roa
Signing time: Fri 27 Oct 2023 12:36:16 +0000
ROA not before: Fri 27 Oct 2023 12:36:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19437
IP address blocks: 188.253.8.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:71:22:9e:f2:75:e9:25:17:1b:d5:46:a1:6f:6c:b9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Oct 27 12:36:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0df02952f3db09ac7d04de7726b882038abff39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e5:27:4f:a9:d1:68:7b:72:86:83:d5:b8:72:
c4:21:f2:95:f6:bf:0b:4a:3e:56:21:18:6d:46:4b:
d3:67:5e:5b:a0:1d:be:cd:7e:54:f8:9d:a4:c2:34:
fb:33:82:fb:03:e1:af:4a:35:1f:14:c2:96:77:68:
44:d4:8d:e8:f1:61:2e:36:27:10:8f:ba:c2:07:23:
85:74:ef:9f:5c:46:44:f6:b3:0c:b1:49:7d:5f:4a:
66:bb:88:ad:fe:d9:72:ef:e0:62:9e:83:f0:d3:75:
8d:ce:29:fc:c6:4d:e0:79:db:8c:cf:4c:ae:9a:6a:
49:e4:97:ef:3a:36:fb:1c:45:a8:59:b2:87:77:85:
69:1f:6e:b4:3f:78:07:af:fd:06:8e:76:7f:b6:83:
bd:12:40:c2:c5:68:1d:eb:49:54:eb:8a:24:d0:d9:
4a:b6:42:04:13:1c:20:97:9d:39:46:35:14:36:1a:
66:eb:0e:d5:bb:5c:35:6e:f0:09:d0:51:ea:da:60:
00:47:ae:e6:4c:c9:29:f2:79:2b:a7:1d:d2:38:d5:
b0:ef:a1:ed:ad:fd:3f:30:49:f4:b4:1d:a9:b3:91:
02:01:48:ef:ee:c1:6a:74:ab:4a:25:f4:26:a2:b7:
47:82:81:4c:ce:c6:12:a9:13:5e:18:fb:1a:96:04:
fd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DF:02:95:2F:3D:B0:9A:C7:D0:4D:E7:72:6B:88:20:38:AB:FF:39
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/wN8ClS89sJrH0E3ncmuIIDir_zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.253.8.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:d2:4a:93:72:4e:1f:6a:a2:04:54:70:da:56:a0:72:2d:1c:
4a:61:cf:52:fc:d5:bd:74:33:73:62:00:3b:2f:be:00:8f:57:
c8:39:ec:47:04:37:23:ec:d2:d0:30:1e:12:4c:78:0a:ca:3d:
fc:29:02:0d:16:b0:32:78:2d:d6:9a:78:6c:bf:d9:9e:8b:12:
be:11:4a:36:5d:df:be:22:cb:2b:ba:3c:9d:c7:52:15:ac:bb:
58:cc:7b:cb:1b:33:01:14:a4:e4:01:6c:ba:bf:0e:81:24:32:
e1:68:e4:07:3e:9f:11:84:eb:d4:78:a5:05:4d:dd:ee:7d:3e:
be:a5:a5:3c:26:b8:f4:b5:1d:63:f1:07:e3:37:67:08:f8:ee:
35:01:8b:f2:24:bf:a6:6f:25:7d:60:79:a2:d6:65:3c:ba:8a:
c1:6f:0d:97:e4:32:78:eb:84:4f:e9:92:ba:3e:92:0b:e5:d5:
a6:52:7f:2c:31:18:7d:5f:c3:83:63:87:3b:6d:2e:bf:f4:3e:
c7:a0:ee:9a:3a:aa:71:d5:03:f7:e0:80:0c:fc:07:73:fa:e7:
25:ef:89:37:aa:7e:0f:6d:5f:9e:85:fb:5b:23:b6:04:a0:bd:
20:79:ea:e3:3b:36:6a:99:97:32:16:4e:30:ea:46:09:41:dc:
96:a5:ba:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 11 03:49:07 2023 by rpki-client on console-ams.rpki-client.org