Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/zx-CC9gDCAOkZ80tCco0QuhiW_8.roa
File: zx-CC9gDCAOkZ80tCco0QuhiW_8.roa (raw, json)
Hash identifier: 688ZvxiItFpajb5aMhnNd+W1Ko+Gznyhkfw/LKfGgEc=
Subject key identifier: CF:1F:82:0B:D8:03:08:03:A4:67:CD:2D:09:CA:34:42:E8:62:5B:FF
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0185E91E951EC7EA5673A57781423E501E37
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/zx-CC9gDCAOkZ80tCco0QuhiW_8.roa
Signing time: Wed 25 Jan 2023 13:29:33 +0000
ROA not before: Wed 25 Jan 2023 13:29:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60583
IP address blocks: 89.36.143.0/24 maxlen: 24
217.19.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e9:1e:95:1e:c7:ea:56:73:a5:77:81:42:3e:50:1e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 25 13:29:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf1f820bd8030803a467cd2d09ca3442e8625bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:4b:d2:43:0c:0d:ec:96:5b:bd:cc:4f:23:
41:dc:c8:41:94:aa:af:7f:58:6e:a5:f4:52:b4:88:
bc:7b:f2:c5:79:22:ff:2f:5c:33:83:e0:69:3c:9a:
74:a7:d7:05:a0:2d:b8:b3:0e:e6:87:ce:cd:de:c5:
de:27:d4:6a:c3:79:1a:4d:26:8f:25:28:ef:93:58:
c5:31:4f:d7:c4:75:e7:55:c2:cf:aa:9d:f5:be:49:
ea:2a:14:94:f4:9f:ec:a1:ea:f9:43:c4:05:a5:66:
b8:4f:1d:c5:ba:0c:13:43:63:17:03:05:29:1a:5c:
c2:9c:16:af:3b:78:56:e5:12:cb:6c:e3:0a:fc:62:
d0:2a:c3:8e:a2:cc:c0:30:2a:a9:4a:e4:44:ac:50:
7a:15:07:3b:47:9a:2e:c4:7c:75:e6:31:bb:12:8a:
7e:8d:68:f8:ca:41:c9:32:bb:63:aa:2a:f3:35:fb:
85:cd:65:f9:1c:45:46:52:4a:a1:d9:13:ad:2c:e2:
68:15:b3:20:c6:42:69:7f:2c:29:98:59:1d:b2:4b:
a2:c6:20:45:9f:fe:39:b3:7f:b1:11:a0:0f:d5:97:
74:71:7f:e2:c0:e7:22:56:4a:79:88:b1:1a:1d:c2:
8d:f5:4d:cd:23:20:98:39:e0:00:66:77:75:e4:14:
12:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1F:82:0B:D8:03:08:03:A4:67:CD:2D:09:CA:34:42:E8:62:5B:FF
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/zx-CC9gDCAOkZ80tCco0QuhiW_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.143.0/24
217.19.12.0/24
Signature Algorithm: sha256WithRSAEncryption
34:f8:7d:74:40:f9:64:58:9a:9a:48:40:82:d5:2b:c7:36:55:
e7:6c:91:22:8a:78:99:ff:06:39:64:cc:ef:66:40:27:ab:61:
0b:90:1b:36:3f:ad:f1:08:45:1a:6b:93:dd:c8:d2:6c:65:3b:
37:9b:58:eb:a5:7e:28:05:d8:a6:57:18:d7:d2:6c:f3:e4:f7:
27:45:98:a7:b2:a8:10:32:fd:ae:60:81:d7:9a:81:c2:c8:69:
09:5f:d0:d3:e0:ae:81:7f:2a:23:1b:5b:2d:f6:21:0b:0a:37:
d2:3b:7a:62:8c:16:07:00:0e:8f:6b:cf:5d:91:f7:e8:dc:30:
52:0f:9a:a9:58:19:06:25:ba:97:26:a2:c7:ca:6a:89:05:53:
49:75:ef:e3:5b:45:83:d3:f0:f3:03:a4:8b:5d:ab:d1:c0:33:
5b:f0:79:5c:1a:63:be:68:60:d4:47:55:dd:80:34:de:13:7c:
74:22:37:32:4d:6d:e7:eb:95:10:c8:4c:f5:db:b0:4b:e6:c6:
66:82:a9:88:6f:e8:c1:03:d0:71:a8:80:47:e1:c0:66:1c:18:
d8:cd:c5:9a:f1:02:93:c4:41:fb:ac:ca:eb:63:ab:35:7d:9b:
67:ae:72:2f:50:04:58:dd:1c:e8:52:15:93:3a:2d:61:c4:96:
69:c6:c7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:05 2024 by rpki-client on console-ams.rpki-client.org