Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/ZnUNF4nRhpwPwjUdprrn81T8OuM.roa
File: ZnUNF4nRhpwPwjUdprrn81T8OuM.roa (raw, json)
Hash identifier: EKNZmtrOAGcrGGNy5mZSXDB+aEVOs8XmuewLks9siuI=
Subject key identifier: 66:75:0D:17:89:D1:86:9C:0F:C2:35:1D:A6:BA:E7:F3:54:FC:3A:E3
Certificate issuer: /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Certificate serial: 01856E4AFF7C403EC95F07F99DCF7ED4AEE2
Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/ZnUNF4nRhpwPwjUdprrn81T8OuM.roa
Signing time: Sun 01 Jan 2023 17:04:46 +0000
ROA not before: Sun 01 Jan 2023 17:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9087
IP address blocks: 193.46.200.0/24 maxlen: 24
193.46.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:4a:ff:7c:40:3e:c9:5f:07:f9:9d:cf:7e:d4:ae:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Validity
Not Before: Jan 1 17:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66750d1789d1869c0fc2351da6bae7f354fc3ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a6:34:a4:8b:2c:98:90:ea:06:7a:95:ca:49:
16:61:f4:e2:e0:33:27:eb:99:e0:94:e7:ab:35:de:
b4:dd:34:c7:18:15:bb:53:e2:ec:75:91:a0:5a:50:
9f:f4:df:17:45:fd:50:d4:d9:86:49:d8:7b:9f:64:
90:e8:16:9c:d6:c2:22:3d:bf:e7:06:2d:b5:00:76:
14:00:72:2c:08:dc:89:51:c3:e7:26:93:25:10:9d:
41:1e:f3:e7:32:53:9b:7f:c1:15:aa:bb:25:67:18:
33:03:59:4d:66:5f:43:43:c9:38:30:c6:6d:66:d6:
d2:fe:88:c2:34:59:a0:e1:51:bc:eb:fe:09:4e:58:
b8:24:65:81:83:04:3a:92:e4:39:5b:3d:e8:a8:e6:
2b:e0:58:63:c6:d6:27:75:8a:f6:44:19:4e:22:e5:
07:b3:c8:8f:2f:b5:35:a2:d2:49:17:b6:30:fd:c7:
71:20:34:d7:e2:29:1e:76:c5:b2:d4:a4:23:3a:48:
7f:51:a6:24:dd:e4:de:bf:77:56:07:62:96:8b:98:
5b:98:bd:6b:89:63:1f:fc:31:68:ca:99:57:61:95:
3a:0a:9a:6f:f5:51:bf:61:7e:d9:7e:15:4f:ed:b8:
25:7d:7b:a9:cb:0a:66:50:58:14:80:ff:17:f8:55:
c0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:75:0D:17:89:D1:86:9C:0F:C2:35:1D:A6:BA:E7:F3:54:FC:3A:E3
X509v3 Authority Key Identifier:
keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/ZnUNF4nRhpwPwjUdprrn81T8OuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.0.0/24
193.46.200.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:0c:60:fa:89:fe:25:ce:19:ef:3a:b2:bc:e5:d4:4e:b7:97:
79:45:1e:d6:4c:1b:e1:b8:b1:13:1a:c7:d4:b9:47:c5:38:00:
2f:31:80:71:12:24:83:80:7c:93:c3:b7:28:f6:c5:6a:2b:a8:
bb:51:dd:88:66:f1:92:a9:e5:13:e5:2f:37:c8:57:4d:96:bb:
01:a6:d6:f2:e3:3a:f6:d0:11:2c:3b:18:db:26:2b:63:0d:5e:
be:80:e3:38:76:e5:27:5f:83:f7:58:51:9e:e2:6d:e1:14:a8:
98:1c:f7:98:ba:ce:09:7f:e7:06:08:ef:7e:81:30:42:04:e4:
f1:29:28:bc:e3:99:6e:37:01:0b:32:ee:47:1a:ba:5d:c7:52:
e4:e5:a4:02:99:4a:50:06:a4:38:a7:45:40:13:63:ca:16:67:
8f:ed:89:17:a0:a5:e7:c0:4c:bc:7b:0b:26:da:d1:66:cb:b1:
7d:7e:2f:43:bb:80:df:9b:ba:1e:31:b6:09:bf:ee:52:d0:42:
cb:27:dd:44:05:a9:c4:f4:12:c2:b7:6e:74:c7:85:59:ea:96:
cc:3c:5f:c3:33:33:c4:c8:f1:89:95:ef:a4:7d:d2:c6:45:34:
e2:d6:b9:56:5b:3d:09:cd:de:9e:15:11:73:a8:dc:cc:45:68:
dc:06:84:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:53 2024 by rpki-client on console-fra.rpki-client.org