Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/ZZV-BWOQQe3z0khQUCgS1jcQqpg.roa
File: ZZV-BWOQQe3z0khQUCgS1jcQqpg.roa (raw, json)
Hash identifier: hIBDXtpEnTs4rcINq0UYwf9V8Q84iaFvZa2mrtTdWGg=
Subject key identifier: 65:95:7E:05:63:90:41:ED:F3:D2:48:50:50:28:12:D6:37:10:AA:98
Certificate issuer: /CN=919bf29e1aca23a515e11f66960b4eb95c80cfb9
Certificate serial: 01856C53D6720B83C9EE3EACF2D1752984D5
Authority key identifier: 91:9B:F2:9E:1A:CA:23:A5:15:E1:1F:66:96:0B:4E:B9:5C:80:CF:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZvynhrKI6UV4R9mlgtOuVyAz7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/ZZV-BWOQQe3z0khQUCgS1jcQqpg.roa
Signing time: Sun 01 Jan 2023 07:55:11 +0000
ROA not before: Sun 01 Jan 2023 07:55:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 185.51.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:d6:72:0b:83:c9:ee:3e:ac:f2:d1:75:29:84:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=919bf29e1aca23a515e11f66960b4eb95c80cfb9
Validity
Not Before: Jan 1 07:55:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65957e05639041edf3d24850502812d63710aa98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c3:ad:71:5d:78:bc:e5:4f:04:d5:e6:58:37:
e1:e5:8f:f7:a2:0f:91:89:45:3b:f3:91:86:d5:a9:
5f:cb:ea:51:6d:95:e0:3c:99:9b:ef:bc:8e:d0:07:
ac:fd:db:3e:91:cb:3c:b2:50:ac:b5:c8:3c:ba:d8:
c9:6e:18:88:f7:0b:39:44:fa:7e:f2:27:ab:f7:ec:
2a:c0:10:ce:b5:bd:c9:1c:f4:c1:66:ac:55:b5:84:
54:bd:8b:1e:70:88:f6:09:3d:da:73:ff:0a:48:f3:
28:40:db:6f:52:d4:42:de:9a:ea:6b:b7:00:b3:7d:
87:74:62:be:63:45:96:aa:b5:06:aa:57:ba:fc:9f:
d6:c3:38:b6:69:6b:e5:43:4c:f1:6e:3f:b0:59:e1:
59:5f:42:b0:8f:ea:e7:9a:2c:04:1c:00:c7:5d:82:
29:de:4a:e2:11:bf:ad:a8:fc:94:4c:0e:62:a6:a4:
1e:43:9b:17:4a:70:04:59:90:4c:0b:0d:a5:58:32:
7a:35:b8:2e:20:c1:47:f8:7d:60:82:cf:c1:62:59:
8b:b6:8d:b8:6b:30:4f:34:df:17:9b:8e:0d:70:b9:
0d:cd:69:9e:fc:c9:e1:47:8b:87:90:eb:c8:12:f2:
0c:bb:c6:6d:8a:05:a6:35:e8:4c:cd:5f:6b:b0:ae:
ce:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:95:7E:05:63:90:41:ED:F3:D2:48:50:50:28:12:D6:37:10:AA:98
X509v3 Authority Key Identifier:
keyid:91:9B:F2:9E:1A:CA:23:A5:15:E1:1F:66:96:0B:4E:B9:5C:80:CF:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZvynhrKI6UV4R9mlgtOuVyAz7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/ZZV-BWOQQe3z0khQUCgS1jcQqpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/kZvynhrKI6UV4R9mlgtOuVyAz7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:ac:3d:92:fd:c9:b4:2d:da:ed:8e:23:91:e0:00:89:f8:a8:
58:6e:73:12:15:53:93:de:7b:3d:b8:57:b8:67:a9:aa:3e:a2:
0b:c4:9a:3c:8e:b6:86:ec:e9:6e:ee:bc:7d:48:40:c6:a9:b1:
8d:52:38:fa:57:34:b3:32:46:b8:20:1b:7f:27:73:51:10:71:
5d:48:ec:ce:32:52:c4:4a:7e:5e:16:f9:17:cc:6d:e1:12:91:
fc:8e:79:25:9c:ac:f9:7a:d6:7e:ed:be:f0:8f:6c:38:62:e0:
68:4d:eb:db:d6:f4:1c:71:4c:3e:e7:2a:73:22:e0:0a:24:58:
e6:e9:62:4c:b4:d3:21:d7:77:93:17:a3:aa:6a:00:e9:53:4c:
2b:99:c1:77:63:4e:b8:66:2f:17:09:7e:a2:5c:51:64:72:6d:
83:98:21:96:49:9e:fd:d8:f4:81:37:41:47:e9:51:f2:38:87:
05:ad:10:4a:82:7f:d0:06:14:34:2e:4b:03:24:e4:8d:91:27:
8d:f8:23:98:58:73:9e:95:63:21:89:25:f4:6e:ad:7a:a9:34:
be:06:46:a3:d2:2b:50:49:e1:77:dd:21:f9:4d:11:a9:20:2b:
56:d2:fb:a0:11:e4:0b:0f:03:85:af:c1:fc:93:1a:fc:82:9b:
0e:5f:8b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:55 2023 by rpki-client on console-ams.rpki-client.org