Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/ZTItH_Z4bRbRDBGCdj6aFRyIhUw.roa
File: ZTItH_Z4bRbRDBGCdj6aFRyIhUw.roa (raw, json)
Hash identifier: tlUaaFmfON1Q54kIgxbpfga47WdBLGGryRB0GZxFVYs=
Subject key identifier: 65:32:2D:1F:F6:78:6D:16:D1:0C:11:82:76:3E:9A:15:1C:88:85:4C
Certificate issuer: /CN=201fe6981ebcbc923c8e49f48452441d080e66f0
Certificate serial: 01856D4AC1ED6D19F5E88658DC9931C3D467
Authority key identifier: 20:1F:E6:98:1E:BC:BC:92:3C:8E:49:F4:84:52:44:1D:08:0E:66:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/ZTItH_Z4bRbRDBGCdj6aFRyIhUw.roa
Signing time: Sun 01 Jan 2023 12:24:53 +0000
ROA not before: Sun 01 Jan 2023 12:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197796
IP address blocks: 91.227.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:c1:ed:6d:19:f5:e8:86:58:dc:99:31:c3:d4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe6981ebcbc923c8e49f48452441d080e66f0
Validity
Not Before: Jan 1 12:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65322d1ff6786d16d10c1182763e9a151c88854c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f2:78:c4:5e:db:24:f0:58:dd:f9:3c:bd:d0:
99:a5:2e:07:c5:15:05:55:3b:93:2d:9f:a2:f9:76:
52:1d:8d:3c:2f:3e:ca:db:0b:f5:3d:07:e2:20:cd:
e7:81:55:68:41:00:91:29:f6:23:d5:c7:08:10:63:
bf:c7:09:66:1d:5d:8b:63:90:d0:78:9b:e1:91:98:
00:91:33:03:81:34:53:33:53:34:a1:88:71:f2:4b:
ce:9f:02:6b:64:2f:5c:fe:0c:f7:72:39:54:53:41:
33:eb:0a:5f:4d:11:39:82:1f:04:e6:9f:17:ce:1c:
0b:9b:82:4d:9c:1e:1b:45:2f:d4:41:94:1f:9d:0f:
fe:7e:21:ad:7e:e2:b1:2c:16:9e:67:2c:01:84:72:
78:99:c3:bf:88:f4:84:5c:29:83:6e:74:38:ef:70:
8a:1f:1a:8c:2a:a9:73:9f:31:30:dd:9a:08:4f:5b:
1f:38:6a:ef:0c:f1:6a:9e:c0:fb:13:b4:a6:cf:97:
20:eb:b9:d8:cc:60:24:f1:f2:b8:bc:a1:0b:c1:11:
34:4e:b1:0f:b0:0e:2f:f5:b6:b6:d6:38:28:6e:ce:
e6:41:b5:85:f3:1d:f9:36:fa:13:7f:c3:20:e3:46:
0c:26:63:56:e2:f1:2d:27:fd:70:26:4f:e0:64:90:
60:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:32:2D:1F:F6:78:6D:16:D1:0C:11:82:76:3E:9A:15:1C:88:85:4C
X509v3 Authority Key Identifier:
keyid:20:1F:E6:98:1E:BC:BC:92:3C:8E:49:F4:84:52:44:1D:08:0E:66:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/ZTItH_Z4bRbRDBGCdj6aFRyIhUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.43.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:c0:81:20:bf:91:33:0e:7c:ba:34:a5:50:d2:39:e6:8f:ee:
7b:1d:b0:db:09:a1:8a:7e:7a:29:46:12:e3:f6:a0:87:84:2a:
20:c4:18:63:65:67:2b:f5:e9:25:b2:27:01:97:80:6d:49:1e:
60:26:3f:1e:cc:05:9d:2e:a5:eb:85:26:e3:a5:12:ed:bf:ec:
13:69:be:12:28:56:27:10:58:b7:5c:29:19:3c:e6:51:a6:eb:
57:62:9d:b3:bf:d0:d9:42:99:e2:81:78:a1:10:28:e6:e2:85:
24:1f:b3:3e:35:0d:08:20:12:17:74:9c:eb:b2:7c:2d:95:3d:
1a:96:f8:33:20:9e:f4:a4:60:5a:70:a8:d9:90:f1:dc:2c:e5:
47:49:24:67:74:9b:d3:43:f7:0a:85:45:69:85:02:d8:c3:30:
dd:a2:fe:c4:7b:00:41:04:79:d8:66:a6:78:45:ab:38:f0:8d:
ce:d4:ff:55:87:07:60:72:cc:0a:ae:59:c1:25:03:54:ce:c9:
70:62:3c:a5:18:b0:47:2c:8e:0d:b6:c3:2f:a3:95:a0:f7:68:
67:50:f2:f0:c3:03:64:5c:d2:bc:cf:35:00:68:05:44:32:f2:
d8:1a:93:d7:cf:30:06:23:16:04:e5:31:b0:28:88:b4:a4:5a:
3d:77:40:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:58 2024 by rpki-client on console-ams.rpki-client.org