Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ZQYc9QoIz9CRO0hu6w5B0HXJ20E.roa
File: ZQYc9QoIz9CRO0hu6w5B0HXJ20E.roa (raw, json)
Hash identifier: 5uMm8qrjnyvHZyp3OYzXiKAmGLq2iKqt9KtkAItkC6g=
Subject key identifier: 65:06:1C:F5:0A:08:CF:D0:91:3B:48:6E:EB:0E:41:D0:75:C9:DB:41
Certificate issuer: /CN=963a0fc47a7adf62845ad6dcd7fb761a6c19fedb
Certificate serial: 01856E142E0E5CFDD9BCA8E14010914A4643
Authority key identifier: 96:3A:0F:C4:7A:7A:DF:62:84:5A:D6:DC:D7:FB:76:1A:6C:19:FE:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ZQYc9QoIz9CRO0hu6w5B0HXJ20E.roa
Signing time: Sun 01 Jan 2023 16:04:54 +0000
ROA not before: Sun 01 Jan 2023 16:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58213
IP address blocks: 91.216.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:2e:0e:5c:fd:d9:bc:a8:e1:40:10:91:4a:46:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=963a0fc47a7adf62845ad6dcd7fb761a6c19fedb
Validity
Not Before: Jan 1 16:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65061cf50a08cfd0913b486eeb0e41d075c9db41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:e1:52:fb:fc:3e:b2:fb:45:9f:31:08:b1:
49:df:d3:73:0c:7c:b4:e6:61:48:10:78:47:0b:a4:
c7:1c:db:bd:f5:b4:d8:29:a9:91:78:c5:3f:00:15:
aa:8a:0f:6b:77:a4:85:cf:59:f4:bb:de:49:d5:b4:
01:fe:22:be:62:3e:fe:96:d0:e6:be:87:11:a5:ab:
9b:94:1e:f8:17:ac:8f:50:a2:aa:a1:21:e6:9e:8f:
94:15:5c:dd:f0:e9:f7:7b:99:a8:1d:1d:7d:ac:2b:
c2:c1:7f:39:83:89:31:ab:2b:a6:71:af:0c:59:b4:
32:fa:09:13:9a:19:ec:b1:37:c1:38:9d:18:d2:ea:
b7:b4:b5:e8:10:dd:46:e9:ad:34:2f:ea:da:ce:16:
37:dd:b2:49:11:f2:03:85:ee:cc:10:3a:b3:bb:9d:
d5:74:5b:8a:6a:58:51:a9:60:5d:8b:0b:4c:c8:e4:
bd:85:eb:dc:12:12:f3:d0:9e:27:26:ec:7e:1d:c4:
1d:64:10:67:95:63:ef:58:bb:a4:cc:40:24:c4:22:
fd:67:70:2c:83:99:e3:79:23:aa:6d:7d:43:8d:26:
a4:a7:8d:8c:82:46:50:17:19:3d:a3:2f:04:ef:17:
12:a8:1d:2c:74:97:99:cc:59:b8:2d:9a:6e:c0:51:
56:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:06:1C:F5:0A:08:CF:D0:91:3B:48:6E:EB:0E:41:D0:75:C9:DB:41
X509v3 Authority Key Identifier:
keyid:96:3A:0F:C4:7A:7A:DF:62:84:5A:D6:DC:D7:FB:76:1A:6C:19:FE:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ZQYc9QoIz9CRO0hu6w5B0HXJ20E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.74.0/24
Signature Algorithm: sha256WithRSAEncryption
66:dc:7a:e4:b3:52:96:33:7b:cb:ea:17:e3:40:10:36:89:c6:
59:42:60:2a:1c:f5:af:56:e6:b3:f0:db:67:f5:b6:e8:95:07:
d7:ed:20:56:8c:fd:37:d6:fe:ef:56:57:49:e6:c4:22:19:f8:
6e:50:23:61:17:df:84:32:ce:28:2d:3d:c9:f3:65:5c:cd:f4:
3b:56:25:a8:1e:c9:59:30:6a:27:8d:e6:2a:71:4e:97:3a:d5:
92:5a:65:78:a1:9a:81:f6:63:1c:4f:23:cb:d8:1c:c4:5f:62:
7b:82:0f:06:8a:22:6e:c9:d8:c7:b5:71:d8:cc:e6:d0:6d:c4:
f2:df:89:e6:f9:bb:e9:9d:ce:27:50:90:53:48:64:39:af:a7:
ff:53:60:32:7c:3c:c4:93:c3:33:9d:ea:88:9f:02:58:94:42:
16:4b:f3:00:a4:87:4d:9f:97:74:ef:6c:52:0a:f9:18:c4:90:
1c:8f:e4:ac:2f:45:c0:9d:3d:dd:77:73:08:85:9e:0b:2a:85:
76:42:04:b1:6c:08:69:7e:03:9c:a7:70:bc:d2:d3:fd:13:5f:
69:c5:a3:10:d3:3a:f0:b5:b2:83:f4:34:6d:29:06:83:85:58:
50:aa:4f:7a:0d:a9:c1:ea:d9:2a:b0:01:6f:b0:12:e8:1d:9f:
40:5c:4b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:41 2024 by rpki-client on console-ams.rpki-client.org