Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/ZsOJBkSk2sd1vMeTFHPKaBpc-k8.roa
File: ZsOJBkSk2sd1vMeTFHPKaBpc-k8.roa (raw, json)
Hash identifier: x45RbPk9P/nRRv+dwpDAk3P/F/YSRAaWLnCv007J5Pg=
Subject key identifier: 66:C3:89:06:44:A4:DA:C7:75:BC:C7:93:14:73:CA:68:1A:5C:FA:4F
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 0187728544E4ACD1FC5479BF976BEE3F790B
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/ZsOJBkSk2sd1vMeTFHPKaBpc-k8.roa
Signing time: Tue 11 Apr 2023 22:52:29 +0000
ROA not before: Tue 11 Apr 2023 22:52:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 193.9.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:72:85:44:e4:ac:d1:fc:54:79:bf:97:6b:ee:3f:79:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Apr 11 22:52:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66c3890644a4dac775bcc7931473ca681a5cfa4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0b:2b:2a:91:19:70:ec:23:d5:7a:a3:f8:14:
36:0c:85:47:71:c5:31:b6:06:3a:29:8b:22:bc:fe:
16:c5:f2:28:88:a6:8b:f8:ec:a3:bc:cf:c9:58:35:
42:5a:b5:43:26:71:9c:1d:ca:3b:c1:17:a9:2f:91:
33:57:32:dc:58:76:2f:0f:e6:17:a5:10:95:4f:e6:
8f:fa:e5:ff:ee:16:07:9f:6b:6f:79:19:95:98:51:
78:3c:a2:fe:f1:ca:fe:5b:36:38:bf:cf:9e:f7:6b:
2c:6d:44:9c:98:82:9d:e5:84:7c:6a:c5:b0:ab:b5:
48:01:70:73:19:94:c4:7f:f0:25:b3:a4:d9:1c:45:
42:2b:67:90:84:b5:42:85:e7:e3:c5:63:d2:df:56:
4b:65:de:1b:e1:cd:ab:6a:f6:e5:19:b3:c0:3a:8d:
15:5a:36:ba:53:b4:4f:97:07:26:70:1f:54:74:22:
be:c9:03:b3:0a:41:8a:76:ec:4a:32:c2:2f:5a:54:
b7:64:12:02:4b:20:f4:b1:04:76:c4:52:5d:6f:ba:
6a:bd:53:b3:c8:ca:be:1b:c2:3e:80:cd:ec:49:38:
3c:5a:fb:ec:00:f8:49:92:05:11:4c:e9:cc:77:99:
ad:6d:c4:43:d5:c7:79:6e:d6:ca:32:da:1c:5b:89:
f4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C3:89:06:44:A4:DA:C7:75:BC:C7:93:14:73:CA:68:1A:5C:FA:4F
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/ZsOJBkSk2sd1vMeTFHPKaBpc-k8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.51.0/24
Signature Algorithm: sha256WithRSAEncryption
04:95:3e:76:65:d1:b4:1d:f6:5e:ed:bf:c4:65:81:45:f4:3a:
6a:32:a3:13:ed:f0:46:9e:42:38:a0:dc:55:3c:3d:75:71:f7:
b9:8f:3e:32:ab:f2:f8:79:59:09:0c:e3:b1:55:7f:78:b2:a1:
ea:37:6a:83:f9:14:28:ac:ba:30:fb:3a:02:15:42:21:3f:b5:
a9:11:a6:0e:d6:11:1e:39:f3:72:10:bd:17:ac:d8:f6:1a:7b:
f6:08:39:e5:6c:ae:03:79:e5:d5:a3:61:c8:8d:29:8a:d3:05:
53:96:6c:cb:3e:f1:a5:0b:12:9b:34:65:98:15:43:76:50:1d:
01:0e:e7:97:89:33:bd:cf:ec:df:6c:fd:8b:98:86:27:8d:58:
dc:66:19:ab:08:d3:97:af:ea:d9:bc:3b:c4:61:39:29:c9:9a:
d0:ac:60:a3:83:8b:9f:78:41:e3:1d:07:d2:d5:3a:60:2a:83:
40:82:21:35:3d:a4:2b:4d:90:6c:39:0e:fb:e4:5e:37:36:b3:
a3:6c:91:e5:a5:c3:33:28:0f:08:9e:97:7a:b8:fe:f1:55:38:
6d:84:0c:b3:21:5c:57:2c:69:33:40:b4:7a:b5:12:09:9f:65:
f2:af:e4:a7:87:76:18:b2:11:e9:c5:3d:6a:26:59:67:21:c0:
95:e8:a4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:49 2024 by rpki-client on console-ams.rpki-client.org