Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/zkn3zdKy_FAMd2--GGB5hHqGFdc.roa
File: zkn3zdKy_FAMd2--GGB5hHqGFdc.roa (raw, json)
Hash identifier: XnY2HlH7d9pAgkPdmXNyFrz5vouR+nJhJWojquRcT5g=
Subject key identifier: CE:49:F7:CD:D2:B2:FC:50:0C:77:6F:BE:18:60:79:84:7A:86:15:D7
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018B5159692E98D8B9320BD1C03C8083B7B8
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/zkn3zdKy_FAMd2--GGB5hHqGFdc.roa
Signing time: Sat 21 Oct 2023 08:28:15 +0000
ROA not before: Sat 21 Oct 2023 08:28:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200436
IP address blocks: 5.57.32.0/24 maxlen: 24
5.57.39.0/24 maxlen: 24
178.239.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:51:59:69:2e:98:d8:b9:32:0b:d1:c0:3c:80:83:b7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Oct 21 08:28:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce49f7cdd2b2fc500c776fbe186079847a8615d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:65:8c:45:ee:ef:f4:d3:bc:a5:6f:3a:2d:
de:91:2c:ee:a0:20:c1:30:99:ab:67:99:2c:21:14:
29:a4:91:2b:ba:db:1f:54:0c:0a:e2:ca:96:99:6d:
91:15:1a:d0:9e:ca:55:14:23:d4:ec:eb:4e:f0:d8:
50:ce:6f:17:11:0f:2e:84:d1:8f:88:a9:2c:62:d0:
40:5c:38:0b:d2:a4:58:27:a0:52:ac:3d:13:f5:67:
d1:7f:36:d0:98:bd:69:b3:16:7b:aa:8d:4c:88:0e:
4c:b7:4e:97:2e:da:5d:eb:e0:f9:ff:6c:0e:9c:58:
75:1a:56:29:93:56:82:5b:c4:97:86:01:c1:3e:0c:
ee:d9:4b:0d:cd:07:ee:25:f6:3b:2a:ae:ec:8f:90:
8a:ff:92:2c:e9:4e:af:b8:87:34:5f:61:3b:89:7c:
d7:2a:5b:4e:ec:15:98:55:72:21:54:e0:38:a6:74:
45:f5:35:6e:29:58:a3:d8:30:62:f4:6a:11:a1:e1:
6d:4d:dc:fe:61:53:02:ef:cb:01:56:56:9b:40:90:
25:f3:da:7f:46:c6:3a:08:c2:6f:ee:b3:e8:81:a0:
14:40:8b:ef:b6:15:09:21:e0:84:ed:ca:e6:c3:73:
b0:40:af:93:e0:ed:47:d7:ad:3d:b9:da:94:92:66:
92:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:49:F7:CD:D2:B2:FC:50:0C:77:6F:BE:18:60:79:84:7A:86:15:D7
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/zkn3zdKy_FAMd2--GGB5hHqGFdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.32.0/24
5.57.39.0/24
178.239.154.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:1e:10:ef:14:c6:78:93:43:aa:31:7d:79:72:41:e6:90:de:
6b:a8:e2:20:0f:d3:b2:f8:f7:28:13:27:fa:4d:5b:6e:35:cb:
d2:d8:37:98:92:a1:57:fb:c5:27:b1:99:7f:27:4e:d8:33:1b:
9b:5a:1c:ac:17:40:6a:7b:c2:ea:cf:58:1e:83:20:d8:ba:83:
1b:9b:be:0b:72:33:fa:df:7e:0b:e2:b1:e5:6e:1f:f3:d9:18:
8e:0c:a7:16:14:01:57:2d:7b:53:b7:f2:cd:79:f2:ff:16:3b:
37:54:ad:ab:4a:1f:7b:53:1d:8a:d7:3d:ab:87:3f:8e:ed:fe:
19:b8:f4:d3:74:c2:f2:5e:20:3a:ce:77:a8:ed:0e:f9:02:f8:
44:11:32:87:f8:c2:25:8f:dc:5a:11:37:8b:59:a7:32:dc:ae:
1a:e0:7a:84:26:c5:19:c0:be:8f:c3:a7:ba:5c:1c:a5:f4:e6:
d0:6c:0d:be:64:6b:1c:e9:2f:a2:d4:0e:1b:2b:de:ef:ba:6a:
95:a9:5a:a9:ef:c5:63:57:ee:5a:7e:67:cc:b8:d7:25:4c:38:
c0:e6:92:81:a6:0c:8d:91:44:c9:5e:fc:d0:59:bf:87:bb:5a:
29:c7:be:f0:cd:77:44:03:13:de:f6:e0:78:88:3f:9e:15:9f:
38:8b:bf:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 11:07:02 2023 by rpki-client on console-ams.rpki-client.org