Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zuz60sFv6zYENgalMV_jKxIrPyM.roa
File: zuz60sFv6zYENgalMV_jKxIrPyM.roa (raw, json)
Hash identifier: dAP+y3BZp0XbspY2yf/D/lo5FizBkF+s0HzKuEv4F9U=
Subject key identifier: CE:EC:FA:D2:C1:6F:EB:36:04:36:06:A5:31:5F:E3:2B:12:2B:3F:23
Certificate issuer: /CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Certificate serial: 018AA79C06FF6C033C5B24F156513ECD5427
Authority key identifier: CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zuz60sFv6zYENgalMV_jKxIrPyM.roa
Signing time: Mon 18 Sep 2023 09:25:35 +0000
ROA not before: Mon 18 Sep 2023 09:25:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57004
IP address blocks: 185.191.201.0/24 maxlen: 32
185.191.202.0/24 maxlen: 32
185.191.203.0/24 maxlen: 32
185.191.200.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:9c:06:ff:6c:03:3c:5b:24:f1:56:51:3e:cd:54:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Validity
Not Before: Sep 18 09:25:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ceecfad2c16feb36043606a5315fe32b122b3f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:b5:82:bc:ef:74:c2:2e:e8:57:fe:f5:64:
1f:8c:96:ee:ae:88:2c:96:ee:b3:33:0a:3f:9e:5f:
3c:4f:03:1f:8c:e6:f8:b7:d0:17:f0:51:9b:79:f9:
09:15:8e:04:be:16:f2:4d:14:72:9d:81:42:79:0e:
9e:85:8f:c5:bf:c1:19:dc:f4:17:4c:be:e1:d8:96:
8b:d2:5f:51:03:d4:1b:e3:01:53:d2:19:ac:4a:7a:
20:a3:4b:25:11:03:c0:06:98:28:fb:d6:82:3d:c9:
4e:b9:22:bf:66:a5:b4:73:7e:2e:79:5d:b2:0c:25:
fc:bd:18:f6:f4:fd:6d:b9:7c:95:31:cc:c7:e8:95:
11:32:cf:24:88:f7:e3:a7:14:6c:73:d8:20:b7:80:
70:71:eb:07:f1:42:63:60:57:01:f7:d4:0f:fd:55:
00:52:dc:55:12:4c:74:66:f1:52:ea:48:47:f5:26:
7f:2c:33:7c:ab:c0:40:90:91:ce:c2:67:c1:7c:07:
82:c2:3a:48:5e:83:7f:3e:cf:6e:c4:69:84:62:ac:
92:77:40:27:81:6b:85:4e:70:bc:0c:6e:4a:64:ca:
42:c5:1c:b6:d0:3e:e5:8a:f7:c0:b7:ad:a6:e1:e1:
f2:74:46:94:17:bc:ca:10:c1:e9:f0:8e:34:b7:33:
f6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EC:FA:D2:C1:6F:EB:36:04:36:06:A5:31:5F:E3:2B:12:2B:3F:23
X509v3 Authority Key Identifier:
keyid:CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zuz60sFv6zYENgalMV_jKxIrPyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.200.0/22
Signature Algorithm: sha256WithRSAEncryption
af:e9:28:c9:96:23:b5:17:b5:cf:ca:e9:3d:5a:4a:82:8b:06:
b7:eb:af:ba:4e:55:4a:03:d8:de:1f:e0:3d:e3:ff:40:ac:1c:
b8:6f:02:87:a5:78:e6:a0:7a:b0:07:6b:ed:d8:9f:0e:8f:a4:
3a:f8:30:17:d8:ab:dd:cb:26:a6:dc:f6:19:d7:4c:15:18:ea:
9a:13:6a:8b:3c:b9:3d:b7:64:37:cf:a1:e1:14:25:10:11:1d:
e9:ef:3f:c3:35:ef:85:eb:1f:cf:09:1f:e0:cb:ff:ac:7a:e0:
53:0c:f6:46:b1:dc:5c:81:ef:d7:fd:cc:10:bc:05:f3:49:ca:
a7:48:46:83:af:f7:b7:67:3d:ac:79:cb:97:93:15:3b:b0:8d:
85:26:6c:2e:3b:90:cc:cb:2b:97:e0:57:f6:83:24:a9:3c:e5:
03:ad:6c:97:1d:2c:e3:18:75:36:09:a9:60:33:c5:30:11:0c:
27:79:c0:93:05:67:9f:b2:30:da:ba:d1:da:88:b4:d4:de:de:
bf:84:99:a2:85:a5:68:b8:d5:c1:e5:60:9b:54:06:cd:e2:ba:
d0:9a:4f:d0:32:7e:5e:45:f6:8e:fe:d6:7e:c1:ca:a4:56:e8:
59:0b:8d:b2:66:b3:bd:da:e1:8a:80:c6:d6:68:3b:7c:ad:6c:
10:80:1a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:53 2024 by rpki-client on console-ams.rpki-client.org