Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/Z7z14fwykjIlp7POD5tpWdIXAYI.roa
File: Z7z14fwykjIlp7POD5tpWdIXAYI.roa (raw, json)
Hash identifier: bwVdVx0N3X9Et2u+SnUPR5sM41R5N/NK89PcWpbVp0M=
Subject key identifier: 67:BC:F5:E1:FC:32:92:32:25:A7:B3:CE:0F:9B:69:59:D2:17:01:82
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018C8305A37D2531937516FB6EDD9409D6C6
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/Z7z14fwykjIlp7POD5tpWdIXAYI.roa
Signing time: Tue 19 Dec 2023 17:00:33 +0000
ROA not before: Tue 19 Dec 2023 17:00:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61135
IP address blocks: 212.68.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:83:05:a3:7d:25:31:93:75:16:fb:6e:dd:94:09:d6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Dec 19 17:00:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67bcf5e1fc32923225a7b3ce0f9b6959d2170182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:47:de:a0:5a:b4:1d:55:15:40:c1:89:e0:
9f:83:cc:13:de:c3:25:4d:1f:b2:77:17:7c:fc:05:
71:5c:56:ed:1e:58:de:04:74:aa:bd:b8:23:5c:a3:
06:24:96:72:72:86:55:6f:d1:3b:e9:33:66:a6:ea:
ca:52:bf:55:88:6d:db:f7:22:04:bc:26:fb:46:78:
f5:6e:69:ea:ea:98:41:a0:17:58:ff:d7:29:38:01:
d5:6b:9f:7e:68:5e:bc:80:0f:e7:b9:62:6e:9c:0a:
eb:88:34:8f:a0:0b:e8:8d:38:1a:d4:6f:17:78:79:
43:68:b1:7d:de:04:2c:19:36:60:b3:b2:d7:ea:90:
5e:45:45:d7:f9:1e:a2:75:7f:6f:75:bf:87:84:72:
10:01:1e:33:e2:0a:87:44:f2:1a:1b:6a:38:89:37:
95:4d:bf:74:62:01:6c:18:d1:8c:85:3c:59:6b:ce:
96:a6:f4:83:37:99:11:48:56:22:84:77:9b:ea:d4:
ae:68:b7:d4:98:02:e4:40:c1:13:30:7e:0a:f5:ed:
7b:7b:c0:6b:f2:7a:f3:de:1e:14:9f:b2:d4:00:1b:
91:7a:c2:8a:62:2e:a5:3e:5f:dd:50:0f:4b:b0:f7:
c1:3b:71:6a:97:69:b0:82:40:d6:4c:ae:5f:96:61:
27:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BC:F5:E1:FC:32:92:32:25:A7:B3:CE:0F:9B:69:59:D2:17:01:82
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/Z7z14fwykjIlp7POD5tpWdIXAYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.55.0/24
Signature Algorithm: sha256WithRSAEncryption
77:7b:82:c8:d9:a3:60:65:68:99:c9:ed:32:a3:95:0e:a9:a7:
f9:26:72:a6:ff:c5:7c:ff:80:5c:f3:0e:db:18:5a:c2:8c:44:
9e:a7:66:27:51:11:d0:3f:ca:d8:7a:4d:c3:59:9b:02:de:4a:
1f:2f:da:0e:b8:d8:7b:40:04:93:1b:a9:07:70:cc:29:e6:d0:
31:bb:be:3d:e4:66:ad:a0:28:37:81:05:23:4d:94:e3:d5:18:
4b:94:73:77:f2:ed:7f:59:d1:cd:58:95:6b:e9:2d:7d:92:64:
41:e1:08:52:f1:e3:74:78:80:4b:96:37:4f:d0:b5:f3:ed:45:
00:b5:db:0b:44:3b:e5:7c:f9:3b:2d:6f:31:2a:84:ac:7c:41:
af:26:e6:07:07:b7:5e:d9:42:ce:48:8b:6f:4d:1f:03:0d:fc:
2d:b3:e3:05:29:23:14:c6:4a:f3:3f:0e:fc:68:e7:7f:b5:a3:
d8:77:95:6f:97:64:7b:1e:ab:3c:6d:ad:70:ca:4f:9e:84:23:
f3:be:59:8c:a3:25:76:0b:c4:5b:b0:64:f8:85:13:55:c1:8b:
e7:3a:0f:72:49:a7:13:54:3a:88:46:35:5a:4a:c6:fc:68:0f:
93:9b:b2:38:74:98:23:7c:22:42:9c:f0:df:64:e3:4b:5f:3f:
bf:f4:b1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:15 2024 by rpki-client on console-fra.rpki-client.org