Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/ZwHCk_7yuC3zGAqCKimR11oKIBU.roa
File: ZwHCk_7yuC3zGAqCKimR11oKIBU.roa (raw, json)
Hash identifier: EA43nKZR+Kgc5K6eixKPJcCyVo5AqHnO2Xl1FUdRzKM=
Subject key identifier: 67:01:C2:93:FE:F2:B8:2D:F3:18:0A:82:2A:29:91:D7:5A:0A:20:15
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 01856D9D35081C00790E7943B79FC8DA233A
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/ZwHCk_7yuC3zGAqCKimR11oKIBU.roa
Signing time: Sun 01 Jan 2023 13:54:57 +0000
ROA not before: Sun 01 Jan 2023 13:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59729
IP address blocks: 91.232.8.0/22 maxlen: 24
91.218.176.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:35:08:1c:00:79:0e:79:43:b7:9f:c8:da:23:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Jan 1 13:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6701c293fef2b82df3180a822a2991d75a0a2015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e5:e3:f1:94:a3:2c:db:4a:29:aa:8f:48:3f:
2e:3c:52:5d:4f:11:58:54:ae:8a:8e:6a:4b:0e:e9:
09:0a:36:be:27:be:37:69:0a:97:df:80:06:c3:7e:
63:0b:78:97:a5:f4:66:96:8d:01:51:3f:56:2a:c0:
6c:73:14:a4:cb:6d:bc:93:7e:84:7d:ab:28:23:3b:
e7:5e:76:ac:80:3e:0a:2a:63:bf:1b:ea:70:8b:55:
f7:5b:5f:b7:e7:6c:6a:ca:fb:33:71:4d:01:35:40:
7f:c4:80:52:d2:26:df:1a:75:f8:ae:ed:0d:94:13:
69:ef:17:2c:d8:51:2c:31:28:9c:a4:38:d9:d5:53:
a2:a6:ec:69:2e:d4:55:36:f9:44:21:5a:20:8d:29:
6b:d9:10:d5:7b:06:78:2e:07:ab:8e:05:8d:11:96:
ed:1a:f8:f1:83:48:a7:2e:ae:ce:b3:4f:20:18:8c:
63:ab:88:0a:aa:f5:24:f8:9f:b0:b0:00:b8:c8:bd:
67:87:5f:c3:9d:6e:41:34:18:2e:41:75:b5:21:a0:
8e:bb:a3:a9:ce:45:c4:2e:b7:27:d5:c0:a5:b7:80:
04:f9:35:38:65:08:3f:79:f3:c0:aa:cd:b5:68:67:
49:69:1a:0f:f2:f3:87:1c:d0:a8:49:d9:d5:f2:37:
82:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:01:C2:93:FE:F2:B8:2D:F3:18:0A:82:2A:29:91:D7:5A:0A:20:15
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/ZwHCk_7yuC3zGAqCKimR11oKIBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.176.0/22
91.232.8.0/22
Signature Algorithm: sha256WithRSAEncryption
57:e2:f7:df:f2:6d:71:23:3e:f3:c1:eb:37:4b:74:f2:8a:d4:
e8:ed:32:8d:05:d5:f8:9a:64:56:9b:56:63:11:66:c9:9c:b8:
26:98:13:af:64:69:5b:2e:78:71:7c:b4:ce:0a:41:c8:f4:eb:
dd:65:0c:fd:fb:1b:f2:ed:cd:2e:bd:ff:2f:41:17:2c:7f:fd:
58:a3:49:01:da:ea:5c:7c:76:23:5a:4b:1a:33:ac:e3:1c:87:
ba:0a:44:2c:d4:3d:1d:f0:31:cd:4b:33:0a:68:9a:49:a3:01:
53:da:62:ad:4e:92:9a:db:db:c3:19:eb:4a:55:a5:2c:91:5e:
6b:be:3b:1a:6d:a2:59:3f:7c:f8:d7:cb:07:98:35:e4:40:a4:
40:05:d9:c5:71:95:75:b4:b4:d5:1c:6d:77:81:91:91:c0:0b:
a5:58:83:98:1c:39:40:c7:80:cc:fd:af:fc:72:fe:46:b5:cf:
e4:0d:c9:27:ac:a2:a0:04:e5:fd:23:7e:c2:d3:b7:ea:97:1b:
5d:ee:a0:e0:d3:64:26:f7:69:09:e7:fb:83:0d:ad:31:0d:e1:
82:39:c5:c7:86:4d:9b:11:fe:b4:7b:9b:ba:ac:85:e0:d7:18:
46:c0:c6:c8:c0:95:c1:bf:51:ee:5f:5e:9b:ac:9c:81:78:d9:
00:4f:75:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:03 2024 by rpki-client on console-ams.rpki-client.org