Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/1zTZGZAjUEyHoryI3IoMXW7sMfg.roa
File: 1zTZGZAjUEyHoryI3IoMXW7sMfg.roa (raw, json)
Hash identifier: 7Ex5FrclpXS2zG3wZs5+ynKrP+zrF7tPtUQze++IuDg=
Subject key identifier: D7:34:D9:19:90:23:50:4C:87:A2:BC:88:DC:8A:0C:5D:6E:EC:31:F8
Certificate issuer: /CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
Certificate serial: 0185A4FC6867D04A4E31CF9FBB10C8A3538C
Authority key identifier: 5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/1zTZGZAjUEyHoryI3IoMXW7sMfg.roa
Signing time: Thu 12 Jan 2023 07:58:03 +0000
ROA not before: Thu 12 Jan 2023 07:58:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 194.33.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a4:fc:68:67:d0:4a:4e:31:cf:9f:bb:10:c8:a3:53:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
Validity
Not Before: Jan 12 07:58:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d734d9199023504c87a2bc88dc8a0c5d6eec31f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1e:fa:a2:ae:07:2b:48:b0:76:84:92:17:e0:
6b:26:0e:fa:5f:78:9b:28:87:f8:ec:c0:00:87:30:
45:cb:a8:18:ff:bf:84:77:ee:ab:28:06:b8:fe:89:
34:a7:20:ed:c3:43:d8:42:33:9f:f7:10:64:83:69:
7e:03:8f:b2:86:c3:f8:a1:45:77:c1:bd:e1:0b:13:
f5:33:41:34:6e:73:fb:a0:8f:61:91:95:6e:d4:d1:
fa:54:18:35:3e:20:b6:47:cc:10:45:cf:1d:21:3f:
33:5a:37:d4:b3:d4:35:fb:67:6d:94:d9:4a:12:fd:
e4:b7:f3:2d:e8:e2:9e:7c:b7:83:6b:4e:af:8c:8c:
3f:b6:33:65:c2:b3:30:12:39:d9:7c:b9:be:49:83:
6c:bf:af:99:cd:4d:b5:30:69:3f:e7:ea:76:98:2e:
4d:5b:4a:d6:ab:6d:d4:b1:60:10:2f:2b:49:a7:5f:
85:74:23:35:5f:fb:67:87:86:03:03:4d:57:99:a4:
06:86:98:c1:37:f7:5e:ff:c5:01:db:e9:e6:56:a3:
79:2c:64:64:17:ac:f4:d9:12:76:2e:ba:67:82:3d:
e6:f1:19:a5:de:16:d5:2a:c9:40:26:39:ae:01:1c:
c2:05:81:ed:14:1c:38:54:2a:74:c8:7b:96:eb:36:
a1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:34:D9:19:90:23:50:4C:87:A2:BC:88:DC:8A:0C:5D:6E:EC:31:F8
X509v3 Authority Key Identifier:
keyid:5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/1zTZGZAjUEyHoryI3IoMXW7sMfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.186.0/24
Signature Algorithm: sha256WithRSAEncryption
13:1f:0b:e6:94:3b:ad:0b:53:01:08:c5:52:88:c7:c3:8a:7c:
b1:2b:ca:24:c2:51:27:cc:3d:e6:e3:19:e4:d4:df:6c:b1:c0:
64:bc:a8:ea:f9:df:10:f9:4c:64:a1:71:dd:98:0e:1f:e8:50:
39:b8:59:8e:1d:aa:5e:f6:b6:70:2f:7b:b5:45:fd:96:a1:31:
16:21:42:43:ef:12:2f:05:54:d1:2e:da:45:38:92:d4:67:11:
82:fc:ee:c6:d0:9e:02:10:1c:64:3b:bc:13:1a:48:b8:5b:34:
e9:b0:81:2c:45:f7:80:05:95:3c:af:21:f4:89:95:7c:be:2d:
ea:c2:55:56:92:54:f8:9e:1c:79:f2:8c:64:c4:eb:3b:f2:f3:
a5:3e:2a:ca:e1:e0:78:da:4e:72:1c:52:54:41:46:2f:ea:8a:
96:1f:31:19:0d:a5:09:da:35:7d:a2:3d:4c:40:36:25:2f:eb:
0a:89:8f:d1:29:ae:7a:f7:3f:56:4f:ef:52:b0:44:88:cf:24:
01:18:3b:41:84:8c:37:37:82:9d:0c:f0:ec:0d:7b:ab:72:cf:
3e:e2:2a:ed:f3:71:bb:f7:d9:fe:d6:8f:3a:9d:4a:e1:2b:c4:
58:ca:40:9b:6b:23:1c:bd:79:02:27:41:68:c0:8f:30:aa:18:
51:f9:dd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:31 2024 by rpki-client on console-ams.rpki-client.org