Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/zsCiTlUp-6U_MKoo8lNp4TPnCsY.roa
File: zsCiTlUp-6U_MKoo8lNp4TPnCsY.roa (raw, json)
Hash identifier: emfIgzjtRb/R/cEawlkg0D4guaYmZsbYumthp+qR2KY=
Subject key identifier: CE:C0:A2:4E:55:29:FB:A5:3F:30:AA:28:F2:53:69:E1:33:E7:0A:C6
Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial: 0189796C96B0D9547CA0DCBF105A04EDA206
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/zsCiTlUp-6U_MKoo8lNp4TPnCsY.roa
Signing time: Fri 21 Jul 2023 17:08:26 +0000
ROA not before: Fri 21 Jul 2023 17:08:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50434
IP address blocks: 195.254.184.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:79:6c:96:b0:d9:54:7c:a0:dc:bf:10:5a:04:ed:a2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
Validity
Not Before: Jul 21 17:08:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cec0a24e5529fba53f30aa28f25369e133e70ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:67:08:1b:7d:c8:b2:e3:5b:15:12:4a:f3:7a:
60:bb:25:a0:71:9c:0f:01:c8:f8:97:0b:e4:a2:ca:
50:bf:dd:f6:73:a2:81:5d:41:96:f0:6e:02:30:15:
95:a1:ae:31:26:b4:75:8a:48:bf:72:61:76:53:06:
cd:f9:e7:56:74:ab:c4:88:22:2d:2c:71:cb:82:33:
35:6c:12:fd:fa:fc:76:f2:ac:23:ae:2b:85:aa:85:
b1:cf:04:ac:b5:da:cb:3b:ae:76:d2:23:f4:ea:76:
3f:bd:04:ed:85:07:2a:7f:e4:00:b0:37:34:a8:01:
3a:57:2b:99:92:87:b6:78:2d:d8:7e:31:b9:56:d6:
61:78:54:7e:3a:01:db:0e:50:89:8b:81:51:ce:82:
a0:0c:38:4b:a4:a9:2e:c3:4b:21:ba:57:6d:7f:1c:
58:41:06:34:7d:40:37:b3:4b:c7:5c:d0:ed:7b:1b:
ce:fc:8e:fe:33:ee:6a:0c:00:fa:09:7c:f3:f2:95:
9a:d1:95:8e:4a:64:77:17:e2:93:4b:97:a7:db:ba:
de:77:a3:37:20:f7:e2:d6:e1:3d:ad:3d:28:97:c1:
01:61:57:44:f9:a4:ea:cb:82:68:d8:ef:20:32:43:
4d:71:51:c2:14:21:ce:b9:8b:5b:6a:c0:7a:3a:be:
40:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C0:A2:4E:55:29:FB:A5:3F:30:AA:28:F2:53:69:E1:33:E7:0A:C6
X509v3 Authority Key Identifier:
keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/zsCiTlUp-6U_MKoo8lNp4TPnCsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.184.0/23
Signature Algorithm: sha256WithRSAEncryption
80:69:08:06:66:b1:72:2c:a4:20:93:06:38:1a:72:e0:3f:5e:
e8:ef:ea:71:24:56:70:36:07:89:34:81:f8:f3:74:3b:0b:35:
8a:69:1b:60:e5:f4:db:97:e3:d4:72:52:e6:b2:53:06:b4:2b:
28:7f:5c:7d:d3:fd:39:94:e8:39:10:1e:f4:b1:e2:d2:fc:be:
4c:8d:62:43:d6:2b:ec:4b:38:58:e9:36:24:7b:d8:49:7b:8c:
90:70:86:fe:da:63:7e:9a:99:4f:5d:c9:a7:ab:6c:aa:a7:96:
da:95:50:08:3d:c8:d5:fa:6c:14:b2:db:67:ae:c0:ae:2b:ac:
e9:c7:2c:b0:01:be:1e:cd:3e:a0:37:eb:d8:d1:ef:56:3d:8b:
eb:0d:40:79:0b:fe:0a:d5:5e:0d:66:6f:21:27:08:77:60:a8:
0e:75:2f:68:89:28:4b:33:0e:5c:e0:3f:ec:5b:e7:be:44:be:
e6:8f:e4:28:b6:ed:36:da:ae:e6:cb:1f:35:57:a6:e7:92:98:
c8:ea:ac:e0:22:2f:75:22:73:00:d0:7c:69:0f:1c:85:ae:44:
3b:03:83:d0:6d:8f:c7:a3:b3:7a:56:fd:50:ba:3f:ec:e4:fc:
22:2c:03:be:29:c2:10:99:20:41:34:39:27:ce:d5:91:e2:73:
8d:9c:b3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:04 2024 by rpki-client on console-ams.rpki-client.org