Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/zQeW-BtbJuEtoZzp53oOzqPPzxY.roa
File: zQeW-BtbJuEtoZzp53oOzqPPzxY.roa (raw, json)
Hash identifier: gSUDvvqQOkljSgzodtro1zaf+LfSXqNizDcosVT7P9I=
Subject key identifier: CD:07:96:F8:1B:5B:26:E1:2D:A1:9C:E9:E7:7A:0E:CE:A3:CF:CF:16
Certificate issuer: /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial: 01856DA65F8634ECE93309AC8347BAF8AA08
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/zQeW-BtbJuEtoZzp53oOzqPPzxY.roa
Signing time: Sun 01 Jan 2023 14:04:57 +0000
ROA not before: Sun 01 Jan 2023 14:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50469
IP address blocks: 153.92.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:a6:5f:86:34:ec:e9:33:09:ac:83:47:ba:f8:aa:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Validity
Not Before: Jan 1 14:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd0796f81b5b26e12da19ce9e77a0ecea3cfcf16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bd:68:c0:d1:e6:57:eb:33:96:ce:31:69:1a:
9d:60:e0:d7:6d:21:e0:74:a6:66:0c:dd:d0:cf:db:
8f:53:a0:79:b2:a8:63:fa:90:92:59:00:68:e2:3b:
ba:62:6c:9a:a6:a2:d6:d2:c0:68:66:ef:4b:c9:c3:
21:c1:b3:eb:d2:99:33:05:05:9d:96:93:ac:7e:71:
e4:b4:45:a7:98:c4:98:8e:be:f3:12:14:4a:78:e8:
a4:51:fd:14:82:83:85:7d:6e:51:6c:d9:37:3d:e0:
e6:0d:77:05:e1:cb:4c:91:10:02:11:59:e9:c9:03:
b3:af:54:21:10:18:96:f7:43:03:34:33:96:c3:3d:
5d:94:4d:c9:da:9f:e1:90:cd:b8:09:dd:52:d5:8c:
80:db:ed:45:ca:37:44:ba:42:50:df:8b:0d:35:ea:
f9:65:4c:a6:11:08:6c:81:b7:2c:25:b3:30:e9:8d:
bc:f0:ee:89:90:9e:0d:36:3d:e9:97:d9:26:f0:0c:
c0:7c:7a:9c:6e:a5:2d:df:40:c1:ea:f5:b3:cc:8c:
8a:fb:75:40:e6:95:c0:09:ed:f6:78:b1:a1:5e:01:
48:d5:5b:d7:15:aa:82:db:72:75:d9:d6:fc:12:d1:
ef:14:dd:0b:fb:d4:01:01:78:a4:0a:2f:93:4c:f0:
48:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:07:96:F8:1B:5B:26:E1:2D:A1:9C:E9:E7:7A:0E:CE:A3:CF:CF:16
X509v3 Authority Key Identifier:
keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/zQeW-BtbJuEtoZzp53oOzqPPzxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.92.187.0/24
Signature Algorithm: sha256WithRSAEncryption
18:1b:6e:3f:79:7e:01:07:56:86:51:12:11:9e:6b:d6:0a:b0:
2b:8d:ce:af:95:cb:ea:9f:8e:d0:6f:a8:e5:05:95:ae:5b:5d:
a9:45:9b:6b:17:41:26:9e:f5:18:29:a5:f3:5f:64:4c:c2:d6:
0b:c4:04:44:78:41:53:ad:d5:62:ec:35:b5:c8:6b:5f:e9:a2:
13:bf:82:1a:0a:72:27:09:11:a7:ea:1c:cb:f6:08:75:09:5e:
65:59:80:c7:1b:7e:6b:82:29:38:b9:93:2b:f8:de:14:32:a9:
4a:65:15:aa:d9:fc:71:9f:69:61:55:18:dd:18:9a:f9:fd:4e:
f7:8a:1a:f7:73:db:b7:2f:8d:f0:fe:6b:fc:7d:cc:4e:77:30:
d5:23:f6:0a:c2:91:f4:5b:2a:ec:33:e3:4f:0e:b2:27:49:1d:
43:ed:97:9f:a3:3e:44:e1:b4:df:1f:50:68:82:f1:ab:67:8f:
0d:b9:98:bc:a7:9d:85:dd:49:2e:42:a5:37:fc:9b:7c:9a:ce:
bf:a6:e3:79:a5:4f:b3:0a:b8:42:9f:11:ef:d2:22:76:ef:c9:
4d:f4:de:36:fb:c0:c3:d6:81:35:2e:70:fc:b3:09:2a:89:4d:
ff:af:92:85:c9:d5:f0:2d:42:71:af:7a:5b:05:7e:50:cd:2d:
8a:9a:a6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:06 2024 by rpki-client on console-fra.rpki-client.org