Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/ZyrBCO-ZBI5qNGKk0vLCdZX-IC4.roa
File: ZyrBCO-ZBI5qNGKk0vLCdZX-IC4.roa (raw, json)
Hash identifier: EqKQVDuJTcvkGWRVISM7U8V1jGhtXhzon4KHjNAnqYY=
Subject key identifier: 67:2A:C1:08:EF:99:04:8E:6A:34:62:A4:D2:F2:C2:75:95:FE:20:2E
Certificate issuer: /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial: 01856C1C767F522C11600D7D3D20D555ED81
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/ZyrBCO-ZBI5qNGKk0vLCdZX-IC4.roa
Signing time: Sun 01 Jan 2023 06:54:42 +0000
ROA not before: Sun 01 Jan 2023 06:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205422
IP address blocks: 5.183.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Jun 2023 08:09:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:76:7f:52:2c:11:60:0d:7d:3d:20:d5:55:ed:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Validity
Not Before: Jan 1 06:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=672ac108ef99048e6a3462a4d2f2c27595fe202e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:67:74:72:a7:9f:ab:45:5a:4d:48:ae:22:56:
06:7d:a9:16:b7:e7:19:2c:36:4f:e5:74:ba:d0:8a:
6a:19:49:1a:d4:48:94:59:1f:ba:9a:9c:34:b2:9a:
d0:46:c8:2f:c5:6a:a0:e9:ee:2a:16:b5:be:ae:c5:
ad:93:da:6e:cb:43:ec:6f:4f:38:7f:d5:4b:37:11:
38:c2:bc:ef:a1:5c:6a:ec:5f:ec:91:c4:f0:1c:27:
81:29:0e:fc:5d:bf:0a:ab:0b:23:da:84:eb:f8:37:
82:d3:29:7f:c9:64:53:ce:18:1f:64:23:d4:5c:97:
b9:18:02:ef:b1:31:1c:4b:b7:e1:ac:60:99:8c:ab:
8d:4d:0d:f2:72:46:88:43:09:ff:d2:7e:40:0d:d0:
c3:8f:7b:3e:9a:03:d9:2f:07:c4:b7:58:98:20:3a:
9f:f8:a8:8f:64:43:8b:67:db:c0:77:b3:87:75:ac:
60:f6:1e:7f:d6:9e:71:75:5f:bb:25:4b:ca:6a:9c:
18:f7:2e:50:3e:36:21:2d:ba:1b:02:a4:dc:bc:5f:
d3:41:57:c5:d4:b7:4d:8e:df:02:d0:e4:f7:cf:49:
be:e6:a2:0f:67:f7:ea:26:89:99:4c:f3:b3:c4:59:
75:33:4a:ef:00:0b:a0:45:6c:92:e1:1a:ba:2a:a8:
90:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2A:C1:08:EF:99:04:8E:6A:34:62:A4:D2:F2:C2:75:95:FE:20:2E
X509v3 Authority Key Identifier:
keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/ZyrBCO-ZBI5qNGKk0vLCdZX-IC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.109.0/24
Signature Algorithm: sha256WithRSAEncryption
58:dc:54:25:11:56:32:4a:b5:35:67:70:8b:a8:5a:ca:c2:c9:
71:42:1e:33:52:00:24:52:74:3c:d3:9a:55:ac:64:3b:7d:f7:
b9:fe:21:05:aa:b5:e1:26:bc:2a:41:2a:d9:5c:86:17:63:b2:
85:76:a8:b7:ed:8f:cf:4b:b6:e5:b8:da:c6:66:6e:1c:ac:2b:
0f:ac:b9:6f:39:34:f7:a6:eb:c0:3c:8e:ff:69:c7:a5:c0:91:
aa:78:17:63:f8:c1:60:59:01:99:b5:72:38:9f:6a:f7:ff:d6:
9a:69:9a:a7:33:6a:5d:ef:9d:6f:c9:48:d4:fa:2a:04:47:e4:
d4:4d:00:62:85:95:46:df:34:09:80:2c:3d:d6:42:92:d0:db:
72:9a:24:2a:38:fc:71:d7:d5:78:e3:df:53:3f:31:03:4e:7e:
52:72:ec:d2:ac:15:91:11:10:56:39:3a:b9:75:12:31:5e:77:
7d:b3:59:75:7b:a2:7f:94:1e:cf:6b:05:08:75:2b:ea:62:2d:
ee:8c:5b:44:3f:55:52:22:31:cd:3f:4c:6f:36:ce:d3:d9:1f:
0d:da:c9:0c:ac:06:04:7e:1c:a2:99:c2:a1:8e:dc:bc:85:7e:
73:8d:94:a9:d7:df:1f:fe:ff:bd:d9:eb:3d:8c:a3:72:47:e5:
ee:99:87:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:14 2024 by rpki-client on console-ams.rpki-client.org