Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/zchXl7AEvhhy4x0C_Sj_oXl7Le0.roa
File: zchXl7AEvhhy4x0C_Sj_oXl7Le0.roa (raw, json)
Hash identifier: yU1mq8IO/q1jL2kPjPETU1gkUfLSSFaS4NGpiHihaQw=
Subject key identifier: CD:C8:57:97:B0:04:BE:18:72:E3:1D:02:FD:28:FF:A1:79:7B:2D:ED
Certificate issuer: /CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2
Certificate serial: 0185708C9ADAB195A046B230A15EE2A7D932
Authority key identifier: C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/zchXl7AEvhhy4x0C_Sj_oXl7Le0.roa
Signing time: Mon 02 Jan 2023 03:35:40 +0000
ROA not before: Mon 02 Jan 2023 03:35:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62452
IP address blocks: 194.33.68.0/24 maxlen: 24
194.33.70.0/23 maxlen: 23
2001:67c:2994::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:9a:da:b1:95:a0:46:b2:30:a1:5e:e2:a7:d9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2
Validity
Not Before: Jan 2 03:35:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdc85797b004be1872e31d02fd28ffa1797b2ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:64:02:db:4d:ef:a0:57:81:72:57:c8:27:cf:
4a:f1:ad:e2:80:08:31:3f:11:d7:0b:15:36:af:92:
2e:44:89:94:24:1a:60:78:c0:27:08:17:ec:f7:31:
c0:ed:dd:ad:ae:e9:41:77:7b:be:c8:cd:e7:77:80:
60:e4:d9:19:04:b8:db:58:a6:37:4f:42:10:6f:e6:
3c:d9:ec:57:dd:7c:87:14:80:aa:3b:4a:0c:1c:cf:
6c:27:22:71:11:fd:ba:a0:76:98:f3:ff:2f:4b:29:
ba:0b:5b:ab:da:7c:2e:ae:a9:63:0b:ce:d1:42:09:
5e:d6:e4:5e:34:d9:af:18:47:8b:29:fb:72:cf:76:
ba:81:4f:13:19:74:3e:7d:73:49:0d:37:c9:d0:d0:
85:a4:65:14:2c:26:6c:48:d9:eb:53:13:2c:72:43:
f3:fb:92:1b:4c:7f:c8:a6:84:6b:9b:d4:a5:d4:b9:
3e:a0:65:ed:df:6a:4e:ca:99:d8:65:36:4b:44:c8:
36:03:66:2a:b2:ce:83:ac:20:43:59:10:57:57:55:
d1:69:49:3f:08:c6:1a:fe:03:b7:2a:3d:2f:68:9f:
1c:6a:19:e2:15:98:60:38:49:25:66:cc:fd:61:e7:
35:6c:e7:fe:6b:09:df:f1:fe:18:af:fe:2a:ea:57:
74:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C8:57:97:B0:04:BE:18:72:E3:1D:02:FD:28:FF:A1:79:7B:2D:ED
X509v3 Authority Key Identifier:
keyid:C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/zchXl7AEvhhy4x0C_Sj_oXl7Le0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.68.0/24
194.33.70.0/23
IPv6:
2001:67c:2994::/48
Signature Algorithm: sha256WithRSAEncryption
0b:fe:dd:96:4e:84:f9:9a:f7:ad:6f:92:aa:01:f3:78:0b:32:
bd:5f:87:6a:d8:2e:16:c4:48:e8:75:f0:f7:d3:52:8c:3a:4e:
9c:ea:2a:40:0c:50:7d:3a:da:31:30:6d:f7:9c:f4:fc:05:4b:
d3:8f:fc:c4:93:9a:7c:0d:ea:46:c6:4c:64:dc:6d:4c:f7:7c:
9d:d0:61:bc:67:6e:8f:46:94:68:98:4e:29:9d:94:2c:4a:8d:
42:04:4a:66:fe:01:40:30:06:df:34:4c:75:42:6a:ff:45:37:
53:44:26:1b:fd:79:ae:16:7e:bd:f2:56:ec:aa:7d:91:cc:74:
c3:5c:f7:b4:b0:15:0c:ee:f0:96:d3:73:48:7b:ce:2b:90:b5:
17:79:26:e6:60:de:7f:d3:6d:c0:0e:5c:4d:1e:a2:00:4e:33:
df:e8:45:f1:61:23:63:3d:d6:d1:23:c2:63:24:25:60:92:95:
e0:3c:ff:c0:32:ed:f2:3c:0b:c3:39:4e:5d:29:e7:ae:4d:11:
49:e5:6f:9e:8a:b3:10:ad:cc:85:e8:53:93:21:c3:56:07:d2:
60:fd:93:ad:58:80:35:21:f5:b0:cd:e9:62:c9:fd:96:37:e1:
da:6f:0d:57:8f:7f:ad:2f:81:2b:c6:9a:26:88:4e:f2:e4:00:
01:95:35:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:25 2024 by rpki-client on console-fra.rpki-client.org