Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/ZHvWaPyI6OZvqI2SQ0LHQJC5dqY.roa
File: ZHvWaPyI6OZvqI2SQ0LHQJC5dqY.roa (raw, json)
Hash identifier: NlJqoOC2QSjgtk5xSopSekajoUrHYTIFGfNSPcPlZFc=
Subject key identifier: 64:7B:D6:68:FC:88:E8:E6:6F:A8:8D:92:43:42:C7:40:90:B9:76:A6
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01860CBD3773098BA7C2B94E2EF52F65D327
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/ZHvWaPyI6OZvqI2SQ0LHQJC5dqY.roa
Signing time: Wed 01 Feb 2023 11:29:32 +0000
ROA not before: Wed 01 Feb 2023 11:29:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29085
IP address blocks: 212.183.88.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0c:bd:37:73:09:8b:a7:c2:b9:4e:2e:f5:2f:65:d3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Feb 1 11:29:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=647bd668fc88e8e66fa88d924342c74090b976a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:d8:c0:87:5d:67:c6:9e:66:cb:05:76:12:
ac:73:05:ea:fc:0a:49:25:89:02:2a:8a:c2:78:05:
63:6b:74:80:1c:e9:98:4d:a8:44:fc:9e:b4:f6:5f:
29:f8:3a:42:92:3f:20:e9:38:1e:5c:f3:54:e9:9d:
50:ec:94:bd:b9:5e:88:c3:a4:e6:8b:24:81:2c:22:
08:42:77:65:08:3e:b1:27:5c:8c:ff:03:6d:06:94:
58:52:fb:46:0b:08:f1:9a:3a:40:f4:6f:54:f1:d0:
e5:93:52:d4:41:c0:a7:43:16:d9:99:04:45:16:01:
7f:67:bf:d1:e9:cb:22:23:f4:32:17:36:b8:35:72:
7a:fa:86:60:6a:82:31:1c:dd:1a:0c:3d:fc:e9:18:
75:a1:d9:53:93:0e:66:58:bf:07:48:40:49:c4:87:
6c:13:cc:ab:d0:99:c0:bb:fe:4d:83:d8:2f:e1:d0:
04:5a:28:3f:2a:64:2c:46:f0:b2:b0:c1:c9:d4:30:
fe:71:37:64:f7:41:b0:1c:84:3b:00:f6:e3:05:36:
71:04:67:69:9a:4b:7b:0f:71:a7:72:5d:fd:e5:1c:
53:40:02:db:cf:31:9d:89:10:70:8f:de:12:11:57:
79:e5:0e:06:4d:0c:24:8b:47:7f:dc:a0:64:31:3b:
98:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7B:D6:68:FC:88:E8:E6:6F:A8:8D:92:43:42:C7:40:90:B9:76:A6
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/ZHvWaPyI6OZvqI2SQ0LHQJC5dqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.183.88.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:53:0b:af:31:7a:68:93:14:f0:1b:ab:2c:3c:bc:f6:49:b8:
66:44:33:98:fd:b5:ca:93:55:ad:75:3e:4e:84:9f:57:a7:54:
99:5a:c9:f7:ee:20:3b:99:87:d2:29:72:7d:08:28:a4:dc:26:
ff:99:66:be:d9:80:c9:85:63:62:d2:e8:ac:4d:27:a8:d5:cb:
4d:d5:4e:85:d6:62:76:76:88:75:f3:68:48:ab:63:d8:91:ac:
11:42:d2:db:42:b9:ad:bb:12:17:ea:c0:e3:29:f3:ca:3c:c2:
65:f4:8b:63:59:5b:d9:9b:40:77:d5:60:d3:c5:5c:fa:08:0c:
39:e9:5a:e6:08:03:ee:45:a7:31:23:07:f8:61:79:c2:37:28:
78:fc:c9:9c:25:b4:7b:82:7f:be:b1:ac:7e:96:07:bd:19:58:
97:1a:15:c0:1e:83:94:18:f8:0a:c0:29:a5:f5:b2:da:17:a3:
11:0f:af:5f:f4:14:38:44:06:f7:ab:36:1e:3f:a9:11:05:e8:
af:26:0a:8b:13:10:26:d9:09:b2:ae:ed:5c:b1:7d:22:50:b0:
a2:07:db:03:be:3f:7e:8a:91:8f:ea:05:43:0c:1f:7f:92:00:
57:6f:72:d0:7c:9f:9c:cb:78:6b:51:48:49:10:b6:7b:57:3b:
9f:f4:46:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:49 2024 by rpki-client on console-ams.rpki-client.org