Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/ZYWQZNkiRTXZwjP00oFA4HSQSyc.roa
File: ZYWQZNkiRTXZwjP00oFA4HSQSyc.roa (raw, json)
Hash identifier: EHBHnRg44j2PQZPe36cUec4hk2D8j7aV6TDhMF+iGvA=
Subject key identifier: 65:85:90:64:D9:22:45:35:D9:C2:33:F4:D2:81:40:E0:74:90:4B:27
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 018C1735F6882D2A1A25FE9067296488643C
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/ZYWQZNkiRTXZwjP00oFA4HSQSyc.roa
Signing time: Tue 28 Nov 2023 18:34:21 +0000
ROA not before: Tue 28 Nov 2023 18:34:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52320
IP address blocks: 194.9.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Dec 2023 15:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:17:35:f6:88:2d:2a:1a:25:fe:90:67:29:64:88:64:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Nov 28 18:34:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65859064d9224535d9c233f4d28140e074904b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:85:7e:41:c6:7f:82:60:9a:f3:c7:5c:fe:a2:
c8:19:9e:cc:02:b4:8c:58:9d:61:a5:4e:a1:3b:77:
8d:77:61:f2:31:0a:be:42:3d:ed:3f:86:ef:f2:c5:
71:36:d2:29:0e:39:d3:89:b9:66:77:fa:c9:50:ed:
d7:f9:78:71:c0:39:2a:29:9c:b7:36:32:a1:e4:11:
81:18:3e:a6:9b:1a:8b:cb:b7:3e:c6:2c:1f:2c:76:
a3:32:0a:2a:48:18:69:28:e3:6f:1f:67:ca:57:b1:
38:d3:2d:27:ba:74:d9:ca:32:7f:51:99:fc:cd:7b:
46:c5:f4:e3:fc:17:9a:3a:8c:fe:74:02:03:b4:fe:
b0:a1:78:7a:7e:84:63:73:fe:75:71:22:2e:ef:b4:
f1:1f:8e:80:8e:3e:53:95:95:39:42:73:20:b6:72:
25:93:81:ed:d3:f7:45:d4:19:a9:7a:06:00:06:1d:
f6:23:2b:c1:83:23:f6:8e:54:f3:cd:c7:2c:b0:56:
8d:0b:9b:01:2f:ae:34:c4:dd:e0:6e:50:c1:7e:74:
3c:1d:c5:91:1c:c2:f6:15:ad:30:0a:77:4b:8b:1c:
8c:0b:82:b9:17:e4:d1:48:f5:38:30:1f:d6:05:b7:
6e:b5:ac:7b:22:a7:2f:6d:c5:15:8f:73:6c:27:9a:
36:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:85:90:64:D9:22:45:35:D9:C2:33:F4:D2:81:40:E0:74:90:4B:27
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/ZYWQZNkiRTXZwjP00oFA4HSQSyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.181.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:7a:ad:61:7b:05:e3:91:b5:69:25:72:0a:e0:44:8b:f0:5e:
37:ed:05:9a:da:2b:00:b3:9a:33:35:df:e1:37:77:65:00:13:
2d:2b:d7:73:4e:61:b7:16:0d:6e:8c:06:7e:4b:0d:48:02:ac:
03:da:37:c4:eb:a7:f1:87:14:f0:f7:b1:45:08:15:ae:f2:c4:
b6:60:28:df:82:88:b3:00:8c:e1:ca:51:1b:bf:bc:e2:53:c3:
7d:fe:3a:c2:2c:82:2e:df:09:4f:ce:6a:8c:75:05:00:a8:43:
c1:ac:44:0b:fe:44:8c:4b:b8:ac:49:31:82:fe:70:0c:43:9d:
a2:39:44:1a:c8:f9:b1:ec:d5:53:88:70:d7:a8:41:6c:11:c6:
a6:cb:43:a7:f0:8d:51:38:b6:39:a0:85:2e:d3:89:93:3f:75:
81:f7:55:d9:2e:a9:39:85:ee:a0:3b:b9:d1:2a:29:8d:c6:f2:
0b:23:72:04:92:29:ab:90:b0:a3:73:99:72:7b:0b:92:1b:26:
47:e2:f4:c3:b1:98:c4:77:86:fe:26:91:51:8c:69:c7:9c:18:
b1:dd:d5:e8:ea:ae:b3:71:87:77:39:9d:b8:8c:d6:58:3f:d3:
bf:11:44:ba:62:3a:aa:a5:e7:96:3a:c4:05:60:69:e1:4b:48:
39:48:39:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:06 2024 by rpki-client on console-ams.rpki-client.org