Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/ZVKdEpdFHlCFmUyl3VVvs-B3qI0.roa
File: ZVKdEpdFHlCFmUyl3VVvs-B3qI0.roa (raw, json)
Hash identifier: TYUWA14hbAKUIfAn9n8MGtpfqlZ0lN1ntsft+DA6Vx4=
Subject key identifier: 65:52:9D:12:97:45:1E:50:85:99:4C:A5:DD:55:6F:B3:E0:77:A8:8D
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 018C7C8209BD87FAA729DA7A1AF7FA0CF522
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/ZVKdEpdFHlCFmUyl3VVvs-B3qI0.roa
Signing time: Mon 18 Dec 2023 10:39:06 +0000
ROA not before: Mon 18 Dec 2023 10:39:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16276
IP address blocks: 147.161.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7c:82:09:bd:87:fa:a7:29:da:7a:1a:f7:fa:0c:f5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Dec 18 10:39:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65529d1297451e5085994ca5dd556fb3e077a88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5e:ec:a1:32:00:3a:55:1f:4f:7a:66:06:83:
6c:76:c3:3b:8d:f7:51:fe:6b:f1:e7:d5:2d:62:b7:
0e:c3:b9:f5:3a:ba:31:73:7a:4e:7f:72:1c:a4:03:
3e:b8:9f:58:48:73:ec:69:9a:19:f1:9a:20:6d:58:
3f:59:4a:6e:04:31:98:a1:2f:7e:a0:55:cf:74:ee:
5f:2a:1f:d9:31:cf:24:87:03:ca:47:1f:f7:9d:48:
e5:26:d3:41:78:18:e7:87:6a:25:8a:ab:3a:23:da:
d3:10:ea:45:03:f7:34:e7:2c:b0:78:e3:d9:96:56:
4c:ad:65:2f:e3:46:22:e6:d7:32:17:eb:93:fd:5a:
91:2b:bc:7a:6e:de:a1:57:23:33:2a:56:20:49:d2:
f7:07:88:b9:a8:94:da:ad:6b:b7:20:a5:99:5c:da:
3c:a8:bf:db:6b:7c:b8:ce:66:04:1f:30:36:9b:6b:
01:56:d5:89:d9:80:76:24:82:d0:ad:ef:bb:f8:eb:
7e:db:0d:3d:f5:0e:6f:7b:99:ba:0d:34:d5:3f:7f:
e1:dd:31:10:2d:ea:8f:28:d3:d0:b6:7e:ab:c1:1f:
0b:3c:f7:76:67:4b:73:ec:4d:35:0f:01:1d:21:7f:
c3:69:4e:8a:4d:c6:73:aa:27:de:fb:e0:eb:59:bf:
9e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:52:9D:12:97:45:1E:50:85:99:4C:A5:DD:55:6F:B3:E0:77:A8:8D
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/ZVKdEpdFHlCFmUyl3VVvs-B3qI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.161.3.0/24
Signature Algorithm: sha256WithRSAEncryption
92:37:b3:d2:d9:24:94:c6:60:c4:a4:11:c8:38:db:ec:13:ed:
64:dc:75:d5:74:e9:2a:dc:53:a0:d6:c3:c9:9a:c3:26:c6:82:
a0:be:1d:98:97:cc:2c:d4:24:59:2f:d2:d0:46:7d:00:c6:5a:
0d:6e:53:65:d3:d9:5e:80:51:20:7f:f7:2a:84:30:7b:78:59:
61:42:4d:ee:de:eb:7c:08:53:1c:89:ea:e4:bc:f7:3f:c1:ff:
ce:68:d7:69:a6:cb:bb:e8:da:4e:56:78:6a:dd:23:ee:0f:bb:
6d:f3:e7:ca:5e:07:ce:44:1c:c7:8d:62:61:37:53:6c:1a:85:
b9:7a:05:ff:0e:29:57:a5:53:91:4f:31:af:db:5d:a2:ce:04:
f1:a4:ba:97:bd:32:13:cf:3a:93:3d:51:ef:4d:d4:01:b2:cc:
43:ca:86:1a:ed:53:52:b9:19:c6:ce:dc:4c:b4:8f:e1:db:15:
83:da:ab:b0:47:b0:51:24:7b:33:ca:ca:e2:13:2d:a5:60:a5:
5a:ad:14:d7:63:64:a3:35:e1:02:15:61:94:fe:f8:06:eb:65:
fe:39:9a:5c:2d:21:bb:a8:14:29:bd:50:40:30:80:70:56:e9:
86:f3:e9:9d:cd:59:23:ce:a0:b5:c2:7f:05:54:94:22:e1:a2:
12:2d:e0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:20 2024 by rpki-client on console-fra.rpki-client.org