Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/ZGt4nxMMTh3l48rx516MneObMoU.roa
File: ZGt4nxMMTh3l48rx516MneObMoU.roa (raw, json)
Hash identifier: xnMNLyN/V4IB8NhqAmyA7ED8qcVvpbVEIB/qEyka5oQ=
Subject key identifier: 64:6B:78:9F:13:0C:4E:1D:E5:E3:CA:F1:E7:5E:8C:9D:E3:9B:32:85
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 01885280AD5C05AAD44C6A32313E716FD96A
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/ZGt4nxMMTh3l48rx516MneObMoU.roa
Signing time: Thu 25 May 2023 10:42:24 +0000
ROA not before: Thu 25 May 2023 10:42:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35264
IP address blocks: 194.224.168.0/24 maxlen: 24
195.235.112.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:80:ad:5c:05:aa:d4:4c:6a:32:31:3e:71:6f:d9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: May 25 10:42:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=646b789f130c4e1de5e3caf1e75e8c9de39b3285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:a4:7c:8f:0f:8a:f0:21:90:24:ab:02:01:
df:22:9b:31:38:fd:6b:f6:b3:c1:46:14:19:20:53:
84:26:ee:9f:70:7f:17:ef:c0:60:31:e1:17:1e:bc:
84:1c:2a:c7:c1:46:94:01:ce:36:b6:9a:48:5e:10:
e7:c2:2b:2a:89:5b:de:00:39:38:c0:b7:b3:32:c0:
cb:ba:a7:55:94:41:0c:fd:83:02:e9:dd:8b:e9:7c:
ec:ed:67:1e:f8:d5:4f:c8:41:f5:89:87:99:01:29:
b7:0a:df:9c:38:fb:9c:89:8f:7a:8c:42:7f:5a:c2:
cd:1b:6f:22:c3:56:5b:6d:fa:ca:68:3c:9c:49:c3:
41:4c:dd:00:86:9c:2a:22:88:b2:5f:78:5f:c4:9a:
7f:71:26:c7:9b:0b:f2:c2:60:b7:a5:77:80:ef:ef:
47:5d:cb:f0:c5:d4:61:9f:8d:ee:36:05:18:fd:0b:
0b:5c:15:78:fa:6a:2b:f5:82:85:94:b9:e3:bd:c1:
b2:80:f3:3b:85:e5:46:6d:bb:f5:37:7e:63:29:3e:
9d:24:b2:23:e8:ec:22:5f:3f:61:aa:a9:9c:02:09:
79:87:04:77:c9:3b:8c:34:e9:aa:51:7b:19:6a:90:
bb:40:a2:62:c6:4c:74:0b:1f:46:5a:7e:e4:81:aa:
7a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6B:78:9F:13:0C:4E:1D:E5:E3:CA:F1:E7:5E:8C:9D:E3:9B:32:85
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/ZGt4nxMMTh3l48rx516MneObMoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.224.168.0/24
195.235.112.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:9c:98:0a:ff:ba:68:bb:19:f6:cc:2d:78:d0:33:ea:63:14:
6f:8e:ae:fa:e4:3d:45:67:08:14:78:98:a3:46:c3:a1:4c:6b:
42:7d:72:28:8f:48:fc:60:fb:b0:95:d7:ee:89:cd:4e:d1:99:
c3:2f:37:d2:23:fb:0c:32:fe:33:47:8c:c8:06:2a:b7:af:66:
13:3d:07:e5:c8:61:25:3f:e6:b5:80:a9:de:97:b9:e0:06:39:
8d:ae:34:38:be:ce:28:c5:e2:ef:96:dc:6d:d0:73:76:0a:3b:
be:dc:83:b5:c3:7c:b4:82:1f:93:98:55:f7:bb:9b:89:c9:47:
06:7b:52:5a:40:3b:9c:af:26:99:35:35:53:2f:e9:2f:0b:62:
d3:9f:e2:a1:29:c6:e2:48:ea:91:da:db:2a:1d:e6:5c:a4:38:
0c:ea:8e:3f:bf:c2:08:59:bb:99:ba:09:10:c7:5c:0f:0d:4f:
b1:bd:0f:d8:81:97:2b:0a:a2:23:92:cd:13:9c:76:e3:31:13:
df:4b:16:49:1f:e0:64:72:24:49:12:ee:d8:94:a4:5d:ef:33:
f4:18:51:eb:d1:6f:38:15:d6:64:13:82:4a:6b:5a:c4:eb:6f:
cf:31:5c:c7:d9:6e:49:2f:e8:d4:5c:3e:0e:e1:57:59:8a:7d:
81:43:16:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:27 2024 by rpki-client on console-fra.rpki-client.org