Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/ZZfokqVx7DfAc3BYyegHVQVYc8w.roa
File: ZZfokqVx7DfAc3BYyegHVQVYc8w.roa (raw, json)
Hash identifier: QcIIskgNE9FotSQRbidX8tG0PEvLuvVKPf8NLMS0X/I=
Subject key identifier: 65:97:E8:92:A5:71:EC:37:C0:73:70:58:C9:E8:07:55:05:58:73:CC
Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial: 018CC802FA4B98BEA77EC9DC8DDEC4ACE058
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/ZZfokqVx7DfAc3BYyegHVQVYc8w.roa
Signing time: Tue 02 Jan 2024 02:31:27 +0000
ROA not before: Tue 02 Jan 2024 02:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 213.146.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 May 2024 13:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:fa:4b:98:be:a7:7e:c9:dc:8d:de:c4:ac:e0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
Validity
Not Before: Jan 2 02:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6597e892a571ec37c0737058c9e80755055873cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d3:53:86:d5:30:a0:92:8f:ea:e7:85:6f:1b:
1b:48:b6:3c:27:b0:73:5c:a3:00:91:7e:27:53:bf:
96:82:b1:41:48:cf:9f:db:1b:88:09:77:b7:7c:a1:
cf:55:36:92:66:3c:75:c2:7f:3e:48:9d:bf:2f:11:
a1:da:0b:7d:b0:ce:b0:ee:1b:1e:d6:09:b8:4b:06:
ae:c3:90:a9:60:59:a6:2e:dc:c2:c7:50:ab:75:cb:
9d:dd:07:aa:60:ea:54:43:19:1d:4a:0d:22:36:e4:
eb:f2:9e:52:7d:13:36:14:b2:7c:d9:6d:8d:f1:46:
7b:87:68:dd:53:aa:21:84:49:5f:c0:d3:df:39:12:
da:de:e1:40:13:f2:66:9a:76:cd:b6:f8:81:22:e7:
89:7e:64:73:05:0f:f5:93:f7:b1:0e:f5:0c:86:51:
d7:aa:e7:01:07:35:53:48:eb:a1:a1:11:dd:e6:09:
dc:1d:60:2c:7d:4c:e9:26:79:a8:c3:e8:d2:cb:c8:
36:5b:aa:d3:07:aa:fa:0e:e3:42:c5:f4:27:f7:c6:
c6:5d:ce:cb:1a:45:c1:45:d9:2e:41:ed:b1:45:e3:
2a:28:47:b2:fa:ef:a1:74:70:a7:9c:15:af:a5:5f:
02:b7:95:4e:70:5e:c2:08:c7:ea:09:94:c4:7a:b5:
7d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:97:E8:92:A5:71:EC:37:C0:73:70:58:C9:E8:07:55:05:58:73:CC
X509v3 Authority Key Identifier:
keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/ZZfokqVx7DfAc3BYyegHVQVYc8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.146.8.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:22:b3:58:97:54:b7:2e:f7:c4:b4:15:00:b2:86:8b:55:91:
65:04:1a:94:2c:40:7c:8d:05:d9:bb:6b:ac:70:d1:40:cd:d6:
a1:c9:1e:83:14:d6:42:df:65:ad:52:e6:de:ef:eb:5d:d7:a8:
e6:76:84:1c:58:c4:09:5c:3a:f1:a7:b0:cf:c3:29:b6:15:ef:
58:84:59:2e:2e:fb:4b:8b:73:f8:76:1b:16:78:75:e8:69:88:
87:f3:9f:ea:3a:de:db:46:0b:8b:c9:e1:57:4c:03:ab:3a:a1:
e8:db:4c:c3:52:86:cd:6f:90:5a:98:1f:ad:bf:fc:c7:df:54:
bb:a4:64:20:50:0e:34:2b:59:7e:64:8a:9b:24:59:8b:cc:3f:
0d:af:3e:8e:81:82:2b:00:20:af:a8:17:7b:1f:8c:16:b9:18:
78:b2:cb:ba:a4:93:a0:39:25:6f:2b:09:ae:8f:7c:91:17:1d:
41:ec:cc:0d:c8:e0:9c:a9:64:8d:fe:5d:cb:92:46:1a:ca:bc:
00:c8:79:a8:7c:26:2e:ce:4a:63:6c:32:fb:2a:12:0d:c4:db:
fe:47:58:e4:25:2b:39:f0:69:9e:4e:c1:d6:5d:39:4a:71:34:
1b:12:4f:c8:06:46:0d:46:5d:8b:8f:72:53:ea:04:59:3d:20:
dd:b4:e6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:30:39 2024 by rpki-client on console-fra.rpki-client.org