Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/1ZiB_pyWSVSEu1cYYfY_SNYWzDI.roa
File: 1ZiB_pyWSVSEu1cYYfY_SNYWzDI.roa (raw, json)
Hash identifier: 9y2Dw0R/5gDV9ukSsHUzORz8Ss+qh9EwnwSIy5Ze7Yk=
Subject key identifier: D5:98:81:FE:9C:96:49:54:84:BB:57:18:61:F6:3F:48:D6:16:CC:32
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01856FB11CA1EDEA5A8969E32C35ACD937DD
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/1ZiB_pyWSVSEu1cYYfY_SNYWzDI.roa
Signing time: Sun 01 Jan 2023 23:35:56 +0000
ROA not before: Sun 01 Jan 2023 23:35:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44307
IP address blocks: 96.125.144.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:1c:a1:ed:ea:5a:89:69:e3:2c:35:ac:d9:37:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 1 23:35:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d59881fe9c96495484bb571861f63f48d616cc32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:93:00:17:46:aa:b5:83:4b:36:57:8d:21:0f:
a5:7f:67:9e:90:c1:32:e8:26:96:e2:0c:f7:a2:fa:
64:0b:82:63:99:b2:0e:3f:1b:f9:13:25:88:b2:bc:
58:53:78:de:5f:30:b4:09:a0:f7:4b:3f:2f:14:d6:
e8:05:ed:ca:fb:24:d6:09:b1:07:e6:39:78:58:27:
4d:22:14:a8:41:9a:41:93:3a:90:a0:ce:61:7d:81:
8e:76:c8:49:a7:9c:93:de:60:43:3d:a0:6e:8a:51:
1f:b2:5f:d7:0b:a3:dc:1c:52:17:72:f3:81:68:06:
30:29:97:39:d0:35:f1:97:5c:7b:31:75:80:77:08:
3b:ad:1f:cb:19:12:b9:6d:13:63:91:ed:59:9a:2f:
55:6b:32:4f:56:52:5b:01:a9:dd:9e:1e:bf:d0:f6:
2c:f7:9c:6c:5a:23:5a:1c:79:bd:49:67:88:d2:35:
5b:21:b0:1b:da:1b:d4:bb:fd:0b:13:86:8f:05:ce:
70:b8:c0:26:a2:9e:ab:0f:d8:cb:f8:28:f7:16:76:
7c:cb:b8:c3:2a:1f:a3:18:32:77:b3:9e:76:39:ab:
e3:5b:9f:bd:40:dc:15:f8:19:22:c0:ce:ea:25:4c:
7f:3b:42:a7:3b:e3:17:b8:9b:8d:16:9a:ec:40:1c:
97:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:98:81:FE:9C:96:49:54:84:BB:57:18:61:F6:3F:48:D6:16:CC:32
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/1ZiB_pyWSVSEu1cYYfY_SNYWzDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.125.144.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:9d:5f:16:d3:91:a6:65:f3:fb:91:a4:57:75:58:a4:d2:ce:
98:3d:37:af:de:57:9a:83:a5:5b:a6:83:3f:30:21:bf:b1:f5:
c0:37:b9:8a:78:5d:c4:02:74:c1:3f:b9:65:e7:d3:3d:42:28:
b1:b2:03:3c:01:03:05:4d:1d:1b:c3:dc:11:3a:ea:22:66:92:
ea:b0:af:c5:04:41:ea:10:ce:16:ff:fc:85:7c:f6:67:aa:0a:
a9:04:07:c3:08:a2:e9:65:6d:19:06:e2:9d:be:4c:89:22:fd:
35:dd:37:75:67:bc:0c:52:a6:e9:e8:98:dc:34:55:31:9d:09:
41:58:28:2b:21:4d:6a:50:8f:0c:2e:d4:98:df:8e:0f:7c:9d:
8b:98:53:35:95:a7:43:fe:5b:64:ab:c5:12:17:de:d4:c2:f9:
5f:98:23:49:34:47:79:27:f9:38:6e:b3:da:82:15:bb:d1:3a:
5f:12:48:42:0a:12:29:d8:15:ba:4b:1b:7c:6e:0f:85:b9:79:
db:10:f7:a9:78:1d:1c:ce:8e:89:ec:de:d5:e2:db:15:85:88:
ca:fa:6c:c3:7a:ee:82:68:52:48:b6:33:62:e7:0b:64:d4:4b:
29:76:24:0f:d9:5a:13:fc:b7:3d:7c:79:a6:f4:a5:6f:9a:16:
e8:1d:6c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:31 2024 by rpki-client on console-fra.rpki-client.org