Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/za0KoxyH-9iyfxTZV2_34JaorqE.roa
File: za0KoxyH-9iyfxTZV2_34JaorqE.roa (raw, json)
Hash identifier: eoEyPw8WMIlxE1xIvlka76DniojH0LHvOEUXFURJTfk=
Subject key identifier: CD:AD:0A:A3:1C:87:FB:D8:B2:7F:14:D9:57:6F:F7:E0:96:A8:AE:A1
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0186842A12FAD1E71FFEBF6EB1AF81BCDAC5
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/za0KoxyH-9iyfxTZV2_34JaorqE.roa
Signing time: Fri 24 Feb 2023 16:03:15 +0000
ROA not before: Fri 24 Feb 2023 16:03:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20911
IP address blocks: 79.124.9.0/24 maxlen: 24
80.72.88.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:84:2a:12:fa:d1:e7:1f:fe:bf:6e:b1:af:81:bc:da:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Feb 24 16:03:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdad0aa31c87fbd8b27f14d9576ff7e096a8aea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9e:a3:d6:71:38:05:8d:5e:df:35:18:f9:51:
22:97:f4:e2:46:4a:11:99:4f:7d:aa:56:bb:30:b1:
1b:e5:6d:eb:1d:90:f1:86:c2:1c:57:64:3e:81:1b:
d7:8b:f3:0a:57:a5:b1:d7:02:15:e8:0d:b4:81:75:
97:0e:05:ac:02:27:24:6e:f2:1b:85:52:d9:1b:1f:
ab:ce:fc:be:f2:29:8a:f2:b2:c2:68:38:60:d1:ba:
61:dd:96:76:ea:4a:dd:ed:5c:7a:87:04:f4:d6:71:
a9:82:93:65:dd:fb:87:16:fb:74:a6:c5:44:2b:8c:
9a:b4:45:ee:21:db:4b:6e:41:20:ec:37:bf:cc:d2:
28:24:44:e0:ba:4a:ae:2d:86:62:3a:fb:b6:95:2b:
93:fd:b5:3a:58:8b:31:98:e5:e8:a8:e2:05:08:97:
f7:9b:39:a4:7d:8b:4f:94:df:96:eb:17:e8:a1:3a:
53:6f:f9:f5:eb:15:50:cb:b4:b3:ec:c2:1e:ad:aa:
c5:33:9f:7d:da:d1:93:14:14:a1:0e:e2:6a:b1:7b:
4c:ee:14:28:b1:7e:11:1e:27:d5:e6:0e:36:0c:85:
7b:a7:79:c7:72:63:f9:85:18:26:90:20:92:f3:cc:
57:6c:37:2a:d8:a4:9b:11:b1:c6:6b:c5:0c:b6:ae:
21:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AD:0A:A3:1C:87:FB:D8:B2:7F:14:D9:57:6F:F7:E0:96:A8:AE:A1
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/za0KoxyH-9iyfxTZV2_34JaorqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.124.9.0/24
80.72.88.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:62:c5:d2:67:e6:7e:7a:ec:a9:5a:4b:b2:e5:d5:6c:c6:40:
78:27:11:0d:47:1b:1a:ad:89:69:1b:3e:1b:a3:b6:c4:6e:08:
25:20:de:b8:ea:00:b8:d0:55:fa:69:19:6b:17:96:45:2f:b1:
ac:50:c5:df:75:29:0f:8e:6b:e1:e4:2a:70:26:ae:0a:89:c0:
64:db:6c:57:9d:f2:00:ca:aa:24:59:5c:a7:f3:33:b3:1a:8c:
67:60:e2:16:66:ef:e4:90:d5:f4:52:f0:f2:01:10:0e:70:fe:
56:fb:86:33:6e:c2:d1:4f:4d:f9:e7:41:69:a3:7c:14:4d:24:
67:23:bb:71:ed:43:2c:f0:24:ee:4f:1e:5d:ca:06:f2:cf:fd:
c0:40:53:53:a8:4a:c9:1c:5b:6f:0a:aa:7a:14:20:46:be:fd:
78:80:59:46:a8:8d:10:bd:f4:6c:e7:78:cd:8e:ef:c2:1f:34:
76:c8:aa:91:40:83:de:06:d6:56:07:c7:e7:37:94:11:38:5f:
02:bd:44:cc:81:12:c5:08:a1:0d:93:64:e4:91:b0:e0:69:1d:
82:7a:62:8e:0f:be:c4:84:1e:e0:2c:35:54:58:25:5d:d3:e7:
53:ea:67:59:a8:e8:24:44:5b:63:d6:af:ef:ef:f1:34:31:ab:
69:74:a5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:50 2024 by rpki-client on console-ams.rpki-client.org