Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/ZtbrkFig-ajI7LpuurhMrzpnstk.roa
File: ZtbrkFig-ajI7LpuurhMrzpnstk.roa (raw, json)
Hash identifier: ZT5l53+115ygL6ymgmxVtO0xot2LQ3ZwfFD9J5OaWl8=
Subject key identifier: 66:D6:EB:90:58:A0:F9:A8:C8:EC:BA:6E:BA:B8:4C:AF:3A:67:B2:D9
Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c
Certificate serial: 01856C53DFD55E94BFA5444CD9582F060E8F
Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/ZtbrkFig-ajI7LpuurhMrzpnstk.roa
Signing time: Sun 01 Jan 2023 07:55:14 +0000
ROA not before: Sun 01 Jan 2023 07:55:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51083
IP address blocks: 91.216.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:df:d5:5e:94:bf:a5:44:4c:d9:58:2f:06:0e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c
Validity
Not Before: Jan 1 07:55:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66d6eb9058a0f9a8c8ecba6ebab84caf3a67b2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7c:08:84:a2:18:29:1e:aa:39:a2:f9:b2:0d:
33:a8:c6:e1:7e:38:2a:af:93:21:7a:8b:60:31:2e:
40:da:b5:f2:bf:89:59:e0:2d:ad:df:f6:7d:78:ac:
d7:d8:76:79:31:d3:1d:9e:59:de:1a:c1:63:8e:ec:
fb:4b:3c:cb:bd:4d:e5:80:0b:51:23:92:4c:d9:2d:
95:66:af:7a:33:19:9a:6d:28:eb:18:e9:b1:30:30:
52:71:73:6b:f8:fb:5c:27:9a:b3:d2:53:6c:42:de:
13:52:61:c1:98:bf:d8:01:11:8c:cc:97:3d:d5:84:
b8:9c:d2:71:33:3b:97:19:53:8e:86:77:c0:3a:97:
b1:1a:61:ef:9b:43:f4:98:30:05:98:67:64:fd:66:
bc:a6:a9:95:26:ae:fc:c6:d6:f0:2b:b0:f4:52:66:
39:a4:73:c5:a5:d6:40:e9:e0:57:58:db:fb:eb:32:
b6:a5:b6:7a:b4:d5:cb:61:b6:89:a2:bf:38:70:29:
cc:fa:4c:fa:24:62:4a:f0:85:fc:c0:4e:6e:03:6b:
71:70:d8:2c:a2:df:64:d4:e1:b6:d7:fe:d0:8b:3e:
b0:aa:07:e7:0f:e3:5f:28:74:b7:4a:6e:ce:18:88:
c9:24:f3:f9:28:68:77:26:c0:d1:8d:28:83:7a:77:
6b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D6:EB:90:58:A0:F9:A8:C8:EC:BA:6E:BA:B8:4C:AF:3A:67:B2:D9
X509v3 Authority Key Identifier:
keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/ZtbrkFig-ajI7LpuurhMrzpnstk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.110.0/24
Signature Algorithm: sha256WithRSAEncryption
04:ba:ef:92:aa:78:4e:91:27:4a:fc:4f:6f:a2:00:93:86:c3:
57:fa:ab:c3:89:25:03:ca:7e:aa:bd:60:13:02:1e:a7:be:e4:
15:8f:19:70:c0:2d:c4:49:81:24:e5:22:eb:f4:bd:ac:42:bf:
f5:0c:9e:4d:28:81:ec:99:73:37:5e:77:ca:ad:8e:46:9d:93:
62:1e:85:71:74:af:b2:dd:f0:8a:de:51:ab:eb:1a:97:fa:82:
93:75:1f:cf:eb:f1:dd:8e:fe:ea:c8:94:3c:e4:00:ca:9e:63:
9b:80:d7:14:ef:9f:39:51:ab:52:1c:dc:96:d6:54:fa:36:9d:
e4:59:d6:0d:19:7f:c3:5d:09:2a:a7:3f:b3:67:36:66:1a:8f:
21:c6:04:a9:0a:71:ef:a1:b3:b3:b5:8b:32:f8:98:4b:42:73:
8d:ad:b4:57:b9:2b:91:85:64:85:7e:c3:ae:c8:88:84:2c:ff:
b2:15:f0:37:f3:3a:45:fb:5e:b6:11:50:a9:70:2a:50:4a:93:
3f:67:ae:2a:55:8d:1b:df:0f:be:11:0f:92:db:19:55:6f:80:
fe:0d:8b:c6:62:f9:60:24:6f:f5:7d:ad:5e:ce:2c:d4:68:f8:
2c:a2:37:78:c8:15:fd:68:0a:69:26:4a:35:c5:f8:b2:33:0b:
d9:f0:1e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:15 2024 by rpki-client on console-fra.rpki-client.org