Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ZYol9cKmP8J3OhzdaOLpvUMiWqU.roa
File: ZYol9cKmP8J3OhzdaOLpvUMiWqU.roa (raw, json)
Hash identifier: Veyv8r4yeknvT5p6Mo95dyJsJ3ldxBAeIv8fNGjPWho=
Subject key identifier: 65:8A:25:F5:C2:A6:3F:C2:77:3A:1C:DD:68:E2:E9:BD:43:22:5A:A5
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018C441CEBB28002C4B0D376A988057A9962
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ZYol9cKmP8J3OhzdaOLpvUMiWqU.roa
Signing time: Thu 07 Dec 2023 11:49:54 +0000
ROA not before: Thu 07 Dec 2023 11:49:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215904
IP address blocks: 92.52.219.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:44:1c:eb:b2:80:02:c4:b0:d3:76:a9:88:05:7a:99:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Dec 7 11:49:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=658a25f5c2a63fc2773a1cdd68e2e9bd43225aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4a:e2:e7:46:dc:c4:ea:3d:2a:1d:55:de:40:
4c:e4:b0:f4:d1:97:3e:b0:c6:76:41:d6:62:e9:a3:
04:0a:79:83:4f:0c:77:8c:fb:80:e1:18:fa:52:2e:
fd:bd:d8:f6:8b:f0:36:e6:56:87:e2:bd:e5:bd:65:
f7:30:c1:3b:ec:14:25:e1:e4:42:7e:a8:b9:37:31:
12:20:a6:79:a1:9d:af:81:dd:11:6a:01:90:44:6b:
e3:68:88:60:d4:18:8a:35:ec:5c:81:54:08:2c:d9:
65:e6:d1:be:a2:66:59:af:57:bb:a7:a7:f1:28:c8:
36:1d:8b:f7:72:00:fe:02:74:32:b1:1a:12:fe:7e:
90:0c:2f:6e:1a:ab:23:4b:63:08:e3:39:e9:29:83:
41:10:db:ab:f6:dc:62:33:f5:ed:e4:8c:0e:57:f2:
2f:a1:fb:0b:16:18:3b:df:fc:3c:b3:5c:9a:c0:23:
3d:4e:ec:2c:ff:7d:3c:17:27:95:0b:cd:b6:8d:4f:
e7:56:8c:c0:d9:b8:37:30:e2:54:2c:39:ec:bc:f5:
f1:3b:b4:f2:0f:0f:4d:99:4c:ba:45:c2:0a:70:ec:
48:07:d5:1a:85:45:3d:f0:21:57:8d:1f:16:38:2b:
0b:50:a3:e0:4f:25:43:7f:22:64:ea:ab:28:15:4d:
51:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8A:25:F5:C2:A6:3F:C2:77:3A:1C:DD:68:E2:E9:BD:43:22:5A:A5
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ZYol9cKmP8J3OhzdaOLpvUMiWqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.52.219.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:e8:fd:d0:5c:db:42:74:04:22:9c:20:c3:42:1b:f8:6e:ad:
3b:48:14:85:41:a4:02:02:9e:a5:c0:5a:58:89:44:7b:aa:28:
e4:d7:ca:1e:26:29:3d:7c:18:30:41:f1:b2:e8:6a:59:75:df:
35:fe:da:3b:dd:9a:83:4c:6c:cb:67:4d:a3:7e:bc:75:cf:ef:
66:fc:66:32:e4:0f:81:40:e1:9a:2e:15:b7:17:f2:61:9a:8a:
43:71:02:d2:a4:4e:c1:ef:d3:b5:e2:55:12:1f:8e:28:85:17:
55:af:fd:93:91:78:ce:83:47:03:ea:b7:24:5f:a1:77:7d:bd:
74:b9:ba:71:e1:9c:08:6a:5b:fa:b6:f1:0a:74:0e:b9:a3:03:
b0:79:a4:a5:68:7d:cd:ed:3d:d0:82:6b:19:5b:de:cb:85:25:
6e:22:b9:c9:ce:e1:95:3e:b0:5c:fa:7d:29:1d:f5:c0:40:4f:
9c:bd:17:06:ac:2c:85:d6:23:64:b3:00:51:04:88:be:dc:ab:
0c:f4:5b:9d:f9:5a:24:bc:53:2a:d0:de:cd:d9:1b:62:47:91:
4a:dc:63:08:a1:6a:3c:0e:f9:2a:f8:76:fa:88:40:6e:03:a5:
45:97:0f:e3:a9:d4:2d:70:7b:44:e8:b9:20:51:8c:2c:b1:81:
39:8d:80:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:20 2024 by rpki-client on console-fra.rpki-client.org