Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zehRxYUhexWiFBbt_I7i3uCGdzk.roa
File: zehRxYUhexWiFBbt_I7i3uCGdzk.roa (raw, json)
Hash identifier: CoCK5YB2RiDY9ujmJqqBdLVnODKxX7QZOB9pMjEWBUQ=
Subject key identifier: CD:E8:51:C5:85:21:7B:15:A2:14:16:ED:FC:8E:E2:DE:E0:86:77:39
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018571E7AA88EEB6201B278930A24796E7A1
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zehRxYUhexWiFBbt_I7i3uCGdzk.roa
Signing time: Mon 02 Jan 2023 09:54:45 +0000
ROA not before: Mon 02 Jan 2023 09:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202243
IP address blocks: 92.52.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e7:aa:88:ee:b6:20:1b:27:89:30:a2:47:96:e7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 2 09:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cde851c585217b15a21416edfc8ee2dee0867739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f1:1b:4e:4c:87:6f:65:12:bf:79:50:13:3e:
a4:ac:8b:1f:64:ea:18:75:94:0c:52:6f:29:92:e0:
7b:6f:0e:84:34:c1:54:6c:f5:f2:3b:85:cf:87:92:
1c:0a:ac:16:48:0d:fc:a2:f9:d1:3f:bf:e5:4a:0b:
97:8e:ee:dc:d4:a8:6a:6c:6d:2e:20:21:63:04:19:
d8:a8:56:af:4f:2c:d9:33:ba:db:96:82:02:05:49:
e4:eb:4a:01:8f:d6:c8:43:36:cb:0c:a7:fb:07:b0:
3e:e1:f4:70:f7:f1:18:0a:58:ee:93:54:5b:cf:6f:
55:70:cc:2a:f7:43:af:94:84:ed:39:1a:8a:ff:86:
e2:82:57:55:7d:f0:be:47:69:7b:1a:72:32:5e:af:
ed:1c:16:8e:c8:f3:15:24:0a:af:5b:92:46:cc:34:
bb:97:12:29:d6:fe:c4:77:66:18:b5:ab:8c:d7:41:
40:c2:83:34:15:c0:ff:91:f8:7b:dd:d3:96:6e:da:
c7:2c:50:61:c7:5f:b9:1c:8f:09:dc:b1:59:4c:8d:
a6:41:e4:5a:78:14:e3:c8:ec:66:67:78:b7:5c:5f:
7a:3a:3e:7f:19:cd:61:7f:72:fd:04:3d:df:c9:9d:
70:e2:59:bf:f3:e0:3f:e2:e0:19:df:10:36:59:72:
0f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E8:51:C5:85:21:7B:15:A2:14:16:ED:FC:8E:E2:DE:E0:86:77:39
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zehRxYUhexWiFBbt_I7i3uCGdzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.52.220.0/24
Signature Algorithm: sha256WithRSAEncryption
38:c5:76:af:9f:9a:3a:ed:00:3e:1e:5a:2b:45:b6:ad:96:8c:
80:f4:df:0c:ed:48:c2:92:53:43:9f:69:4f:06:37:90:49:cc:
57:6b:9d:91:10:17:99:54:f4:10:74:1d:e2:34:93:83:93:d3:
31:d1:d5:64:d8:c9:19:3c:29:68:d4:8b:ef:01:76:85:e9:80:
e9:d0:36:24:df:0b:b0:29:69:8e:35:5e:c8:ae:1c:5e:0f:ec:
36:64:47:75:99:34:b0:bf:91:dc:2e:a2:33:8c:c9:5d:28:d8:
64:dd:84:7c:19:e4:51:44:47:8e:05:1c:b1:8f:06:13:01:c0:
88:be:a8:e7:ec:3f:b0:00:12:37:a0:f4:6e:c0:3c:27:60:36:
19:08:88:9f:f1:eb:18:5f:b8:df:98:6e:39:70:d1:cc:2f:2a:
dd:fe:6f:01:2e:95:c8:aa:ce:41:ab:32:e6:35:c3:0f:c3:e4:
f5:86:44:46:88:d2:c7:ec:63:14:45:0e:3e:cb:8d:ea:7d:3d:
48:7b:68:72:c5:79:f1:ac:ee:9b:54:f6:64:09:33:f2:7c:b5:
4b:cf:35:de:d3:77:0a:6a:e7:29:ee:13:83:3c:f0:71:56:10:
8a:06:96:7f:de:d3:fd:5d:29:81:17:dc:d1:01:be:9f:57:4b:
74:4e:c4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:21 2024 by rpki-client on console-fra.rpki-client.org