Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/ZgDUr_F-WukqjdXk3bDushfZyN8.roa
File: ZgDUr_F-WukqjdXk3bDushfZyN8.roa (raw, json)
Hash identifier: 3P8cChBc2TfynLYUNo++I60ZsfSY003NU7gXEvL07m8=
Subject key identifier: 66:00:D4:AF:F1:7E:5A:E9:2A:8D:D5:E4:DD:B0:EE:B2:17:D9:C8:DF
Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial: 01856EC23B7B65389D05C41C5573AEEFB761
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/ZgDUr_F-WukqjdXk3bDushfZyN8.roa
Signing time: Sun 01 Jan 2023 19:15:01 +0000
ROA not before: Sun 01 Jan 2023 19:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210021
IP address blocks: 194.127.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:3b:7b:65:38:9d:05:c4:1c:55:73:ae:ef:b7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
Validity
Not Before: Jan 1 19:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6600d4aff17e5ae92a8dd5e4ddb0eeb217d9c8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:d0:a2:47:3b:ab:c1:1d:8d:33:88:cf:7d:
a1:c5:3d:82:c1:3d:82:c0:24:d1:7e:ab:3f:fe:ca:
56:09:da:41:00:28:76:ab:4d:14:18:95:38:55:0a:
10:f2:3d:3c:4f:ca:7e:ca:e6:a6:4b:e4:52:48:0f:
ea:e2:4b:c1:bb:d3:c3:5c:f9:f9:11:8c:2d:43:90:
50:1e:11:da:4f:b3:bd:d4:01:9a:c8:06:5c:a0:9b:
31:d3:45:ca:92:49:24:78:6a:fd:0e:90:c1:bf:09:
8a:d9:0a:4e:ef:75:5f:1c:70:0f:34:db:86:48:83:
78:c2:30:7e:ce:a3:3c:f3:9e:23:c7:e3:d9:68:ee:
21:9c:66:51:98:46:bf:d5:f0:10:31:4e:2e:cd:81:
29:75:76:13:5d:c4:88:5e:9c:df:82:f6:c9:9f:82:
c9:cb:61:73:a7:27:3f:67:f2:44:e1:8c:f3:9d:d6:
28:ae:e2:5d:ab:07:c2:12:6a:cc:5f:8d:25:94:87:
57:6b:66:a3:30:7a:c0:69:70:46:3c:09:a0:bf:fa:
cd:fe:e9:f6:a8:75:73:f5:6c:2c:fc:61:ec:58:5e:
58:28:5a:86:37:9f:a3:01:2d:b9:e3:8b:59:17:73:
7c:75:59:55:be:80:4d:6c:52:da:cc:af:3c:16:10:
c7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:00:D4:AF:F1:7E:5A:E9:2A:8D:D5:E4:DD:B0:EE:B2:17:D9:C8:DF
X509v3 Authority Key Identifier:
keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/ZgDUr_F-WukqjdXk3bDushfZyN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.111.0/24
Signature Algorithm: sha256WithRSAEncryption
90:54:ed:3f:17:97:ab:ff:74:a7:8e:7d:3d:cd:51:4c:16:42:
f8:37:58:c5:40:e3:2b:5f:cb:95:ac:08:0a:89:13:23:de:09:
c2:7f:f0:01:1b:2d:cb:fc:48:b9:54:d7:2d:45:9a:11:6f:c0:
35:50:95:50:31:95:be:21:89:d3:79:b8:9c:99:79:d2:6b:7e:
f4:1f:b7:b3:cb:af:b4:4a:eb:9b:8b:92:a4:f5:f0:3b:d1:53:
b1:72:de:51:75:ae:b2:34:2b:06:7c:2f:17:12:e4:c2:2e:19:
94:f5:a7:79:69:29:bf:be:df:58:52:8c:26:97:b5:3d:38:e7:
c4:5f:03:ad:23:d5:7c:b7:74:23:e3:d6:16:07:bb:39:c9:2c:
f5:be:a3:64:15:fd:e6:29:99:75:10:4c:4e:c5:8f:30:94:54:
48:71:0d:10:96:36:e7:16:b3:c3:a5:ce:d3:50:fd:a9:8c:4a:
60:98:5e:df:f5:d3:26:ce:6a:18:59:bf:ae:da:5a:4e:ce:c1:
54:fe:18:88:c9:71:4c:b4:4c:d9:19:7d:0f:66:3c:3e:8c:27:
30:94:93:fc:fa:7d:64:d4:fe:c1:79:1b:3a:56:bc:bc:b4:df:
55:51:7f:7c:8a:72:f4:90:e8:79:16:41:f2:a9:7d:a2:e5:04:
86:48:18:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:59 2024 by rpki-client on console-ams.rpki-client.org