Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1e76ee-31bb-4299-814f-239e5abfcc6a/1/zg-Z-ZoEOLgo4_uMEFPJKGOKm2Q.roa
File: zg-Z-ZoEOLgo4_uMEFPJKGOKm2Q.roa (raw, json)
Hash identifier: G47ZeUBSvjORul5PnNyzH9H2fvVHgXYZJxtKGgQyJRc=
Subject key identifier: CE:0F:99:F9:9A:04:38:B8:28:E3:FB:8C:10:53:C9:28:63:8A:9B:64
Certificate issuer: /CN=867dd05ad72dc22fbea3029fcee90e6fb0638904
Certificate serial: 01856D789E6D090028D3F4212F577E8BFFD5
Authority key identifier: 86:7D:D0:5A:D7:2D:C2:2F:BE:A3:02:9F:CE:E9:0E:6F:B0:63:89:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hn3QWtctwi--owKfzukOb7BjiQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1e76ee-31bb-4299-814f-239e5abfcc6a/1/zg-Z-ZoEOLgo4_uMEFPJKGOKm2Q.roa
Signing time: Sun 01 Jan 2023 13:14:59 +0000
ROA not before: Sun 01 Jan 2023 13:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51368
IP address blocks: 193.104.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:9e:6d:09:00:28:d3:f4:21:2f:57:7e:8b:ff:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=867dd05ad72dc22fbea3029fcee90e6fb0638904
Validity
Not Before: Jan 1 13:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce0f99f99a0438b828e3fb8c1053c928638a9b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e4:1e:72:8b:2b:a3:ed:76:9b:d4:68:9c:e0:
b3:4f:c6:7f:db:6a:02:33:06:ce:b9:06:58:29:52:
09:e0:15:30:1b:78:1d:27:57:21:08:9c:ea:fe:13:
5a:15:ab:5c:c9:7a:8f:db:a8:39:d1:e9:78:17:a0:
83:35:2d:10:1b:e8:52:e5:63:45:82:52:61:02:2b:
28:46:66:07:14:96:d0:e8:a0:25:1c:81:d2:33:19:
5c:59:0a:96:9a:95:1f:f1:27:91:33:30:19:2a:1b:
03:c0:cb:c0:83:4c:6a:98:2d:0f:4c:5f:45:d2:cc:
53:9a:2f:64:e6:9f:f9:66:20:c2:63:54:a5:76:5c:
b6:4f:26:9e:a1:61:af:e3:df:3f:fe:27:79:8f:1b:
a5:4a:1b:d6:76:60:bc:9d:b1:93:22:b3:39:b0:0a:
c4:00:89:d2:70:50:8d:cc:d7:e5:a7:a2:62:b9:b2:
95:7e:c8:20:89:7d:55:a6:f5:10:51:d2:29:62:cb:
b7:15:fb:e9:a6:c3:4d:7a:7e:bf:4e:f9:e7:86:5e:
98:49:d3:5d:7a:8d:54:b8:2c:63:11:90:3a:5c:76:
47:56:66:5c:5e:70:9f:0b:64:df:f4:80:2b:67:54:
f5:2f:8a:76:51:85:c9:d7:33:36:de:09:99:c1:16:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0F:99:F9:9A:04:38:B8:28:E3:FB:8C:10:53:C9:28:63:8A:9B:64
X509v3 Authority Key Identifier:
keyid:86:7D:D0:5A:D7:2D:C2:2F:BE:A3:02:9F:CE:E9:0E:6F:B0:63:89:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hn3QWtctwi--owKfzukOb7BjiQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1e76ee-31bb-4299-814f-239e5abfcc6a/1/zg-Z-ZoEOLgo4_uMEFPJKGOKm2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1e76ee-31bb-4299-814f-239e5abfcc6a/1/hn3QWtctwi--owKfzukOb7BjiQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.112.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ca:57:c4:fa:a3:a6:c8:c7:33:73:c1:aa:de:cc:0d:8c:cf:
ad:16:cc:4a:92:1f:4f:3e:cf:10:ea:eb:ec:d6:e1:1d:c2:bc:
d6:0a:91:3e:a4:92:c7:43:72:54:d9:30:fa:b0:94:e2:c9:a1:
02:8a:72:12:df:f6:29:0e:07:84:1d:80:f4:59:c9:37:e6:fe:
e6:13:cf:28:de:dd:1d:32:21:b5:62:2f:31:45:c8:09:32:f6:
cf:b3:c4:e7:c3:9a:28:02:7c:70:63:4b:ff:51:f0:e1:22:47:
68:35:c5:d0:07:c8:c0:1f:e3:fb:9f:38:2c:de:3d:50:e9:9f:
6d:fd:79:ee:7d:41:ae:72:6c:5b:b7:85:e6:63:e6:55:20:7d:
6b:af:c6:b1:c5:65:81:df:79:48:35:30:6f:17:02:e1:a1:c6:
90:81:fa:7a:f1:4f:a1:38:8d:03:4a:1a:1c:7d:2b:13:0e:2c:
75:e5:fa:35:88:8a:e9:60:6b:da:53:2e:2f:31:5a:b9:32:e1:
ee:17:51:c6:6f:9e:ac:1e:85:d4:3d:ce:f3:af:34:12:2f:2b:
bf:de:31:90:62:e0:05:5c:82:f5:21:8b:07:ae:b1:01:c7:7f:
43:8b:bf:3b:31:89:f1:f6:d8:76:1b:84:0d:fd:46:35:3b:39:
9a:c6:63:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:39 2024 by rpki-client on console-fra.rpki-client.org