Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/zkUnDqC_EPXhl82y-pLCtCl2MEI.roa
File: zkUnDqC_EPXhl82y-pLCtCl2MEI.roa (raw, json)
Hash identifier: Gbdq6eSrGJ1ijgWQ9kq7SEi1IS3tPDf8ISX742iaGkE=
Subject key identifier: CE:45:27:0E:A0:BF:10:F5:E1:97:CD:B2:FA:92:C2:B4:29:76:30:42
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 018BCE4CBD515BA7D2E77356C73E815EFBF0
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/zkUnDqC_EPXhl82y-pLCtCl2MEI.roa
Signing time: Tue 14 Nov 2023 14:46:57 +0000
ROA not before: Tue 14 Nov 2023 14:46:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202611
IP address blocks: 188.72.103.0/24 maxlen: 24
188.72.104.0/24 maxlen: 24
188.72.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ce:4c:bd:51:5b:a7:d2:e7:73:56:c7:3e:81:5e:fb:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Nov 14 14:46:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce45270ea0bf10f5e197cdb2fa92c2b429763042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:94:21:1e:1e:5f:f8:83:8d:4b:0b:49:0a:3a:
30:75:1f:dd:ec:03:c5:33:20:7f:52:00:f8:11:f6:
11:2e:33:9a:7c:f2:38:b4:a1:c4:8f:62:e2:9f:11:
20:4d:27:d9:96:79:37:8a:43:d8:31:12:dd:ec:c8:
b1:d4:ff:65:8a:14:4f:4c:82:54:af:33:e6:67:1f:
24:3c:ae:52:3f:16:7c:68:29:28:2a:ee:51:8a:1a:
65:00:78:66:5e:2c:93:d8:28:22:23:bc:9f:c4:f4:
03:b0:7b:0f:c3:7c:c0:20:f0:ac:64:ea:b0:18:cc:
ec:c9:37:a5:1a:3b:ac:53:98:c4:04:df:0d:dd:ea:
d2:25:a2:a2:fb:fa:56:35:cb:6d:c3:32:f5:c3:9f:
f9:12:7b:11:5e:2d:72:34:fd:ed:dc:22:06:ce:6e:
89:9e:d4:44:7e:a6:86:e8:12:94:9e:df:8a:da:d8:
da:b9:91:56:98:ee:b2:55:1c:7c:3c:4a:81:1f:6b:
c1:e1:1e:0d:3d:1d:43:bf:bb:7f:f7:29:08:35:b1:
2c:ae:9b:b8:f2:35:b0:c8:87:b3:62:5b:9b:bd:43:
28:07:b7:60:d5:4e:66:dc:29:75:b0:ca:0f:d3:04:
15:6b:aa:4f:1c:c0:93:0d:91:c4:0a:42:05:af:4b:
ab:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:45:27:0E:A0:BF:10:F5:E1:97:CD:B2:FA:92:C2:B4:29:76:30:42
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/zkUnDqC_EPXhl82y-pLCtCl2MEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.103.0-188.72.105.255
Signature Algorithm: sha256WithRSAEncryption
a3:e5:c6:fa:cf:6f:6c:c6:51:cd:b4:f1:a1:bd:11:30:56:83:
0f:5f:5b:f3:8d:01:a2:7b:39:c5:fb:f4:5e:a6:d2:a7:20:65:
4e:0f:f7:2e:01:80:90:aa:5c:f9:9d:9e:95:9c:ec:36:a4:a9:
dd:ec:3d:39:c7:89:fd:ca:93:26:61:ed:74:1a:53:e2:1b:fb:
50:54:60:c3:10:07:f3:86:89:34:15:8c:5e:e6:79:dd:33:64:
7b:9a:f8:0c:ce:76:d3:15:ba:19:95:f8:03:3d:bf:c7:4e:51:
6c:3d:b2:ee:2e:15:b9:fd:f7:0c:bb:a8:d4:09:61:b8:0a:75:
7b:bf:58:fd:b0:9c:f5:de:d3:a2:e0:0c:14:bc:fb:c7:d4:f7:
bc:48:0a:fd:1e:af:4d:e3:ea:04:23:01:59:ba:93:a1:d1:a3:
3d:e1:cc:05:15:e0:15:f3:3e:20:7d:0b:ac:68:5b:4a:2f:ec:
5e:1c:0d:f4:d1:46:fc:f7:5e:29:77:8b:1b:32:7c:ea:63:8b:
e7:97:a6:29:f7:ef:85:1e:8f:db:ce:a5:6f:09:7e:25:0b:2f:
3d:8f:65:ef:3d:f4:31:ca:7b:49:1b:1c:6d:71:bb:4b:bc:55:
0c:5a:0c:fd:61:91:c7:83:0c:7a:58:fc:82:01:70:83:30:6d:
cd:f2:15:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:57:10 2024 by rpki-client on console-fra.rpki-client.org