Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/ZXxi_EDGoaDVCSU3O8MqmLbJQss.roa
File: ZXxi_EDGoaDVCSU3O8MqmLbJQss.roa (raw, json)
Hash identifier: RjjZmX2fyfGX1LLofBA3UxRb4PUrIUs3yBggihOA9p4=
Subject key identifier: 65:7C:62:FC:40:C6:A1:A0:D5:09:25:37:3B:C3:2A:98:B6:C9:42:CB
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 018A9277A9651612D098831B18DA5D4A4B4E
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/ZXxi_EDGoaDVCSU3O8MqmLbJQss.roa
Signing time: Thu 14 Sep 2023 06:53:50 +0000
ROA not before: Thu 14 Sep 2023 06:53:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 147.189.163.0/24 maxlen: 24
31.25.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:92:77:a9:65:16:12:d0:98:83:1b:18:da:5d:4a:4b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: Sep 14 06:53:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=657c62fc40c6a1a0d50925373bc32a98b6c942cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ef:8b:85:85:33:8a:dc:dc:ba:ec:15:61:cc:
6d:93:8e:19:08:4f:c3:61:5e:a2:04:00:f5:16:54:
ca:16:43:19:9d:95:45:67:a4:aa:27:e8:50:8c:11:
7b:21:7a:11:50:3e:ed:9c:bc:d4:88:73:ed:ec:f0:
70:69:e5:db:ab:63:c7:f9:85:a1:30:cc:ac:0d:da:
9b:36:57:2f:dc:ad:44:fa:5e:25:fa:15:17:0a:03:
dc:1c:e2:18:d2:54:3c:ec:7d:ce:e1:03:6d:db:27:
c6:f4:bc:13:1d:42:5c:07:80:b2:52:a1:86:65:dc:
ba:ff:31:b6:a5:82:2f:80:6c:d4:1a:fa:2e:46:ac:
c1:75:57:53:f6:36:2e:ec:ed:24:5b:6b:10:1f:3a:
1b:84:67:4e:81:9e:c4:a9:0f:da:29:b2:38:81:2d:
1f:97:c4:fc:c2:14:5e:b8:65:2b:08:13:48:7b:15:
65:c6:70:ae:a9:d1:7d:5e:84:79:02:28:0b:16:05:
32:4f:cc:f3:2a:56:d3:a9:d4:6c:64:e5:87:93:86:
ef:33:5f:69:f4:cb:f8:b6:d6:73:02:8a:db:60:b7:
41:40:f6:b5:49:2e:b0:f7:a9:86:cf:2b:f8:04:18:
59:2a:6c:f3:bb:bf:67:4c:a5:8e:df:63:d1:63:9f:
6d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7C:62:FC:40:C6:A1:A0:D5:09:25:37:3B:C3:2A:98:B6:C9:42:CB
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/ZXxi_EDGoaDVCSU3O8MqmLbJQss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.11.0/24
147.189.163.0/24
Signature Algorithm: sha256WithRSAEncryption
08:b7:93:14:7f:6b:cb:67:f1:8c:dd:7b:50:b5:ac:a6:2e:b0:
77:91:05:9d:ce:4d:5d:83:fa:8d:5a:71:c2:77:54:1e:bf:39:
69:fe:fc:e2:91:59:f0:50:7b:54:62:31:da:71:57:69:a0:b5:
4b:54:23:63:55:9b:29:91:54:cf:65:a6:7a:2d:b9:78:32:84:
4a:7f:db:64:6a:37:d5:6b:f8:d7:bf:29:c7:b1:96:7a:ac:ec:
ea:c1:dd:ad:df:5f:07:06:ff:06:72:de:f1:cc:b1:89:a3:78:
5a:67:6d:de:f0:36:f2:f2:5e:0f:42:b6:d1:b3:7b:dd:f7:0b:
91:80:fb:ee:ff:c7:9b:cf:95:77:be:9e:31:42:a3:67:b8:ab:
3c:35:26:3e:9b:c0:e6:cb:3e:4b:74:ee:89:43:45:43:38:55:
af:b8:bd:95:bb:bd:96:38:ea:8e:f4:9c:58:79:a8:97:6a:c3:
c4:16:c1:5a:ac:a8:d6:5a:30:4c:6a:4b:ea:78:b3:2d:94:ec:
ae:5d:ff:75:f9:6a:bd:2c:bf:4e:d8:33:a7:31:23:eb:36:b5:
ff:fd:b4:e0:ef:c6:ac:29:82:35:4e:f6:66:43:e9:99:0b:a5:
6f:02:dd:58:53:92:fa:52:1c:c2:f2:6a:07:96:81:ac:e1:a7:
3e:a3:19:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:06 2024 by rpki-client on console-ams.rpki-client.org