Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/zGinyDNxNf4zLcMg1JZKg5scMLc.roa
File: zGinyDNxNf4zLcMg1JZKg5scMLc.roa (raw, json)
Hash identifier: HPfE1f4/gyxZRiBegHMnmxYOTYvkrUlbTLELZHJ16z4=
Subject key identifier: CC:68:A7:C8:33:71:35:FE:33:2D:C3:20:D4:96:4A:83:9B:1C:30:B7
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 01856FC261B78427A407896CC9C4264C3C46
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/zGinyDNxNf4zLcMg1JZKg5scMLc.roa
Signing time: Sun 01 Jan 2023 23:54:47 +0000
ROA not before: Sun 01 Jan 2023 23:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26506
IP address blocks: 83.2.226.0/23 maxlen: 23
2a01:1100:b001::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:61:b7:84:27:a4:07:89:6c:c9:c4:26:4c:3c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Jan 1 23:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc68a7c8337135fe332dc320d4964a839b1c30b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b7:00:19:22:c1:23:02:34:34:54:ed:3a:26:
c5:c9:e3:fb:e4:dd:22:34:2e:76:26:e2:93:f0:85:
1d:68:e2:64:8e:e5:c1:74:10:21:e3:77:4e:e0:57:
cc:42:f6:1d:93:2c:f8:a1:e3:16:d4:cd:c0:e6:32:
c3:e7:ba:05:10:98:40:f7:61:c5:a0:ee:7b:7e:a0:
cf:a2:83:93:17:84:37:74:3d:4e:6e:9c:fa:4d:8b:
81:42:c8:01:e8:79:6e:83:17:f6:01:32:20:61:46:
ce:86:78:6a:95:33:ca:96:bb:d2:52:23:5f:d3:2a:
ce:f7:d8:2b:6f:af:da:5c:04:f6:6d:dc:22:03:75:
8a:e3:3b:57:7d:17:54:36:68:3c:63:0d:82:aa:57:
6a:04:61:cb:c4:2f:df:79:91:36:12:d9:62:12:78:
9c:f1:0b:3f:24:95:51:80:79:7d:f1:6d:87:af:3d:
72:7a:c6:d7:da:66:07:c1:80:a9:48:35:eb:7f:39:
0c:3d:58:68:d8:4d:32:05:26:c0:77:1f:67:ac:ce:
d2:78:49:f4:44:b3:8a:05:53:fc:87:5d:a0:41:94:
6a:60:77:58:4e:a2:a1:68:b8:e2:8a:f8:04:15:2b:
c8:63:ac:66:91:36:1f:82:73:74:c9:f7:4d:7f:78:
35:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:68:A7:C8:33:71:35:FE:33:2D:C3:20:D4:96:4A:83:9B:1C:30:B7
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/zGinyDNxNf4zLcMg1JZKg5scMLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.2.226.0/23
IPv6:
2a01:1100:b001::/48
Signature Algorithm: sha256WithRSAEncryption
1a:29:0c:78:4c:a5:e2:d9:2c:73:57:b9:25:cd:98:98:f5:5b:
34:4a:c6:df:3d:76:61:51:6d:07:d2:60:cb:26:de:e0:9e:93:
7f:f6:0b:5c:fa:f0:36:98:a9:b4:92:e2:3c:25:b3:d0:b2:1f:
e1:25:72:4c:63:20:8b:6d:7c:42:fd:38:40:f7:53:46:df:72:
4b:c7:b9:47:97:ef:ee:00:33:ad:c7:b3:1a:9e:5e:af:a6:6c:
39:ff:4a:61:93:1a:85:2a:f5:13:a7:2c:f4:a2:20:a8:53:5d:
61:20:11:12:ee:aa:c1:17:c9:e0:4d:40:9b:93:90:40:b1:49:
93:f6:2a:ff:d1:d3:16:d1:40:b8:e9:fc:54:8d:65:8f:32:9c:
ff:a6:76:6d:08:f7:76:8f:d8:c8:e6:4d:ce:38:1f:f4:cb:05:
99:8b:dd:fb:15:ca:ce:12:83:0d:99:ae:e9:4b:7c:ca:ce:a1:
b3:5d:3b:cf:03:cc:27:d5:a0:21:af:c9:21:91:aa:5a:34:f9:
0b:aa:7f:94:35:d3:27:20:17:62:58:99:c3:9b:02:14:9a:e7:
b9:0e:06:e0:74:a0:c2:4f:d5:09:91:da:73:e9:63:7d:88:09:
da:bf:b8:80:1d:4f:21:79:ba:30:5c:57:af:01:9c:54:2c:db:
e0:ed:58:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:16 2024 by rpki-client on console-ams.rpki-client.org