Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/zIkrmEp5BWYXScBZN2gJKJEU494.roa
File: zIkrmEp5BWYXScBZN2gJKJEU494.roa (raw, json)
Hash identifier: AXow8HioEAKZS+NE8fWQTl+/2e4RgtGRySNJ1ls9Wog=
Subject key identifier: CC:89:2B:98:4A:79:05:66:17:49:C0:59:37:68:09:28:91:14:E3:DE
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 01856F6FF622B7B5D54A1897A9264EA1751C
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/zIkrmEp5BWYXScBZN2gJKJEU494.roa
Signing time: Sun 01 Jan 2023 22:24:46 +0000
ROA not before: Sun 01 Jan 2023 22:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16262
IP address blocks: 194.147.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:f6:22:b7:b5:d5:4a:18:97:a9:26:4e:a1:75:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Jan 1 22:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc892b984a7905661749c059376809289114e3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5f:6a:03:7d:80:a9:60:b3:af:61:63:88:1e:
d5:77:65:55:38:64:da:b5:b8:e9:df:dc:07:a1:58:
44:7e:4b:93:39:4e:d5:92:d0:2f:44:61:77:cf:0f:
69:79:13:f4:d6:af:b4:eb:14:f4:f8:25:11:7e:51:
10:be:15:a8:8d:ac:dd:57:c2:c5:c1:63:89:e6:c6:
ee:f6:31:3d:fb:dc:2b:2a:26:c8:6c:ea:fd:1f:23:
29:dd:51:7f:dd:a9:6f:b5:82:d4:26:66:60:14:3d:
cf:80:0b:ef:33:14:90:30:b5:90:68:f6:72:af:41:
8f:10:a9:63:e2:5e:2e:61:fe:0b:6e:71:b1:02:1a:
69:77:c6:32:d5:38:c2:0a:51:91:9e:00:6e:99:36:
3b:fb:1e:17:ec:2c:89:81:bb:8d:fc:e8:fd:2a:f5:
48:66:16:dd:e6:59:06:48:18:ed:c2:d0:45:9a:17:
0b:48:e2:74:62:f6:5b:52:f5:84:5d:31:6b:85:90:
26:23:8d:ea:44:23:b3:77:a5:29:f7:16:51:b7:e3:
f9:ea:74:82:2d:9e:5f:54:ca:64:a3:77:d6:dd:7f:
7d:38:88:90:df:16:53:b7:82:50:b3:43:b0:68:5c:
5f:46:06:c1:bd:5b:0a:3a:53:52:fb:fd:c2:1d:51:
85:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:89:2B:98:4A:79:05:66:17:49:C0:59:37:68:09:28:91:14:E3:DE
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/zIkrmEp5BWYXScBZN2gJKJEU494.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.140.0/24
Signature Algorithm: sha256WithRSAEncryption
22:6a:18:aa:24:a2:75:cd:25:30:21:8c:1f:70:89:11:22:b0:
f6:83:10:16:9e:5b:f7:9b:57:46:f3:57:3e:79:c2:fc:3c:d2:
91:49:86:74:cb:24:47:58:c8:b6:03:c8:da:4a:b3:5c:0b:39:
d3:45:bf:f3:8c:cc:44:32:e7:bd:5e:f0:f1:b2:c8:7e:bf:e0:
2b:a5:f8:24:55:aa:8f:de:dd:5b:02:bd:e5:6b:af:21:41:a1:
c6:98:c3:40:42:42:ff:ef:bb:08:0b:79:3d:2c:04:a2:dd:27:
2b:df:a2:94:66:b2:63:25:09:a1:d6:fa:95:c0:2d:79:a7:0b:
07:85:8c:91:67:cc:5b:3f:b7:31:2d:0a:87:8e:29:8c:e0:30:
9f:47:45:c2:7a:44:cd:cf:11:3e:69:1f:7b:43:7a:01:53:43:
f7:74:b3:8b:1a:20:aa:13:c6:b6:51:94:1a:9a:ef:fd:b0:e5:
82:44:31:03:21:20:fa:95:20:e8:c2:25:3e:8c:96:d7:a8:24:
97:c2:98:0d:20:95:9e:19:d4:4e:3c:bc:ed:40:b1:69:10:48:
7d:a5:b5:cb:da:3a:db:3a:61:1e:14:f3:a5:50:e7:cc:35:3a:
4b:f9:58:ec:f1:3b:3f:77:b1:b1:18:69:74:ef:db:45:c0:ba:
a0:95:67:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:20 2023 by rpki-client on console-fra.rpki-client.org