Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/ZeK54ks449VPGRxlew4p5nWrHqQ.roa
File: ZeK54ks449VPGRxlew4p5nWrHqQ.roa (raw, json)
Hash identifier: ldNUI+vvrD+7517xtndK6GUmBCmXmwAcCsV7df0nB64=
Subject key identifier: 65:E2:B9:E2:4B:38:E3:D5:4F:19:1C:65:7B:0E:29:E6:75:AB:1E:A4
Certificate issuer: /CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca
Certificate serial: 01856D0AC1D379889F3678AAC7F2F1D808D8
Authority key identifier: 11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/ZeK54ks449VPGRxlew4p5nWrHqQ.roa
Signing time: Sun 01 Jan 2023 11:14:59 +0000
ROA not before: Sun 01 Jan 2023 11:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12795
IP address blocks: 194.246.110.0/24 maxlen: 24
194.246.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:c1:d3:79:88:9f:36:78:aa:c7:f2:f1:d8:08:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca
Validity
Not Before: Jan 1 11:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65e2b9e24b38e3d54f191c657b0e29e675ab1ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cc:4b:b3:83:07:59:85:ec:a1:7f:d9:5a:95:
c9:fe:11:d2:4e:59:5e:96:90:48:c8:8c:d1:38:3a:
de:a6:05:da:d4:b0:59:9e:71:0e:b7:bb:92:a6:45:
58:37:24:80:fb:e3:5a:82:74:32:4e:b8:44:d0:55:
fa:97:04:28:1e:a0:0f:f1:fd:6a:15:34:4b:73:7e:
6a:e5:1c:43:81:89:2a:91:68:cd:57:6d:0a:5d:c7:
5a:95:2d:5c:38:d2:32:7f:86:d9:a2:8a:18:a0:94:
86:8f:58:1d:43:00:16:fc:ec:85:9d:19:84:38:72:
7d:14:e0:b6:e9:ce:92:8c:11:20:da:a5:9c:8c:cc:
49:59:68:75:34:d9:f3:bf:a6:ad:7e:e5:3f:a6:4b:
82:fb:9b:53:e1:a1:d0:bd:60:48:2a:b1:e6:8b:5d:
2d:6a:3f:2e:e2:ac:d1:bf:32:41:fe:2a:d1:99:a7:
23:cd:e0:58:4a:30:d6:cf:48:c2:a2:36:2c:43:ae:
b4:20:ac:0f:31:fa:46:41:39:06:60:25:65:a4:82:
0a:58:a5:d3:03:3f:56:96:37:a7:42:3c:6e:48:45:
39:f8:d3:27:76:33:a2:b5:de:37:bf:d5:6b:91:33:
c3:83:44:38:09:4a:ff:eb:78:b2:74:11:96:ce:2b:
de:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E2:B9:E2:4B:38:E3:D5:4F:19:1C:65:7B:0E:29:E6:75:AB:1E:A4
X509v3 Authority Key Identifier:
keyid:11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/ZeK54ks449VPGRxlew4p5nWrHqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.110.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:1b:86:9b:08:21:81:47:e6:98:98:fc:5b:0c:8e:c6:db:05:
2c:5c:ae:b0:41:48:a0:a2:3f:cc:83:9a:e0:ff:5f:c9:67:bd:
15:31:d9:2f:b5:a3:ed:56:b0:da:8f:5f:ef:aa:a1:cd:87:89:
05:a2:0f:0f:9a:c3:00:5f:bf:ca:b0:ae:31:bd:b1:81:70:b7:
b8:9c:a1:6c:16:52:56:8c:57:d2:b7:7c:d5:61:83:1c:c8:c8:
b5:9e:7c:52:5d:62:3f:54:57:13:e0:ee:a0:7b:15:fe:03:44:
d3:c8:28:cc:e2:6a:45:01:0b:8b:a4:71:6d:14:e4:9e:f1:a4:
13:0c:a1:05:4a:ed:da:7b:63:82:29:46:77:5b:55:cd:5d:50:
d2:bd:9f:5c:f2:ec:1d:36:fe:65:48:cf:f0:e7:78:aa:8f:94:
2b:0f:6e:81:47:64:86:9b:83:b4:6b:1b:e0:79:bb:23:e8:0a:
91:32:a6:17:5c:e7:d8:a9:8a:88:bd:e7:b3:f3:02:1c:69:e9:
3d:9d:f5:6a:25:45:67:ab:37:c5:4e:96:29:54:83:4c:40:41:
34:f8:2c:93:86:42:53:6e:bc:16:5f:6c:79:49:27:ae:fa:2d:
18:d8:e8:da:db:74:5d:a2:e1:ff:4e:ea:94:21:4f:f6:ad:04:
38:6b:fd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:31:02 2024 by rpki-client on console-ams.rpki-client.org