Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/ZyOuaph1418sDCL4PAEfjaXME68.roa
File: ZyOuaph1418sDCL4PAEfjaXME68.roa (raw, json)
Hash identifier: 52BalC+jGqRzLhq207/P5jH/DiJ5rj34ob8EOkEfh8k=
Subject key identifier: 67:23:AE:6A:98:75:E3:5F:2C:0C:22:F8:3C:01:1F:8D:A5:CC:13:AF
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 018E600B6BE9D3E65823ADDAE89ECF3EF0E2
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/ZyOuaph1418sDCL4PAEfjaXME68.roa
Signing time: Thu 21 Mar 2024 08:05:45 +0000
ROA not before: Thu 21 Mar 2024 08:05:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 93.127.161.0/24 maxlen: 24
93.127.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 May 2024 14:22:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:60:0b:6b:e9:d3:e6:58:23:ad:da:e8:9e:cf:3e:f0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Mar 21 08:05:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6723ae6a9875e35f2c0c22f83c011f8da5cc13af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6a:b7:e2:6e:d6:7f:98:cc:65:dd:e0:70:cb:
8d:c7:5d:c7:75:3a:48:45:ef:40:d8:b5:39:ce:0e:
6f:1c:9a:65:c7:ac:ef:eb:e0:e0:f1:71:cf:f4:b3:
5b:1d:47:c3:cb:80:f5:95:1e:f7:b6:db:bb:11:3f:
6d:76:60:78:de:ae:b2:db:4a:5b:e2:16:27:90:13:
66:7d:c1:b7:7e:0c:ef:8e:cf:ea:ed:a2:a9:d9:8f:
6a:6b:e9:5c:de:e5:4d:e6:f9:f9:e3:19:bd:f1:69:
8e:70:56:ca:3a:08:85:4c:7c:2e:dd:4c:93:ac:14:
50:c8:f0:84:a5:db:8d:92:e2:ae:00:d4:44:7e:c8:
f1:f4:58:d1:8f:67:8e:32:1b:eb:21:e9:fc:87:f9:
69:45:68:89:09:79:73:7f:07:a7:8a:54:9d:a0:b8:
0a:b9:b2:c9:88:71:8a:8e:b5:7b:aa:2c:f5:ba:ff:
db:c2:df:9d:3a:6e:b9:33:e0:6b:50:fa:fe:63:cb:
a9:76:68:7e:86:e6:1a:09:2a:4f:c1:7a:27:c0:da:
52:c9:5a:f6:f1:14:ca:ca:22:0f:2f:2c:a4:42:33:
4f:4b:6a:22:da:65:c4:d8:61:49:54:96:7c:50:12:
5e:31:39:f9:d9:91:5d:b7:ad:50:c2:f0:8a:dd:22:
c8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:23:AE:6A:98:75:E3:5F:2C:0C:22:F8:3C:01:1F:8D:A5:CC:13:AF
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/ZyOuaph1418sDCL4PAEfjaXME68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.161.0/24
93.127.164.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:f0:e7:d4:3f:4d:0b:58:10:0f:5b:4f:f1:39:73:da:af:b2:
e6:96:7f:fa:f7:0b:af:16:a1:60:74:25:b4:ad:10:a3:5e:50:
ec:e1:96:86:5e:95:07:df:bc:c5:71:14:c0:e2:d8:31:7a:44:
d3:c8:ac:ff:57:e5:7f:11:c9:23:ee:db:b2:be:3e:6d:9d:8f:
a4:71:b3:6f:6c:db:ac:e1:41:04:7f:8d:08:1d:fe:e0:33:64:
71:03:15:c7:6b:49:36:45:3e:64:76:8a:73:75:d8:dc:ba:0e:
84:c1:cb:76:70:bc:b2:2f:b1:0e:32:71:13:16:72:7b:16:46:
e3:33:a4:d5:4f:1b:14:8e:54:47:fa:41:05:a7:68:2b:6b:3a:
82:0d:98:14:24:10:0d:1b:55:bf:de:ae:d6:55:c1:85:7d:99:
ab:fb:fa:2f:ab:8f:65:1c:fc:f8:f7:82:12:a3:dc:86:38:7d:
4c:03:0c:df:57:01:94:7e:b8:8d:bc:d4:c1:f6:f5:e7:2d:b6:
02:b1:94:79:7f:84:ce:fb:da:aa:1c:6f:9e:1e:73:3d:7c:a0:
05:ff:40:a8:52:02:7a:49:53:6f:a0:bd:08:52:7b:67:41:3b:
9f:82:6c:aa:80:f7:43:ab:63:bd:ac:24:99:f9:60:c8:34:f1:
73:ee:96:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 18:34:49 2024 by rpki-client on console-ams.rpki-client.org