Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/ZYrjCoLAO-PRbUzZTlR8LSS07go.roa
File: ZYrjCoLAO-PRbUzZTlR8LSS07go.roa (raw, json)
Hash identifier: 4oAKBfsoVI/nP3Snwa0suILMliJQreIj21uHxkqDhpM=
Subject key identifier: 65:8A:E3:0A:82:C0:3B:E3:D1:6D:4C:D9:4E:54:7C:2D:24:B4:EE:0A
Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Certificate serial: 01860A0E92E4FC4693E7608512B709B76E34
Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/ZYrjCoLAO-PRbUzZTlR8LSS07go.roa
Signing time: Tue 31 Jan 2023 22:59:32 +0000
ROA not before: Tue 31 Jan 2023 22:59:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 157.23.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0a:0e:92:e4:fc:46:93:e7:60:85:12:b7:09:b7:6e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Validity
Not Before: Jan 31 22:59:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=658ae30a82c03be3d16d4cd94e547c2d24b4ee0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9a:76:8b:26:9c:04:1f:f5:4e:8e:2b:ee:60:
61:86:6f:50:d6:72:2c:98:ce:54:3b:d8:40:08:14:
cf:a8:d4:01:34:a4:3d:9d:d4:e0:4c:c1:9b:ba:2e:
17:ec:09:18:d3:cd:81:e6:20:ab:e7:e8:8a:6e:4d:
ef:aa:5c:8b:f4:0f:5b:71:8d:35:07:3d:de:80:01:
f5:d1:8f:88:b3:5e:14:14:30:14:7b:db:f6:37:ca:
3c:c1:c6:51:66:77:2a:d5:2c:bf:82:57:e4:06:11:
c4:a0:59:21:28:bf:fe:88:d0:61:8a:9b:55:1d:5e:
6d:55:f5:32:a6:06:37:89:00:8b:74:5a:25:e4:9b:
7d:8c:05:cd:18:78:f1:6a:56:62:b2:38:4e:1f:af:
80:2f:80:c8:28:74:14:73:aa:12:db:62:ec:b1:79:
14:7c:b9:0c:1b:79:61:94:37:86:bb:f4:00:63:99:
10:fe:bc:37:1c:63:d2:c3:e1:d2:16:38:bb:dd:c5:
00:96:8f:2e:15:f1:f4:ad:f5:6c:99:ef:99:96:61:
4b:df:7e:d6:70:5c:5e:44:33:48:ab:88:29:97:95:
f8:5c:16:63:13:66:4c:62:6f:cc:fa:92:bb:67:7e:
4f:10:0a:9e:7a:8d:63:3e:6d:84:80:7d:58:6b:43:
75:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8A:E3:0A:82:C0:3B:E3:D1:6D:4C:D9:4E:54:7C:2D:24:B4:EE:0A
X509v3 Authority Key Identifier:
keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/ZYrjCoLAO-PRbUzZTlR8LSS07go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.23.248.0/24
Signature Algorithm: sha256WithRSAEncryption
35:7f:5d:af:e3:bc:ec:44:c6:fe:28:18:ee:a0:14:63:93:e3:
d1:01:5b:eb:a0:25:13:ce:c6:8d:f3:50:5e:81:43:a9:c7:b4:
78:02:3e:9f:84:ec:98:f4:b1:07:f4:e4:12:7b:d3:9c:c0:2b:
4b:47:91:e8:69:f6:2b:5a:f5:d5:49:8e:91:81:30:11:1a:a6:
7f:18:fb:da:98:13:80:a6:5c:23:bd:32:45:43:ea:48:ec:27:
e3:f5:d4:2f:da:eb:53:0e:c0:72:f5:ce:fa:d1:4c:71:0a:29:
e9:fd:70:2c:54:42:f8:6f:05:85:81:ea:cb:f4:7e:38:90:cd:
d6:7e:28:24:e2:9a:d9:fd:84:5e:6d:44:e5:de:1a:61:4c:0e:
00:2b:a4:a2:61:8f:8d:e3:64:51:74:9b:9f:b8:2d:2a:06:9e:
fe:f1:14:46:74:80:0e:1e:80:48:6c:e1:5f:7a:76:77:0f:e5:
2f:df:1f:23:e7:4d:82:71:6b:f6:64:ae:20:e9:2c:1f:0d:86:
56:6f:a6:c9:c7:67:d4:b7:9a:46:65:ad:a9:41:54:e2:3d:4c:
7a:39:55:76:e2:f7:75:ad:a2:d5:b7:e8:2b:b5:73:43:08:87:
b2:1c:9c:28:d5:60:a6:96:6c:55:37:33:20:31:69:17:52:19:
7e:19:28:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:32 2024 by rpki-client on console-fra.rpki-client.org