Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/ZLzv3APIVv4sgg6CUsOcNJUkBNc.roa
File: ZLzv3APIVv4sgg6CUsOcNJUkBNc.roa (raw, json)
Hash identifier: 6h3mg2Y29VdSLF5dCUKhT/6R5f65Cw2KnEH8M/r8xVQ=
Subject key identifier: 64:BC:EF:DC:03:C8:56:FE:2C:82:0E:82:52:C3:9C:34:95:24:04:D7
Certificate issuer: /CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Certificate serial: 01856F948F3BBB04C86D98BFFCE42BB533FB
Authority key identifier: A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/ZLzv3APIVv4sgg6CUsOcNJUkBNc.roa
Signing time: Sun 01 Jan 2023 23:04:45 +0000
ROA not before: Sun 01 Jan 2023 23:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45007
IP address blocks: 185.230.4.0/22 maxlen: 22
185.230.4.0/23 maxlen: 23
77.220.196.0/22 maxlen: 22
185.230.6.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:8f:3b:bb:04:c8:6d:98:bf:fc:e4:2b:b5:33:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Validity
Not Before: Jan 1 23:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64bcefdc03c856fe2c820e8252c39c34952404d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:64:c3:75:f2:92:e8:9c:8c:dc:8d:ec:6d:b2:
31:bb:bc:60:c0:3e:63:1c:ab:24:75:25:46:6d:80:
ce:24:ba:c4:61:c4:78:99:4d:d6:40:f3:2d:7f:1c:
3b:ee:b6:3c:dc:63:6f:b5:2b:32:aa:ae:9e:1d:f8:
81:56:d6:cc:75:da:a4:f5:3b:9b:b2:a5:6b:83:5e:
24:46:1c:0a:02:f3:56:65:b7:35:79:ac:d9:89:3c:
bf:32:bf:a8:71:31:0e:51:92:18:51:a8:17:57:7c:
56:73:50:31:5b:45:65:fb:fd:ba:78:bb:87:e8:33:
82:d9:d6:63:3b:5a:a4:44:70:c9:e6:48:8a:cd:1f:
85:fa:fd:7e:e0:7f:2c:02:87:d7:b8:e2:a0:a4:1e:
64:c0:9b:f3:3b:da:57:ef:43:89:1e:4c:93:34:f6:
7f:74:d9:53:45:c0:0a:ec:60:34:ff:9c:ff:e4:47:
1b:85:68:11:12:63:1f:92:4f:7f:80:4d:c3:07:78:
73:1f:53:26:da:b7:4f:bd:78:99:60:a4:6c:64:2b:
ca:8c:06:99:74:17:ba:1f:e2:23:e3:1b:6c:e8:1f:
6e:ce:d4:67:c7:49:23:1a:8c:90:6f:1a:b0:32:9e:
2a:86:10:9f:db:b3:8a:a4:62:1d:f4:59:c0:d3:62:
4d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BC:EF:DC:03:C8:56:FE:2C:82:0E:82:52:C3:9C:34:95:24:04:D7
X509v3 Authority Key Identifier:
keyid:A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/ZLzv3APIVv4sgg6CUsOcNJUkBNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.220.196.0/22
185.230.4.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:f6:f6:b1:8e:e2:bc:72:32:7c:0f:d8:aa:6a:01:82:fd:1b:
2a:a5:d5:80:e5:dd:13:56:38:d7:82:e8:2e:08:be:0b:64:e1:
a2:8a:54:ad:42:f1:08:24:5d:92:07:56:a3:f1:09:c8:67:21:
d5:e0:84:6f:35:1a:1a:9b:81:73:5c:1e:2b:13:e7:82:be:5e:
7b:dd:51:07:62:f6:ca:37:cf:af:63:8a:f3:2b:87:55:b0:d2:
15:ec:74:a0:bb:89:4c:a3:3e:c2:90:0c:99:86:a9:97:1b:3b:
bb:32:db:38:f5:d6:e9:fe:bf:ab:fd:62:a3:b0:95:dc:ce:f1:
54:3e:65:1c:bf:3a:d6:5f:2c:1e:99:d0:cd:72:e7:63:31:1e:
7e:ce:44:5e:2b:6d:b1:a2:ca:f0:4f:1f:c1:e8:c2:30:07:12:
bb:b5:ca:bd:42:bf:e4:53:23:51:4c:e3:0e:48:14:d3:63:63:
8c:3d:08:80:72:9a:29:8d:c9:e3:be:f6:0b:7a:6b:2c:b5:44:
2c:54:20:d6:79:14:f2:85:09:4a:da:25:b6:49:53:d3:41:2e:
a8:fe:26:a2:0b:4f:08:58:8d:38:06:26:32:b9:c8:9f:f2:ff:
37:28:30:44:04:83:5a:86:d1:d4:93:e0:be:78:a1:7d:1f:92:
d2:40:3a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:00 2024 by rpki-client on console-ams.rpki-client.org