Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/zzWqoQu9G6kr_8R98NsEU9hjfJs.roa
File: zzWqoQu9G6kr_8R98NsEU9hjfJs.roa (raw, json)
Hash identifier: DU5vwaga7qKpZXB9ydlkC9m34RvjNJWpd4V1Sqa2sX0=
Subject key identifier: CF:35:AA:A1:0B:BD:1B:A9:2B:FF:C4:7D:F0:DB:04:53:D8:63:7C:9B
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 0188760C199929DE4A7F6547350C6E3CFC45
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/zzWqoQu9G6kr_8R98NsEU9hjfJs.roa
Signing time: Thu 01 Jun 2023 08:21:24 +0000
ROA not before: Thu 01 Jun 2023 08:21:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51248
IP address blocks: 212.22.70.0/24 maxlen: 24
212.22.81.0/24 maxlen: 24
212.22.87.0/24 maxlen: 24
185.65.202.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:76:0c:19:99:29:de:4a:7f:65:47:35:0c:6e:3c:fc:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jun 1 08:21:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf35aaa10bbd1ba92bffc47df0db0453d8637c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3d:d9:8f:2a:bf:75:5d:ac:60:39:68:f4:fb:
7d:b0:18:7d:bf:dd:5b:88:41:57:a6:49:fc:f1:58:
59:c3:50:45:7f:77:cf:f2:dd:f5:a6:03:2e:6c:a1:
04:38:aa:76:b8:1c:c6:eb:6c:66:32:28:9f:98:42:
08:30:92:47:ba:99:67:40:0e:25:79:7e:b9:e7:d8:
79:96:0d:a6:db:f1:96:ed:e3:6e:38:81:0d:73:7d:
38:e7:e4:f1:32:52:ba:59:4d:36:81:27:dc:14:f0:
f5:3f:a7:1c:dd:6e:ef:af:c7:40:bf:33:63:fb:d9:
fd:3e:0d:af:87:bf:c3:22:5a:37:71:42:f7:05:e9:
93:af:bb:da:08:ef:12:c2:43:fe:ce:76:43:da:53:
ad:5d:3c:a9:f0:6d:7f:45:e0:9a:94:4e:34:53:bd:
a9:74:03:59:1a:8b:be:0b:4b:8f:a4:f8:b8:ca:a4:
01:0d:06:48:92:ff:46:b5:68:c9:46:23:35:39:5b:
47:ef:ff:0d:63:07:0f:f8:cb:aa:d1:81:c6:6d:7c:
23:aa:15:22:b5:bf:10:70:f7:09:f3:20:03:e7:19:
0e:f3:30:a4:92:92:c8:00:5c:d1:e5:27:87:4b:70:
f6:45:79:7b:d2:9b:4f:71:03:2d:cd:8f:a2:a8:87:
f3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:35:AA:A1:0B:BD:1B:A9:2B:FF:C4:7D:F0:DB:04:53:D8:63:7C:9B
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/zzWqoQu9G6kr_8R98NsEU9hjfJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.202.0/24
212.22.70.0/24
212.22.81.0/24
212.22.87.0/24
Signature Algorithm: sha256WithRSAEncryption
02:cf:1d:93:4b:36:be:dd:17:10:21:6d:af:94:a3:0e:78:8e:
ec:30:c5:04:ef:d1:fb:3d:59:ab:8d:a2:aa:f8:ff:27:d0:19:
2c:e3:d3:e5:30:46:27:c1:18:37:18:44:6c:b0:a0:47:15:30:
ca:54:59:24:c6:67:e6:f4:93:60:5d:c5:3a:1f:85:db:69:ac:
a5:a8:53:c5:0a:07:51:19:8e:95:c7:0e:2b:4a:78:b8:dd:54:
98:7a:82:12:24:3d:07:b5:09:1d:87:99:73:1f:0c:7f:38:76:
5e:31:22:63:eb:6b:17:79:fc:96:dc:91:b3:a5:ec:63:4f:e7:
5a:bd:e6:ee:a0:32:85:e2:77:59:76:9b:8e:ff:a7:7a:0d:c0:
f3:2d:a9:7c:ed:1f:65:f0:5a:1a:a8:67:7e:e4:7b:bc:05:17:
07:6a:3f:2a:38:48:fb:5e:48:f4:08:a5:ca:b3:7b:1f:93:c5:
72:a1:17:42:0f:fc:85:30:dd:d6:16:b7:2d:51:ea:ac:4a:91:
e8:42:a4:71:9f:76:32:c0:9b:69:95:57:1e:76:35:6f:63:9b:
43:cd:95:f1:17:26:b0:43:ae:3c:59:59:4d:a2:2d:98:10:f6:
5a:a8:b7:51:f8:e8:f0:07:bd:4d:f2:08:89:58:5f:f7:2e:e6:
8b:2c:33:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 27 11:43:30 2023 by rpki-client on console-ams.rpki-client.org