Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/zTZrYfwIQ-ZBTsIdHCAQhDohO2g.roa
File: zTZrYfwIQ-ZBTsIdHCAQhDohO2g.roa (raw, json)
Hash identifier: EQqmQyPSmcb7FmegYMkZs8Mjpu+yYsAwaSfLaIERGMA=
Subject key identifier: CD:36:6B:61:FC:08:43:E6:41:4E:C2:1D:1C:20:10:84:3A:21:3B:68
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 01856CB8341E157B7C54F5D37B730828A24B
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/zTZrYfwIQ-ZBTsIdHCAQhDohO2g.roa
Signing time: Sun 01 Jan 2023 09:44:49 +0000
ROA not before: Sun 01 Jan 2023 09:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2300
IP address blocks: 81.52.185.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:34:1e:15:7b:7c:54:f5:d3:7b:73:08:28:a2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 09:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd366b61fc0843e6414ec21d1c2010843a213b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c9:8a:16:92:19:c7:ee:5f:03:bd:df:bb:3e:
c3:8b:6a:64:64:8c:90:42:31:27:5a:51:95:56:31:
4c:41:e1:ce:28:6c:75:cd:7a:1a:e1:af:b6:e8:b5:
68:5f:6b:f6:5c:2a:0f:3c:a6:50:e2:63:0b:32:1a:
eb:5b:30:d3:bc:54:2a:0b:84:ab:64:16:a6:32:98:
c5:8c:40:9e:18:11:4a:96:e0:1f:a1:58:ec:8e:98:
f6:4f:2f:cf:c2:45:66:66:37:82:ee:52:93:ff:11:
1c:bc:ee:3a:0d:37:ec:87:95:1d:5d:b9:81:93:85:
10:ae:91:14:9f:f3:51:7f:54:08:13:d7:02:7e:13:
b2:4e:f7:71:6b:9b:6f:8b:43:6b:3c:4a:b7:38:df:
bd:b3:3e:45:9c:ea:83:d6:06:2e:a7:e6:3f:d6:cc:
42:ab:6c:c5:c3:82:96:be:59:9f:f7:1e:5c:17:31:
58:d6:01:88:86:53:25:a2:67:8a:8a:16:7d:bb:c8:
1c:10:38:7d:5f:96:26:4e:73:43:76:6a:dc:b4:24:
b9:39:d1:ef:37:8a:b0:a0:3c:fe:53:89:08:6b:fb:
29:bc:3a:96:1b:14:5d:e6:19:02:1a:33:84:5e:80:
15:e3:47:2a:35:fa:b5:75:4f:8a:12:ef:4f:06:77:
d7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:36:6B:61:FC:08:43:E6:41:4E:C2:1D:1C:20:10:84:3A:21:3B:68
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/zTZrYfwIQ-ZBTsIdHCAQhDohO2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.52.185.0/24
Signature Algorithm: sha256WithRSAEncryption
71:ea:6f:8a:5a:6c:d0:15:38:a5:bd:9e:4c:53:0e:32:da:49:
83:00:f1:21:86:65:9a:71:42:9e:f4:49:64:56:58:1d:5e:76:
f5:c9:4c:7c:7e:5b:b3:f0:44:11:08:39:00:f2:a2:6e:7a:0b:
6f:e8:ad:2c:a2:55:e8:a7:15:31:43:86:43:77:cb:d6:e7:b5:
64:2d:bc:49:dc:2e:3b:c8:7a:78:14:72:1f:a7:c7:21:98:ca:
a4:af:0a:c4:1c:7c:99:ca:89:85:b8:b8:fd:79:76:c7:ef:44:
c3:3d:8f:1d:56:21:a6:a2:7f:63:d6:4a:07:b4:3d:ac:a4:9a:
ed:12:21:e4:78:1f:83:4a:c2:ca:05:7a:0d:83:68:00:6c:88:
80:22:2a:35:71:07:8b:df:29:c3:ca:01:83:ef:41:51:90:5b:
b4:c5:9d:79:24:15:db:b3:38:fc:cf:eb:67:25:a4:22:db:0c:
77:4c:a5:6d:a3:b5:91:58:46:1f:5e:37:2c:21:41:d4:13:f2:
68:32:68:8f:b0:33:05:0e:d6:44:c0:9f:63:44:69:6c:16:a9:
10:a1:f7:73:e8:45:d7:93:e8:83:1b:9f:32:2b:df:f8:bb:63:
e2:57:69:73:17:85:19:52:93:c4:ea:4d:f1:5b:bc:2e:36:74:
11:fe:16:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:52 2024 by rpki-client on console-fra.rpki-client.org