Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/ZnvK0PaqQ07h7XFtZNR9_FWKHi4.roa
File: ZnvK0PaqQ07h7XFtZNR9_FWKHi4.roa (raw, json)
Hash identifier: E2S3/nBb7/bIw1FwCDodkgiSEy7MflvJ/APxV8LtHCA=
Subject key identifier: 66:7B:CA:D0:F6:AA:43:4E:E1:ED:71:6D:64:D4:7D:FC:55:8A:1E:2E
Certificate issuer: /CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Certificate serial: 018879DAF21B64CE9238D288EE300B8D357E
Authority key identifier: DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/ZnvK0PaqQ07h7XFtZNR9_FWKHi4.roa
Signing time: Fri 02 Jun 2023 02:06:11 +0000
ROA not before: Fri 02 Jun 2023 02:06:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35375
IP address blocks: 85.237.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:79:da:f2:1b:64:ce:92:38:d2:88:ee:30:0b:8d:35:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Validity
Not Before: Jun 2 02:06:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=667bcad0f6aa434ee1ed716d64d47dfc558a1e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0a:51:0e:b0:e1:3b:3e:2f:de:9a:49:76:df:
93:04:67:b0:bf:1d:a4:57:c4:32:49:b9:21:81:3f:
b9:9a:46:08:96:37:bb:f4:25:9e:87:60:a9:09:32:
43:08:78:aa:7f:42:d6:2c:2f:96:81:10:c3:89:d2:
d7:31:c5:ae:15:61:62:5c:db:d3:2f:c5:e0:c2:f3:
b5:8a:7e:93:12:fd:56:b0:28:2e:42:54:de:1e:57:
7b:fb:83:5b:20:ae:d9:f1:52:0a:e0:86:98:86:3a:
61:59:39:76:8a:43:ad:5c:76:97:7e:fd:ec:cd:cb:
a3:a4:87:37:a7:7a:4c:96:5f:ca:66:9c:89:40:17:
be:6d:e1:99:b2:b2:b5:6f:45:12:55:60:a7:9c:c1:
c9:20:b8:43:5d:03:4b:f6:14:e8:4e:c9:53:7c:ef:
3e:ad:4a:fc:ea:bd:ae:37:30:13:77:03:b2:a0:b9:
19:00:b8:b5:95:39:45:81:9d:61:43:95:e2:cd:95:
49:84:44:1e:9c:1c:3e:03:98:5e:9e:37:24:ab:a3:
48:90:3f:49:49:8a:e6:7d:7a:bb:f3:06:58:ca:20:
db:be:f8:2f:4c:4e:38:fe:42:0a:e3:bd:19:ce:e9:
d9:64:a5:74:ff:29:d5:82:4b:fa:da:c6:63:31:df:
6d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7B:CA:D0:F6:AA:43:4E:E1:ED:71:6D:64:D4:7D:FC:55:8A:1E:2E
X509v3 Authority Key Identifier:
keyid:DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/ZnvK0PaqQ07h7XFtZNR9_FWKHi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.192.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:1b:df:18:fe:74:3b:c4:cd:27:35:34:3d:06:33:06:34:09:
cb:91:f3:8e:7d:55:d6:af:7b:60:d3:38:35:fd:b8:0b:12:38:
ab:b2:ca:4d:87:8e:89:e3:2d:8e:5a:ec:f2:70:d5:dd:28:c4:
ca:59:1a:23:84:24:c8:f1:39:9d:df:bb:c2:11:d4:53:d7:69:
0e:4a:58:12:44:2b:aa:89:8a:0e:62:15:8d:9d:b5:40:2f:d0:
fc:99:85:89:b3:68:71:35:bc:ce:92:28:ff:fc:8e:83:68:1c:
8c:a2:ee:df:5a:86:b8:6e:55:5f:b6:94:a9:f6:c2:92:c0:df:
33:fd:23:24:e2:09:48:bf:21:e6:72:9c:2d:c4:a0:d6:72:06:
74:c5:c2:2c:0c:1b:25:50:21:2e:65:80:08:7e:b6:0a:74:96:
7c:93:9d:c7:11:ca:bf:cb:40:95:43:7a:db:7b:15:ff:c0:37:
b3:4b:3c:2a:a4:16:6f:cc:af:59:23:ca:c6:06:66:9a:b6:d0:
3d:13:60:83:9f:47:dd:59:94:5c:af:a0:9b:b1:d8:6b:10:08:
7c:45:fc:89:5b:0a:25:e0:c7:2b:29:9b:2c:dd:53:a4:4a:70:
c6:77:20:f0:7c:b7:8f:91:b0:a1:90:02:70:f7:a8:14:5a:0f:
fd:a3:17:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:34 2024 by rpki-client on console-fra.rpki-client.org