Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/mz2F5vmcklLwWcZsD_TlXxMT2eA.roa
File: mz2F5vmcklLwWcZsD_TlXxMT2eA.roa (raw, json)
Hash identifier: 9jhBk2Fo6v81Wyft/LdQY+Kp2na8LW/Q1wOH2wPTdJ8=
Subject key identifier: 9B:3D:85:E6:F9:9C:92:52:F0:59:C6:6C:0F:F4:E5:5F:13:13:D9:E0
Certificate issuer: /CN=33f650c0a0f16515a72dea601ce9ca2d4c164993
Certificate serial: 0185711E6A9550521B005AE97E612F44A813
Authority key identifier: 33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/mz2F5vmcklLwWcZsD_TlXxMT2eA.roa
Signing time: Mon 02 Jan 2023 06:14:56 +0000
ROA not before: Mon 02 Jan 2023 06:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48943
IP address blocks: 185.36.16.0/22 maxlen: 24
94.136.0.0/19 maxlen: 24
2a02:ab8::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:6a:95:50:52:1b:00:5a:e9:7e:61:2f:44:a8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f650c0a0f16515a72dea601ce9ca2d4c164993
Validity
Not Before: Jan 2 06:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b3d85e6f99c9252f059c66c0ff4e55f1313d9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b8:57:d3:59:b8:7c:c4:d4:83:07:82:b9:7a:
07:b5:43:5f:7f:07:5b:65:a1:e2:15:7a:bb:b4:1e:
eb:dd:fb:a3:15:7f:24:67:94:0e:29:a5:91:3f:2a:
8e:82:13:da:d0:bb:30:de:a2:12:a6:62:65:2e:63:
1c:ce:a4:47:41:6f:c6:2a:1b:0b:e8:24:8c:0d:28:
99:f9:d7:9b:12:a6:00:ba:23:cc:c3:72:c2:3e:81:
65:51:ed:45:6e:b5:0a:a1:71:8c:40:e3:3d:b4:60:
48:63:f4:ee:83:e3:41:a8:02:9d:ec:42:75:ac:a7:
4d:ad:c8:5a:32:8f:3e:6e:4b:de:e1:c7:66:79:7b:
42:ce:49:67:e0:ae:c7:5e:c5:ea:b9:d1:19:8c:8f:
29:7e:41:03:40:b2:d0:b0:cb:36:b3:4a:b7:e1:e5:
cb:86:e2:46:64:ba:62:55:bf:de:f3:50:3c:48:c1:
2f:d5:45:bf:1f:64:db:9d:eb:5b:b6:3d:8f:b2:7d:
25:d5:2d:e1:9d:94:38:cf:d3:f9:33:c6:16:ad:6a:
d3:02:ed:23:75:f4:5b:ce:26:ce:c1:bb:96:12:8e:
b9:c9:2d:98:0c:24:7f:17:fe:f7:98:74:4b:d9:52:
4d:05:56:97:e3:c1:75:0e:4a:d2:6c:4e:d7:a5:ff:
17:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3D:85:E6:F9:9C:92:52:F0:59:C6:6C:0F:F4:E5:5F:13:13:D9:E0
X509v3 Authority Key Identifier:
keyid:33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/mz2F5vmcklLwWcZsD_TlXxMT2eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.136.0.0/19
185.36.16.0/22
IPv6:
2a02:ab8::/29
Signature Algorithm: sha256WithRSAEncryption
1c:68:a6:16:a9:35:0f:86:eb:97:0b:d4:b5:e7:18:74:cf:e6:
d6:47:f2:38:c9:91:02:9d:0e:b8:74:49:20:3d:1e:bc:36:4d:
f4:0b:f2:c0:0c:2e:ff:49:11:ed:6c:7c:df:8c:e6:3b:c5:cc:
48:7b:12:2a:1e:fe:71:a4:d6:b8:bd:c2:90:e1:bd:bf:5e:38:
2d:7c:a9:f4:50:43:b9:22:48:e2:f9:bf:38:0b:58:46:9a:04:
03:97:b1:bc:47:d6:b5:67:00:5c:18:e3:df:a0:77:1c:fa:04:
35:ac:ea:7c:4c:b3:5a:80:17:7b:83:cb:db:54:6b:3b:ef:9f:
ff:94:c1:c3:16:98:1c:4a:1f:e7:e7:d1:3b:a9:14:89:54:73:
94:c2:0a:5c:07:ea:f3:89:73:e9:b7:d2:62:8e:84:79:58:f3:
a5:e3:16:ba:27:30:e2:20:a7:ea:4b:63:b6:b9:58:a7:52:c6:
b1:f7:23:3b:29:d9:98:53:7f:16:45:59:69:60:90:6e:25:e7:
eb:f3:06:5d:48:7a:54:b7:ab:52:df:ad:80:55:bd:46:ad:eb:
6c:7f:3f:a6:3c:da:06:ae:f3:79:d9:7e:20:77:47:7e:ab:1f:
ca:b5:7d:cb:05:4e:6c:e5:4c:cd:7a:2c:3a:59:cb:9e:37:7a:
9f:6b:b7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:38 2024 by rpki-client on console-fra.rpki-client.org