Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/ZQ5h4u5FKgKysBPAUXfmzPG-1ZQ.roa
File: ZQ5h4u5FKgKysBPAUXfmzPG-1ZQ.roa (raw, json)
Hash identifier: g0yPJNOlEzkrHrYlNXXYZgILCRsgocJLmsrvac4kEe0=
Subject key identifier: 65:0E:61:E2:EE:45:2A:02:B2:B0:13:C0:51:77:E6:CC:F1:BE:D5:94
Certificate issuer: /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Certificate serial: 0185728C9D487CA5A6C807747AE57BA811CB
Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/ZQ5h4u5FKgKysBPAUXfmzPG-1ZQ.roa
Signing time: Mon 02 Jan 2023 12:54:55 +0000
ROA not before: Mon 02 Jan 2023 12:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.214.22.0/24 maxlen: 24
185.214.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:9d:48:7c:a5:a6:c8:07:74:7a:e5:7b:a8:11:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Validity
Not Before: Jan 2 12:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=650e61e2ee452a02b2b013c05177e6ccf1bed594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:b3:75:3f:6b:e8:09:18:e5:b9:d7:0d:3a:
4b:5e:49:14:ba:5f:0c:5e:9f:9c:19:65:e5:97:06:
b2:9c:66:de:97:e3:b2:32:89:83:d6:41:1c:19:fd:
09:61:57:03:76:a2:1c:e7:d8:b0:76:ab:0d:39:a2:
95:a7:08:8c:89:c6:dd:42:98:3e:c0:a3:fd:71:26:
c6:04:a9:82:2c:19:95:ed:fa:ee:db:72:a9:d6:ed:
2f:3f:44:ed:69:e3:1f:0d:63:ea:cf:f6:08:3d:ac:
f2:3a:31:28:6c:3d:2d:20:d1:9f:cb:d5:09:7e:23:
e1:79:ae:05:fb:df:9b:c4:42:50:34:d8:b0:11:3b:
c0:4d:80:e2:cb:d5:78:cf:39:eb:2f:c1:54:0c:01:
28:a6:02:bc:77:13:56:fa:06:9c:97:79:f6:23:3a:
89:d5:bd:98:0f:b3:d6:e8:b4:c4:2f:39:2f:5d:e5:
82:67:05:fc:af:4e:b6:10:89:a5:a9:c5:e2:76:c4:
5f:ab:59:01:56:b0:aa:71:f5:9d:39:e7:e5:b8:bb:
f2:27:8f:c5:93:20:5b:46:91:69:e8:48:14:15:f8:
e4:1c:a2:44:71:bf:eb:e1:b3:fa:b7:1b:ac:6c:6c:
59:b5:c1:cb:3d:fa:d5:4b:3c:83:b4:b2:1a:ed:ab:
cc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0E:61:E2:EE:45:2A:02:B2:B0:13:C0:51:77:E6:CC:F1:BE:D5:94
X509v3 Authority Key Identifier:
keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/ZQ5h4u5FKgKysBPAUXfmzPG-1ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.22.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:f9:db:f0:46:81:a5:b1:f5:41:bb:32:2f:47:04:9b:9a:77:
e8:70:64:8a:f9:65:dd:15:d5:12:62:8d:46:eb:2e:dc:7c:cb:
58:97:d5:77:89:40:5e:08:74:b8:2c:b5:12:b4:dd:0d:65:42:
4d:7e:85:a7:dc:db:76:87:13:fe:25:a4:02:85:c9:1a:b2:3b:
04:ba:2b:17:d6:d6:ff:9d:7b:de:2a:a0:19:7b:d2:82:aa:a7:
33:6d:f5:2b:bb:ae:7c:2f:4f:b2:53:49:06:79:2e:8b:ca:91:
4e:71:09:78:db:5d:2a:e5:cc:6d:6e:91:4b:c4:9f:9f:53:70:
c7:0c:cc:e3:08:44:66:51:fe:49:cb:a2:9c:a7:a2:34:5f:80:
e2:a5:2d:f1:7b:c9:1e:cf:14:85:df:35:60:15:f7:08:ed:9c:
9c:e7:43:73:3d:b7:11:97:46:13:b1:0a:37:ef:35:9e:a3:a5:
39:3a:06:a7:c9:c2:24:c2:03:ca:de:54:fa:12:ec:09:79:0b:
e4:49:fa:3c:40:aa:7c:1f:52:b2:63:e4:55:d7:81:56:9c:1f:
2a:0f:6e:75:dc:17:e2:3b:99:69:01:e2:ba:5d:77:4d:0f:36:
7d:ea:a9:d7:04:28:8b:1a:89:3d:d1:54:f5:6b:cf:3f:dc:b4:
fa:48:62:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:34 2024 by rpki-client on console-fra.rpki-client.org