Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/Zmy4XgznWBU2pZb3Rb6vSZQaVBU.roa
File: Zmy4XgznWBU2pZb3Rb6vSZQaVBU.roa (raw, json)
Hash identifier: DLw567g0evOMgKtdO+OItQNl3RcxtmHXQ5vd1zF83hU=
Subject key identifier: 66:6C:B8:5E:0C:E7:58:15:36:A5:96:F7:45:BE:AF:49:94:1A:54:15
Certificate issuer: /CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Certificate serial: 018570E76ED0467985C920411715E1FE856D
Authority key identifier: AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/Zmy4XgznWBU2pZb3Rb6vSZQaVBU.roa
Signing time: Mon 02 Jan 2023 05:14:53 +0000
ROA not before: Mon 02 Jan 2023 05:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50629
IP address blocks: 185.223.144.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:6e:d0:46:79:85:c9:20:41:17:15:e1:fe:85:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Validity
Not Before: Jan 2 05:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=666cb85e0ce7581536a596f745beaf49941a5415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:85:37:75:be:49:b0:fa:fa:ab:49:9a:fe:2f:
bc:f7:e1:97:81:f2:66:42:cd:4c:91:a7:7b:43:78:
7c:03:1d:4b:c4:39:96:e0:28:22:c0:21:5f:67:93:
00:a5:3d:c5:94:fe:62:18:99:8d:2b:73:01:5e:03:
d7:43:5e:6a:35:11:21:50:b3:35:4a:32:fc:5e:43:
e6:c0:f0:ea:af:4d:67:57:a3:de:de:f3:a7:e7:23:
22:ff:d8:85:2c:ce:c5:0d:92:cc:82:f4:71:4d:cf:
91:41:fe:f4:d4:a5:d9:fe:bd:95:dc:0f:82:ee:0a:
4b:93:ae:3e:b9:17:59:85:0b:69:df:71:fe:63:59:
2c:13:ec:2a:8c:b0:6c:1f:0b:49:b8:ad:ef:d0:54:
82:0e:04:6c:e1:36:9e:5b:76:0b:db:d0:00:83:5c:
6f:83:b6:96:23:65:19:93:b3:9d:28:a5:82:6a:3e:
35:52:9b:c3:f3:32:20:6a:f6:68:bc:55:47:55:81:
34:29:d6:d9:30:b9:65:cf:5f:1b:ed:ee:dd:48:79:
fb:5b:de:07:8b:38:a5:37:2b:2c:1c:e9:11:a0:c9:
f0:7c:a2:99:d2:64:bd:c0:02:21:c5:e2:6f:2a:3d:
34:20:6e:9b:eb:2c:90:8a:98:ac:f1:c4:a2:0f:c8:
d5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6C:B8:5E:0C:E7:58:15:36:A5:96:F7:45:BE:AF:49:94:1A:54:15
X509v3 Authority Key Identifier:
keyid:AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/Zmy4XgznWBU2pZb3Rb6vSZQaVBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.144.0/22
Signature Algorithm: sha256WithRSAEncryption
51:64:4f:f6:d4:fd:0a:f7:d5:35:0e:2b:f2:a9:98:fc:38:37:
bc:0e:ac:b7:74:f3:43:14:05:54:74:06:b4:1b:3d:d1:c7:9d:
8a:d4:8f:5f:d9:1d:5f:8f:9c:59:3d:5b:2e:b2:40:75:dd:4d:
5f:50:d1:ed:61:1a:e1:be:b4:aa:1f:c0:b7:64:75:39:99:ee:
41:f5:6c:8a:30:c9:2c:f5:10:04:83:89:4d:bd:1f:16:71:58:
70:e3:b3:a0:04:3f:2c:09:ab:b5:d2:d2:01:bd:8c:93:7e:93:
4a:f9:05:ab:6b:77:25:85:7a:0a:a2:d5:84:b2:7b:13:e8:db:
7d:64:c4:64:50:1b:07:ba:2a:9c:81:ba:2e:5f:3d:e4:90:00:
85:e8:5f:c9:4e:8e:61:28:c4:0b:dd:26:be:e2:37:62:7f:bc:
fa:b5:28:da:e0:4a:ed:55:c5:9d:4d:1b:f0:e0:88:2f:24:67:
c5:5b:18:0c:02:b7:64:92:bd:a6:48:df:83:75:e3:ca:32:05:
81:eb:7d:6d:f6:3d:a6:31:98:cf:13:2a:6a:20:00:59:3f:a3:
a7:d4:55:48:60:1e:76:94:f7:d3:82:9a:28:11:d3:02:a1:a3:
0a:dc:f1:07:12:88:c8:a8:32:21:f0:9a:16:2c:18:8b:97:07:
92:7a:d4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:03 2024 by rpki-client on console-fra.rpki-client.org