Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZMYNK3RY3qfDfWyqjE20-vOZbU0.roa
File: ZMYNK3RY3qfDfWyqjE20-vOZbU0.roa (raw, json)
Hash identifier: 1Gzz2SVnsAnc6qxpvk+Os/jTNaRAt72p25Bf87p5LEQ=
Subject key identifier: 64:C6:0D:2B:74:58:DE:A7:C3:7D:6C:AA:8C:4D:B4:FA:F3:99:6D:4D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189BFCA1243A3A56F7979C5D51AAB4870A0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZMYNK3RY3qfDfWyqjE20-vOZbU0.roa
Signing time: Fri 04 Aug 2023 09:03:58 +0000
ROA not before: Fri 04 Aug 2023 09:03:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205043
IP address blocks: 185.221.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Oct 2023 12:44:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bf:ca:12:43:a3:a5:6f:79:79:c5:d5:1a:ab:48:70:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 4 09:03:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64c60d2b7458dea7c37d6caa8c4db4faf3996d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:89:dd:92:69:44:f1:6a:0c:41:36:54:8e:e2:
51:0e:c4:7e:01:0a:16:58:72:d1:c4:23:49:90:67:
2f:d4:0f:70:7b:5a:8f:ea:22:30:57:34:fc:c5:bd:
19:9d:49:4b:63:aa:74:0d:f7:3f:db:7c:f3:5d:d3:
ac:dc:f0:a7:d6:c4:a3:b2:e1:8d:78:70:81:90:00:
72:8d:18:ae:13:db:8f:f5:91:b7:9a:08:18:a7:21:
90:af:bf:96:f5:5e:a8:41:eb:61:16:2a:52:df:78:
e7:aa:9b:b4:e3:0c:59:a5:8b:31:cc:a6:35:7d:d6:
9e:7b:11:03:22:f4:1b:38:ea:84:7a:f4:09:14:6f:
8a:29:1f:a0:11:57:e7:51:04:ea:fb:ed:9c:b6:c4:
86:e4:80:34:55:c9:63:a6:dd:a0:38:c9:78:85:3a:
94:ba:db:2c:f9:62:a7:61:43:6d:1d:30:8f:33:47:
c9:00:04:ac:c6:8d:a5:1a:e0:ac:e9:16:5e:8d:6b:
75:95:e0:df:e4:ae:c9:51:84:68:ab:42:57:80:71:
8e:f8:3f:79:49:ff:84:99:4c:f5:07:2b:d4:41:ee:
30:43:37:f2:9c:cc:d7:9e:fa:a2:b5:8f:c4:17:d9:
46:b3:7c:29:b6:72:24:bc:78:cf:4d:39:2d:57:90:
23:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C6:0D:2B:74:58:DE:A7:C3:7D:6C:AA:8C:4D:B4:FA:F3:99:6D:4D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZMYNK3RY3qfDfWyqjE20-vOZbU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.64.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:e0:1a:41:0a:02:75:11:5a:56:71:42:e0:1c:ab:33:f9:fb:
7c:d0:30:89:45:a7:5a:48:f6:2f:db:b7:d9:58:44:d2:62:e4:
43:6d:08:26:1d:d1:fa:a4:65:c2:df:46:97:41:86:c5:38:1e:
51:37:10:53:3b:bd:36:70:b7:db:f9:7b:7c:bf:3d:7f:c1:20:
04:cc:4e:71:82:a4:51:07:c6:14:29:0b:9a:d8:d9:15:84:74:
c7:bc:57:62:9c:70:a2:b9:9a:99:62:b8:f0:cb:31:78:e1:f3:
84:48:58:1c:8f:13:1c:c7:bf:22:ed:0f:af:9a:52:42:6b:56:
bf:ec:24:0f:91:8f:1b:44:b8:2b:33:c6:72:27:23:a6:1c:37:
88:17:69:10:7d:5e:c5:39:a8:11:06:e2:53:02:0c:19:94:54:
e2:6b:7c:b2:29:67:cc:97:b2:43:55:36:bc:69:ed:6e:17:58:
bf:8a:c0:b3:be:39:1a:71:bb:f9:56:2c:97:dd:9d:5f:b4:a5:
ba:e6:ef:ff:75:26:34:46:ce:5c:26:49:aa:8f:47:f4:14:3e:
5d:b3:ec:63:77:25:a8:28:00:a8:cc:30:08:bc:f7:12:ea:4c:
ba:35:1c:9e:02:e9:58:0f:6a:1e:13:7e:4a:9b:30:97:0b:15:
01:78:b4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:36 2024 by rpki-client on console-ams.rpki-client.org