Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZZKekZ4I0tRndhsRSGVtF9q0zak.roa
File: ZZKekZ4I0tRndhsRSGVtF9q0zak.roa (raw, json)
Hash identifier: L4QKedoTDSkeQICduUK6PtCIfG0jv8j6V6qQAU1kHMg=
Subject key identifier: 65:92:9E:91:9E:08:D2:D4:67:76:1B:11:48:65:6D:17:DA:B4:CD:A9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A7E0C09427A8F99255498888DB2F4CCD0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZZKekZ4I0tRndhsRSGVtF9q0zak.roa
Signing time: Sun 10 Sep 2023 07:43:52 +0000
ROA not before: Sun 10 Sep 2023 07:43:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216419
IP address blocks: 95.214.26.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
171.22.28.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7e:0c:09:42:7a:8f:99:25:54:98:88:8d:b2:f4:cc:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 10 07:43:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65929e919e08d2d467761b1148656d17dab4cda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ad:a7:e0:61:9f:b5:6f:5f:87:1b:ef:66:08:
da:50:0f:8d:74:15:40:9e:56:e1:cb:bf:b8:41:83:
f8:fd:72:8d:73:a4:bc:e9:1e:bf:0c:01:ba:90:c4:
bf:18:44:8f:82:f4:03:3a:f0:13:d4:1e:50:7e:08:
c3:ba:25:bd:88:4c:9a:7f:49:c1:78:0f:fe:a6:f9:
64:f6:e6:12:5c:ac:fb:2c:c6:9d:3d:38:70:0a:5c:
30:a1:0a:fb:03:00:99:b2:3d:29:96:bd:22:26:ec:
77:6f:66:c5:7d:59:c5:21:37:8a:2f:27:a5:80:65:
53:e1:1b:55:aa:7d:ed:71:bd:bf:c0:3f:a2:e2:b7:
b1:71:6e:42:8e:9c:6e:b2:f2:1e:e0:de:a1:6b:3d:
cc:93:b9:64:1a:19:0e:ed:2f:3e:c7:71:86:95:cc:
b9:c6:fd:f9:af:49:11:c6:da:ee:41:52:4d:fb:ce:
59:54:db:38:53:b6:c3:a0:b9:a1:a1:57:b9:ee:17:
ed:e1:98:4a:5a:27:88:fb:ec:d1:cd:76:78:c4:2e:
69:a6:77:46:91:20:54:a2:71:30:c3:ae:e6:72:a1:
d1:a0:8b:c4:a5:d7:20:e2:3e:64:fb:78:86:cc:a6:
f4:bc:a4:b1:cd:ce:20:e9:1d:c9:cd:32:4c:9b:2d:
06:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:92:9E:91:9E:08:D2:D4:67:76:1B:11:48:65:6D:17:DA:B4:CD:A9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZZKekZ4I0tRndhsRSGVtF9q0zak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.25.0-95.214.26.255
171.22.28.0/24
185.216.70.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:90:34:5d:91:e0:dc:51:68:61:4f:75:78:e2:58:c3:38:65:
8c:ce:b6:c4:7c:fc:64:25:53:31:39:f7:3c:c5:59:72:ce:f0:
82:e1:5b:47:04:0e:f0:aa:38:df:b8:fe:00:91:11:17:9c:c7:
8b:b5:bb:0a:80:e1:36:89:20:da:c4:3b:72:2f:27:59:01:da:
cc:e8:8e:d1:ca:c0:30:c5:fe:6c:da:1a:ad:81:2b:34:c0:7d:
f6:e1:55:aa:92:c1:ad:a6:4a:c1:f8:20:99:b7:c4:c3:e4:d0:
f9:8e:23:12:38:30:5a:66:31:89:b7:de:92:88:d1:17:d5:12:
e2:dc:35:f9:18:ec:8e:ff:c4:59:b3:96:4c:9b:84:ca:fa:92:
8b:62:e7:a9:11:9d:75:05:37:3c:03:f7:6a:97:06:d2:5c:59:
fe:65:4f:06:b9:83:a8:1a:1a:84:ac:0c:10:17:33:2e:68:f0:
be:3a:82:2c:f5:2a:04:14:bf:d4:c1:46:de:ef:5a:fb:75:02:
9a:ef:99:d7:4f:63:4a:43:34:08:02:dc:f0:6b:a0:a6:6e:0d:
58:48:7c:7c:d1:22:ee:ba:d8:28:69:57:4f:0e:5f:92:fc:5f:
27:17:f9:b9:e7:ae:5e:67:1e:a5:01:f7:b3:b6:14:d9:70:62:
95:af:73:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 07:36:52 2023 by rpki-client on console-ams.rpki-client.org