Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/z6ur5NEy49BAXFH2SoTSeHXy7tw.roa
File: z6ur5NEy49BAXFH2SoTSeHXy7tw.roa (raw, json)
Hash identifier: Pe2a44lIz+HvTHysE74t9eloj5ynL8TyVIy1uYF77NA=
Subject key identifier: CF:AB:AB:E4:D1:32:E3:D0:40:5C:51:F6:4A:84:D2:78:75:F2:EE:DC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187096020681C5AB400A06D449F2D04B4B8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/z6ur5NEy49BAXFH2SoTSeHXy7tw.roa
Signing time: Wed 22 Mar 2023 12:51:47 +0000
ROA not before: Wed 22 Mar 2023 12:51:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199239
IP address blocks: 185.252.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:60:20:68:1c:5a:b4:00:a0:6d:44:9f:2d:04:b4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 22 12:51:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfababe4d132e3d0405c51f64a84d27875f2eedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:8c:ce:29:7d:7c:52:77:5e:6d:20:bd:e3:
49:ae:cc:7e:56:94:af:af:cb:ba:cb:2e:1f:5b:a5:
62:18:1e:0e:47:95:6d:1b:d5:2a:f1:41:a0:99:4d:
96:83:f2:6e:bb:e2:ff:db:8d:33:54:12:23:e9:b9:
3b:ba:8f:3f:ff:b9:9e:5f:03:6c:53:e8:e6:92:68:
08:81:2d:0f:55:dd:a7:64:f2:c9:42:f8:24:cd:33:
fd:cc:07:25:cb:38:4a:9d:c7:7e:78:38:b3:63:27:
38:b8:3e:43:09:cf:25:58:4f:81:ae:a2:97:84:60:
43:30:11:b8:06:80:96:cd:4c:22:c2:b5:6a:b3:36:
10:14:8a:28:a2:cd:46:b1:d8:b9:cf:7f:eb:65:3e:
e5:46:b0:0d:d5:55:3b:0e:b7:a5:7a:23:b2:48:df:
9a:bb:e1:56:b4:61:39:23:7c:84:1d:61:9b:b8:18:
9f:08:06:1c:8f:87:a0:77:5c:60:6c:ff:d7:78:80:
c6:5a:6e:a2:f1:01:2a:ea:62:58:5b:08:2a:26:26:
20:6c:93:c5:24:a6:a5:c8:39:80:6e:bb:f3:49:39:
51:e4:59:c9:9d:7b:e9:35:54:e9:46:21:f6:b6:34:
d5:26:44:45:f2:c9:93:ea:45:c3:8d:b7:f0:cf:6e:
69:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AB:AB:E4:D1:32:E3:D0:40:5C:51:F6:4A:84:D2:78:75:F2:EE:DC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/z6ur5NEy49BAXFH2SoTSeHXy7tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.176.0/24
Signature Algorithm: sha256WithRSAEncryption
43:42:41:32:3b:c2:98:88:3c:cc:7b:63:e1:7c:67:f8:2b:58:
7b:c7:10:27:c5:d9:f3:89:a9:82:cf:bb:d1:69:5b:d8:c7:7d:
3d:6e:5c:40:91:1f:cd:a5:1e:4b:d5:02:2c:4d:a6:91:30:5d:
cb:16:f8:fd:aa:52:4a:82:e3:b7:9b:42:2f:a5:56:db:28:58:
6c:cc:a8:32:41:bb:ad:1a:3c:f0:6a:5b:5a:62:16:e2:fb:0f:
e0:37:f2:fe:0e:81:47:df:c7:2d:19:b9:ed:27:22:e4:e3:24:
0c:03:b3:c0:bd:9a:a3:2f:74:cc:35:41:37:d3:5b:f6:a2:ca:
46:b5:ce:fa:97:71:2c:d3:df:b1:28:1b:ef:cf:f5:66:92:97:
a9:54:08:58:35:ef:61:4c:bb:c0:42:73:68:71:fe:51:10:1c:
f8:4b:09:72:33:b7:a3:7e:f2:a2:18:d1:bd:a5:58:a0:1a:fb:
b5:f0:52:f1:72:84:3d:71:99:72:cc:f6:14:e0:c5:1e:da:48:
36:6e:af:97:a0:55:5f:01:8f:d3:f6:95:da:ac:6f:4c:56:e2:
5e:37:ac:7f:03:16:b3:36:fd:cf:f1:62:88:c4:01:c2:1e:a7:
4a:f9:c4:c8:7f:d8:c4:5b:26:89:1f:ea:8c:95:50:5e:55:51:
3d:4d:5a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:50 2023 by rpki-client on console-fra.rpki-client.org