Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zDRJQ47h_fkmxchBVIf6iOm5Ieo.roa
File: zDRJQ47h_fkmxchBVIf6iOm5Ieo.roa (raw, json)
Hash identifier: 0MsoAsY9/X3+iP3scDVvgq7IVs2k2h0LGea3CsY63/g=
Subject key identifier: CC:34:49:43:8E:E1:FD:F9:26:C5:C8:41:54:87:FA:88:E9:B9:21:EA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018770C2D373886B3790585807C1C09CCEE3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zDRJQ47h_fkmxchBVIf6iOm5Ieo.roa
Signing time: Tue 11 Apr 2023 14:40:28 +0000
ROA not before: Tue 11 Apr 2023 14:40:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61302
IP address blocks: 81.161.239.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:c2:d3:73:88:6b:37:90:58:58:07:c1:c0:9c:ce:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 11 14:40:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc3449438ee1fdf926c5c8415487fa88e9b921ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:cd:03:4a:45:d6:0d:cf:1a:7c:46:ba:54:
3c:07:59:98:1e:aa:e0:34:2c:72:94:d8:40:b1:e7:
a1:9e:2e:5d:b8:b3:92:3b:d6:76:5c:73:39:73:e6:
49:8c:ca:b9:f2:16:99:01:51:a9:66:57:e2:22:f2:
cc:30:5f:3c:b1:2c:c5:52:29:32:7b:d2:f9:9f:be:
9c:e5:fd:b2:6e:00:d7:a6:87:ac:5b:6d:19:65:69:
32:97:29:ab:0b:ed:bb:46:48:7d:65:59:67:7f:ca:
41:1c:9f:d1:7e:99:26:5d:1c:0c:07:ba:84:7b:1a:
e8:71:4d:d6:b1:2b:ad:13:78:4a:0a:56:6a:38:cd:
6b:1a:60:02:b7:d1:d4:61:8c:67:6f:be:06:a7:e7:
a0:39:1f:7e:21:35:fb:97:04:2f:0e:ce:fd:7d:1b:
81:d5:e6:1c:c8:a7:a8:03:9e:89:52:e8:56:e7:1b:
19:0d:87:05:e4:16:c0:09:dc:eb:6b:f6:61:b6:72:
f6:71:89:9f:9e:fe:15:c5:0a:66:56:3f:d7:e4:a3:
1a:66:24:c6:e3:05:a1:fb:13:17:df:18:2b:7b:4c:
ba:53:44:39:b5:34:4f:38:6e:e5:65:8f:39:2e:b1:
bb:e5:60:63:14:05:ed:dc:36:54:42:9e:d2:66:e8:
5d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:34:49:43:8E:E1:FD:F9:26:C5:C8:41:54:87:FA:88:E9:B9:21:EA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zDRJQ47h_fkmxchBVIf6iOm5Ieo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.158.0/24
81.161.239.0/24
83.219.97.0/24
171.22.17.0-171.22.18.255
194.180.39.0/24
Signature Algorithm: sha256WithRSAEncryption
86:b8:30:60:ca:8f:59:64:e3:07:d7:2d:34:2f:e3:20:aa:31:
3e:b4:e6:d2:eb:e0:3e:56:7c:69:65:3e:c4:d2:e1:3c:c7:3f:
7d:ad:a5:d9:f5:93:53:fa:cd:7e:7b:fc:d0:40:20:2c:33:bf:
41:be:7b:33:8c:66:91:19:8a:26:43:f3:c8:f5:e8:69:5b:b8:
c1:35:e7:d7:5d:b0:df:30:bb:3b:1f:eb:3f:2e:26:8d:43:ea:
d9:00:65:1a:36:18:69:44:9b:ad:8a:7f:d0:d5:52:97:25:9c:
3e:6b:13:aa:c9:68:7c:bb:51:19:30:8e:db:e6:78:d4:ae:45:
8c:b0:c5:9c:0a:2e:25:63:1d:d4:e2:03:56:4c:0a:39:f3:66:
da:71:54:50:e5:76:d2:b5:98:93:f2:4f:62:8b:be:af:65:58:
88:58:8b:65:35:18:ae:c6:ab:65:a1:2e:d9:0f:89:9f:d5:8d:
80:d2:03:08:16:5f:61:9b:fa:64:a2:67:ab:41:3d:13:ff:5e:
c8:22:fd:52:13:2c:9d:57:30:6f:2f:fe:66:25:3a:c9:b5:ae:
fa:de:70:51:c4:49:15:63:0f:ee:a3:15:d6:4e:f9:d1:cf:73:
78:a4:e1:b6:76:c1:e5:fe:fd:07:98:90:8a:00:da:48:1c:7e:
0c:42:40:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:44 2023 by rpki-client on console-ams.rpki-client.org