Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zF9UFI852bfHX4YnIEEI826ilLw.roa
File: zF9UFI852bfHX4YnIEEI826ilLw.roa (raw, json)
Hash identifier: aJwJJkkENG/OX9IHTA3uhejdmCCeQXDyrOMVHebY86w=
Subject key identifier: CC:5F:54:14:8F:39:D9:B7:C7:5F:86:27:20:41:08:F3:6E:A2:94:BC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C59036FFAF4FC818FB24DE42C466AB794
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zF9UFI852bfHX4YnIEEI826ilLw.roa
Signing time: Mon 11 Dec 2023 13:14:06 +0000
ROA not before: Mon 11 Dec 2023 13:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 185.216.69.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
93.123.84.0/24 maxlen: 24
147.78.103.0/24 maxlen: 24
185.226.173.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:59:03:6f:fa:f4:fc:81:8f:b2:4d:e4:2c:46:6a:b7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 11 13:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc5f54148f39d9b7c75f8627204108f36ea294bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:13:7b:97:52:a2:4a:d0:74:03:e0:22:6e:
b2:10:eb:a7:04:bc:3b:fa:db:fb:64:3f:93:82:85:
5b:93:36:c0:46:fa:cd:d5:6f:00:dc:45:08:a3:74:
47:26:de:fa:3c:d2:0f:24:a0:d9:f5:ae:57:e3:6c:
5b:43:f7:49:b8:c4:c4:ba:89:ed:55:9a:73:c1:28:
7f:be:30:5f:a8:65:c8:e3:1d:2b:dc:58:44:bb:fc:
07:39:f2:17:cb:f4:ea:2e:39:2a:c8:13:cb:c4:c2:
7e:da:2b:ec:e0:fe:bb:fb:c4:e5:01:0e:12:89:b4:
58:87:28:73:6b:e6:26:2c:43:55:64:cb:18:a6:0c:
d2:18:ac:45:de:b2:bd:e0:9c:50:df:3b:02:e3:ec:
a8:aa:72:c7:9c:11:8d:d6:22:e3:cd:16:d0:42:05:
c3:fb:17:69:31:96:ec:0c:da:08:46:70:01:62:a0:
32:ce:85:6a:3d:f3:16:2e:5d:09:25:c0:c2:99:1c:
43:a5:e5:41:26:6c:38:cc:e4:ae:cd:b0:7c:52:c2:
18:cb:17:9c:2f:ed:90:c7:4a:ab:d0:ed:d1:42:f6:
ae:91:3d:d4:82:a8:d5:27:cd:0b:c5:89:0c:8f:f7:
48:38:20:84:a6:ff:1f:1b:23:de:c5:60:81:d8:fb:
0a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5F:54:14:8F:39:D9:B7:C7:5F:86:27:20:41:08:F3:6E:A2:94:BC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zF9UFI852bfHX4YnIEEI826ilLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.84.0/24
93.123.84.0/24
109.206.237.0/24
147.78.103.0/24
185.216.69.0/24
185.226.173.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:2c:01:8c:27:26:36:ba:c6:5b:a5:b7:72:6f:2a:24:d3:5c:
3c:7e:6d:03:9d:a0:0f:a8:50:2c:8b:21:7f:ff:e5:01:04:5f:
e9:e0:34:df:fc:8a:20:65:eb:d5:8d:0a:77:04:49:5b:ed:42:
98:56:cf:ba:bc:56:75:8d:45:2f:23:12:66:15:79:14:be:44:
bf:9c:96:1c:ac:06:b3:75:25:c1:b2:68:ff:a8:4f:e8:c3:ca:
67:95:90:5d:14:64:36:b7:20:64:55:32:09:51:67:57:57:9a:
25:a9:fd:0f:a0:42:08:04:39:9d:ea:78:4a:54:f8:db:84:6e:
9d:1f:e7:0b:99:7d:aa:0c:5e:3f:e7:05:22:74:60:7f:bd:e9:
d3:34:eb:e7:46:cf:30:16:ef:cc:cd:a9:8b:e8:10:92:3a:30:
f6:86:36:15:fd:06:04:a3:84:bc:cd:7e:10:ce:59:dc:aa:a8:
60:8d:a0:f8:97:1b:f7:6c:61:36:6c:92:fa:4f:6c:6d:7f:c2:
82:09:ca:e9:89:f3:28:5e:b7:20:95:56:ed:90:82:b7:07:b1:
d7:2e:af:22:e7:f0:ae:42:08:cc:4e:59:44:32:2e:07:d9:ba:
8f:75:76:91:6e:d5:54:8d:e6:09:80:f1:e2:db:33:21:66:c3:
a3:40:2b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 18 08:40:25 2023 by rpki-client on console-ams.rpki-client.org