Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pzM2IFPysjPIlB9tvzub0JdFNz0.roa
File: pzM2IFPysjPIlB9tvzub0JdFNz0.roa (raw, json)
Hash identifier: zLNtSBmNb9Vnh2llL1XphTb3YB+L6WrmEqj45cNaV0Q=
Subject key identifier: A7:33:36:20:53:F2:B2:33:C8:94:1F:6D:BF:3B:9B:D0:97:45:37:3D
Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial: 018930F10A0D8BEE45F67ECA0D600DB4A2D5
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pzM2IFPysjPIlB9tvzub0JdFNz0.roa
Signing time: Fri 07 Jul 2023 15:20:50 +0000
ROA not before: Fri 07 Jul 2023 15:20:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34927
IP address blocks: 194.76.231.0/24 maxlen: 24
185.44.82.0/24 maxlen: 24
185.44.83.0/24 maxlen: 24
2a12:f340::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:30:f1:0a:0d:8b:ee:45:f6:7e:ca:0d:60:0d:b4:a2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Validity
Not Before: Jul 7 15:20:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a733362053f2b233c8941f6dbf3b9bd09745373d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:59:aa:4b:a1:b3:95:2e:e5:5e:44:c7:3b:5f:
7b:9a:3a:02:4b:2d:2b:ca:80:c5:ae:d2:51:15:b0:
e4:0b:98:ac:37:dd:7a:ce:d4:c8:cc:dd:65:8c:aa:
b1:52:1f:8d:12:85:56:9c:bd:3c:ad:ed:bd:5b:e0:
ec:58:fe:9d:aa:fb:68:3b:fa:58:ca:d8:98:a3:5f:
0c:09:3a:93:e1:5b:d7:29:fc:ff:c1:c9:ce:0b:e7:
da:ad:b3:ca:ac:b7:86:10:2b:f5:f4:58:ad:88:40:
68:58:6b:da:33:0d:85:8a:2f:c4:52:2e:5e:ac:7c:
71:94:07:df:bb:72:c1:f5:34:e7:e4:0f:0f:2f:2f:
a8:9f:d4:37:d2:cd:0d:ff:8f:93:99:3b:79:32:a8:
b8:9c:cb:b1:dc:42:d7:21:58:56:25:45:74:c7:76:
d4:bb:8e:b3:d2:b7:00:4b:50:ec:ba:58:46:f4:21:
4b:94:f8:51:88:b5:cc:ac:03:ef:fc:37:98:38:ad:
9c:02:15:4d:0e:fb:db:e1:3c:7b:c8:ba:12:49:a6:
35:71:4b:b9:e8:57:fe:e0:c8:48:53:1d:ac:c9:f0:
7f:24:bb:33:77:a3:e9:08:7a:6a:19:7b:b9:35:09:
c3:c1:39:62:38:ad:ab:d6:6e:3a:47:b7:60:9c:fc:
38:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:33:36:20:53:F2:B2:33:C8:94:1F:6D:BF:3B:9B:D0:97:45:37:3D
X509v3 Authority Key Identifier:
keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pzM2IFPysjPIlB9tvzub0JdFNz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.82.0/23
194.76.231.0/24
IPv6:
2a12:f340::/48
Signature Algorithm: sha256WithRSAEncryption
7e:2e:e2:57:1d:8d:4f:7e:8f:ea:56:a1:db:7e:8e:66:29:37:
70:ae:a1:56:4a:dc:52:ed:d2:0d:81:7e:fb:1d:09:23:05:a0:
a9:57:79:3d:39:42:30:06:3b:ae:f4:5c:d0:66:48:3f:66:54:
9c:4c:43:4a:80:a7:9c:1e:04:92:ea:a3:ec:dd:fe:c3:f3:46:
ab:b0:02:65:8a:eb:a5:cf:02:1b:2f:00:b7:b2:0f:53:be:11:
27:1a:9d:22:eb:a2:2b:bc:6d:9a:c7:fe:1d:54:18:4d:5f:2f:
2e:63:3e:a2:07:47:77:6b:91:08:62:fb:a0:6d:cd:1b:fc:4a:
15:ed:26:f2:f3:78:50:c7:56:94:df:fe:12:6e:9c:62:03:13:
f3:09:8d:0a:fe:cd:20:94:ef:31:7f:f6:d6:e5:10:ab:18:5b:
43:18:27:f4:a0:22:d4:7a:a7:0c:b1:ee:5c:39:7a:0e:7d:86:
f0:aa:79:2d:86:df:39:87:18:99:39:06:92:e6:0c:49:f0:c3:
bf:8b:82:aa:a0:7e:40:5a:29:be:01:4a:04:f3:c8:c4:bb:a3:
9e:a2:48:a4:19:a4:1e:58:99:85:01:55:e0:4f:3c:88:b0:2a:
92:1f:be:ab:55:ee:a2:15:77:bc:87:be:44:39:86:42:b6:d5:
ff:f5:25:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:35 2024 by rpki-client on console-ams.rpki-client.org