Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/zYuNPBKlQBnnUsXcGfH__Kz85sc.roa
File: zYuNPBKlQBnnUsXcGfH__Kz85sc.roa (raw, json)
Hash identifier: 7eTwA5On1CSSriM6MElrr2NuACQANzW/Zqxn1HqyHYM=
Subject key identifier: CD:8B:8D:3C:12:A5:40:19:E7:52:C5:DC:19:F1:FF:FC:AC:FC:E6:C7
Certificate issuer: /CN=c15c153441aab020eb6f60dff7152eeaacaea4e7
Certificate serial: 01856B8A1F73E50141364F3590F6F46B870F
Authority key identifier: C1:5C:15:34:41:AA:B0:20:EB:6F:60:DF:F7:15:2E:EA:AC:AE:A4:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wVwVNEGqsCDrb2Df9xUu6qyupOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/zYuNPBKlQBnnUsXcGfH__Kz85sc.roa
Signing time: Sun 01 Jan 2023 04:14:52 +0000
ROA not before: Sun 01 Jan 2023 04:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39823
IP address blocks: 185.12.236.0/22 maxlen: 22
188.92.160.0/21 maxlen: 21
92.62.96.0/20 maxlen: 20
2a02:e80::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:1f:73:e5:01:41:36:4f:35:90:f6:f4:6b:87:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15c153441aab020eb6f60dff7152eeaacaea4e7
Validity
Not Before: Jan 1 04:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd8b8d3c12a54019e752c5dc19f1fffcacfce6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:0a:f7:da:45:81:b3:fb:d0:29:fc:6a:0c:
f6:84:1f:1c:fa:15:38:c3:ee:8f:bc:8e:1f:b1:c1:
94:5f:f6:a8:ac:91:ce:39:0c:87:40:cf:17:db:93:
d0:00:66:30:34:1a:36:c4:0c:2a:5d:56:ca:82:ab:
9c:8c:14:82:69:7a:a2:f2:4d:5c:26:2c:06:f3:09:
61:a0:2e:8f:81:ab:0a:06:d9:3c:76:74:be:aa:c4:
e4:d7:74:fd:31:d5:f5:bb:af:5f:95:ad:66:f9:fe:
69:e6:fe:fd:12:fb:fa:76:cf:00:6f:e1:57:d1:83:
e0:ed:03:da:e3:a8:5e:2d:db:df:fc:89:25:94:27:
76:30:b0:1d:4d:b6:e8:7a:2c:bc:1e:2f:0a:63:f4:
8f:60:1c:a1:1c:cf:55:38:6c:3b:3e:2f:44:dd:18:
37:61:e6:03:7b:9c:c7:50:97:0f:8b:de:43:49:e1:
00:05:6c:1b:37:09:88:cd:98:3b:2d:bb:6e:4c:71:
f9:25:a0:40:a1:19:8a:32:21:d1:76:2e:56:b0:d1:
d2:f5:fd:50:a4:8b:89:98:51:6f:ce:66:a3:74:6e:
66:6b:d2:b0:99:dd:69:91:26:ed:f8:44:88:3f:95:
c6:91:dc:ca:b2:42:cf:e4:99:dc:bb:b3:9a:2e:63:
f7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8B:8D:3C:12:A5:40:19:E7:52:C5:DC:19:F1:FF:FC:AC:FC:E6:C7
X509v3 Authority Key Identifier:
keyid:C1:5C:15:34:41:AA:B0:20:EB:6F:60:DF:F7:15:2E:EA:AC:AE:A4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVwVNEGqsCDrb2Df9xUu6qyupOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/zYuNPBKlQBnnUsXcGfH__Kz85sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.96.0/20
185.12.236.0/22
188.92.160.0/21
IPv6:
2a02:e80::/32
Signature Algorithm: sha256WithRSAEncryption
20:34:b4:4a:ad:b6:78:5a:f7:ac:a3:82:fc:86:58:70:bd:3b:
b5:f2:fd:d9:8d:c5:d6:85:cc:55:b0:45:26:cb:76:b1:92:65:
53:30:dc:b4:a0:89:2f:15:9e:e7:87:26:36:46:34:8d:51:76:
56:4b:34:4a:0c:ef:73:50:1a:80:b0:a1:19:9e:b3:68:a2:bf:
ee:cf:6f:dc:e5:9a:2e:7e:ba:84:78:34:f7:2f:ed:15:2a:27:
67:5d:db:2b:92:a2:03:9b:e0:e7:67:47:89:aa:a1:14:05:a9:
b8:48:ef:7e:c2:10:94:db:1d:2f:5b:60:e2:97:31:07:8c:5f:
3f:f2:fd:9c:f2:87:fa:ca:36:ee:fa:66:1d:cf:6d:da:28:09:
09:40:b6:36:a2:46:2d:fb:e1:c8:2d:63:14:19:f1:08:c9:85:
6f:ac:6e:6f:4e:ec:77:59:2e:ec:aa:78:77:ea:74:f7:c1:9d:
64:d8:27:58:17:eb:ee:6b:fd:6f:10:a1:6b:8d:c5:a4:82:03:
8a:d0:61:4c:ce:94:34:f2:00:cb:8d:bf:c2:56:31:e5:07:26:
b8:b7:4c:b9:2b:c2:b3:4b:04:c0:9b:03:87:8c:d5:34:62:0b:
e4:23:8a:e3:eb:5c:29:77:9f:fd:83:b0:2b:28:e3:db:90:ae:
03:a4:5c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:22 2024 by rpki-client on console-ams.rpki-client.org