Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/zdjy0YxS0064aojN1nQA90vCvd4.roa
File: zdjy0YxS0064aojN1nQA90vCvd4.roa (raw, json)
Hash identifier: GNgcFgk+H09Vf3zRv77BFZ/5Ok+t74kHTX2QXZmNG04=
Subject key identifier: CD:D8:F2:D1:8C:52:D3:4E:B8:6A:88:CD:D6:74:00:F7:4B:C2:BD:DE
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 018BBE7199ACEE86B852584C0A713DED4077
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/zdjy0YxS0064aojN1nQA90vCvd4.roa
Signing time: Sat 11 Nov 2023 12:53:17 +0000
ROA not before: Sat 11 Nov 2023 12:53:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60542
IP address blocks: 185.217.39.0/24 maxlen: 24
91.243.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:be:71:99:ac:ee:86:b8:52:58:4c:0a:71:3d:ed:40:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Nov 11 12:53:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdd8f2d18c52d34eb86a88cdd67400f74bc2bdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d4:b0:b6:aa:6b:d7:d4:78:43:71:e3:96:a0:
9f:7c:7e:10:01:23:9c:c6:cb:65:02:69:dc:75:85:
68:c3:2a:97:b0:4d:33:13:ff:79:ad:26:bb:b7:0f:
70:87:92:0b:b5:19:38:e8:8d:bb:6e:0e:62:ac:03:
64:80:96:13:10:18:c6:ea:3f:15:1d:ea:91:01:00:
14:b4:84:60:2d:a4:04:97:c6:1e:30:9f:82:01:26:
46:c0:c1:56:54:59:ef:21:39:03:94:5f:05:0c:ee:
01:90:0b:d2:b7:ae:fb:0e:40:22:f3:96:d2:85:08:
b8:6a:13:b1:5e:41:98:d9:cf:d7:42:63:f9:84:77:
87:6c:49:00:bd:14:f5:f6:de:79:a8:e0:01:8f:70:
72:68:d7:8f:7a:58:ac:3d:85:e2:cf:67:e1:73:22:
b6:a7:2e:d4:16:7f:c7:5a:5c:10:e5:d3:1e:98:fa:
77:fa:e6:ba:29:b1:98:0c:8a:d7:3d:3b:c9:e7:83:
40:05:ab:84:18:34:18:6c:07:0d:23:05:b4:39:b4:
94:7e:df:2e:2b:b4:2d:03:9e:2a:9e:75:e8:77:eb:
5c:d1:24:8d:14:51:83:45:2b:ea:75:5d:d7:f3:fa:
2e:6f:7b:85:6e:47:30:22:f5:5d:7b:f6:ae:a5:33:
81:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D8:F2:D1:8C:52:D3:4E:B8:6A:88:CD:D6:74:00:F7:4B:C2:BD:DE
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/zdjy0YxS0064aojN1nQA90vCvd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.119.0/24
185.217.39.0/24
Signature Algorithm: sha256WithRSAEncryption
37:6d:9f:f1:4f:41:b1:c4:7a:f6:a3:05:00:94:23:02:f0:28:
37:28:0a:0e:56:f6:e7:85:c8:b3:16:83:4c:80:c9:5b:49:42:
60:6e:d3:c2:6e:ca:0b:f9:f7:c0:16:86:d2:a9:01:79:1a:32:
08:7e:1b:98:86:03:c7:5a:f8:a4:08:aa:fd:66:ef:7c:4e:7b:
78:e8:d7:ff:2e:0a:e9:a7:e1:ce:22:db:0f:28:b5:10:f0:c8:
77:8f:8e:07:85:37:34:64:03:60:8c:7e:df:f7:5a:ec:fe:50:
9f:ed:60:ff:f0:67:87:77:7b:a0:47:96:38:83:11:ff:90:20:
1a:fb:60:8b:8c:08:02:1f:37:52:24:66:d5:cd:79:ec:95:eb:
a8:5c:c4:44:60:f5:51:63:53:13:9c:53:5e:69:c6:fe:1e:1d:
29:4a:7f:97:c3:d6:34:10:8f:4b:4f:b7:9b:c3:72:8d:b2:36:
c1:07:e0:cb:5c:89:dc:fa:fb:ed:2f:bf:8c:3e:05:14:c0:d2:
fd:91:d6:17:6b:68:32:ad:cc:b0:5c:bb:9f:47:bc:ec:9a:26:
9f:c6:24:1b:5b:0b:d6:67:e0:29:fa:bf:d6:f2:88:9e:77:22:
6c:68:b7:7b:b4:e7:c7:79:a8:59:27:5d:7c:7a:ee:76:42:eb:
38:e0:0e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:30:50 2024 by rpki-client on console-fra.rpki-client.org