Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/8ZlbSmsN_UII_2UHVd9nAX-FoW0.roa
File: 8ZlbSmsN_UII_2UHVd9nAX-FoW0.roa (raw, json)
Hash identifier: hZtaHekxzWa9LZT0G5hdrnA03OlL0PtdX/77cYx3ah0=
Subject key identifier: F1:99:5B:4A:6B:0D:FD:42:08:FF:65:07:55:DF:67:01:7F:85:A1:6D
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 018893CEED43771AB39E2F0F0B81D66CFBD7
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/8ZlbSmsN_UII_2UHVd9nAX-FoW0.roa
Signing time: Wed 07 Jun 2023 03:03:11 +0000
ROA not before: Wed 07 Jun 2023 03:03:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.33.94.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Oct 2023 01:35:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:93:ce:ed:43:77:1a:b3:9e:2f:0f:0b:81:d6:6c:fb:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Jun 7 03:03:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1995b4a6b0dfd4208ff650755df67017f85a16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:97:29:bc:bb:55:8f:af:5f:fc:dd:69:e1:
01:da:8a:0a:02:90:e5:a0:ea:7b:3f:5e:fd:3d:83:
7d:ba:d8:a9:f7:70:89:c3:41:ee:d5:84:66:e6:f8:
d9:82:d0:df:90:62:c5:3d:ad:fd:7e:9e:19:cb:bd:
4e:09:07:93:ce:2f:68:60:57:af:a2:51:ed:a2:9d:
96:0d:1d:de:75:4c:c2:94:f4:64:25:79:8a:87:9b:
6b:48:71:9b:71:38:b2:77:23:a2:14:18:f7:62:33:
c0:85:aa:50:93:78:b6:af:6c:3c:3e:bf:21:f9:5d:
0d:c2:69:01:99:5a:38:34:f7:47:a8:a0:04:2b:5c:
eb:0d:81:2f:39:f2:90:6a:f4:2f:90:3c:f5:98:88:
72:69:17:f4:ed:f7:4d:a5:5c:f2:52:4f:5f:f6:89:
f4:f7:57:cd:32:ff:12:50:02:d8:0d:90:04:92:3d:
97:ab:ba:6b:6c:1c:72:94:f1:2d:2b:98:5e:90:94:
9f:e9:ac:c3:05:7c:dd:07:0b:3f:b2:2c:0b:f3:28:
02:a7:ff:ab:c5:e4:56:3b:f9:97:f0:d2:24:ca:1a:
17:55:ff:13:3f:56:20:1d:46:d4:79:33:ef:21:4e:
32:a4:e7:5f:36:5b:e9:e7:ab:f1:85:0d:f8:f0:9f:
50:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:99:5B:4A:6B:0D:FD:42:08:FF:65:07:55:DF:67:01:7F:85:A1:6D
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/8ZlbSmsN_UII_2UHVd9nAX-FoW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.94.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:81:fb:fc:ba:3f:88:c5:5b:32:4d:fb:c4:ab:15:15:e6:1a:
87:f3:b7:db:56:26:1a:68:3c:53:40:77:b6:7d:15:8b:9b:57:
15:da:45:d5:51:43:66:e3:96:45:a2:a7:c1:e1:0f:11:1d:f4:
b2:fb:dc:19:b7:b8:a9:f8:93:38:5d:18:c0:3a:81:c3:0c:95:
64:2d:a5:96:0c:08:09:9f:6c:e7:72:68:2c:ca:d8:d7:39:87:
71:86:84:49:75:1a:d5:53:b6:9b:93:b7:b2:c2:59:6a:ec:d2:
c6:15:40:05:18:ac:44:da:51:9e:e2:3c:71:ae:79:e9:32:9c:
6c:1a:9d:37:3d:0c:ec:76:d0:ab:b5:44:38:4a:ec:a6:91:f3:
ee:ad:c7:32:15:96:8d:25:d6:68:15:81:b6:23:50:74:bf:a0:
50:1e:56:7f:0e:11:f1:94:0d:3c:8f:0c:ef:95:8e:cb:97:41:
d1:06:4e:8d:1d:11:a0:29:70:e0:68:ca:1a:0f:e2:42:19:5f:
e5:1c:d0:76:9c:e6:6f:c7:11:49:91:a3:4b:7f:ac:c2:52:37:
a8:2b:ca:b8:23:31:d2:d1:33:58:84:2e:3c:4c:7d:37:c8:ef:
e2:f6:2a:07:a7:3a:e9:61:d3:d6:ee:d5:0e:80:5f:13:50:30:
1c:61:9d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:15 2024 by rpki-client on console-ams.rpki-client.org