Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/zBQNhNdv0j4XOK1VJhHvyCKMyng.roa
File: zBQNhNdv0j4XOK1VJhHvyCKMyng.roa (raw, json)
Hash identifier: b8urFO4lWFL4lPyrBFJAvVi5NCXyL1zpCfMlct40qKY=
Subject key identifier: CC:14:0D:84:D7:6F:D2:3E:17:38:AD:55:26:11:EF:C8:22:8C:CA:78
Certificate issuer: /CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
Certificate serial: 018571F11A8ECE574C25EFF37942A0CE9919
Authority key identifier: 0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/zBQNhNdv0j4XOK1VJhHvyCKMyng.roa
Signing time: Mon 02 Jan 2023 10:05:04 +0000
ROA not before: Mon 02 Jan 2023 10:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45034
IP address blocks: 185.106.232.0/24 maxlen: 24
185.106.234.0/24 maxlen: 24
2a00:a700:a::/48 maxlen: 48
2a00:a700::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f1:1a:8e:ce:57:4c:25:ef:f3:79:42:a0:ce:99:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
Validity
Not Before: Jan 2 10:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc140d84d76fd23e1738ad552611efc8228cca78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:ea:55:61:9d:81:43:8a:bb:b8:5d:5d:41:
6f:2b:db:9a:a4:28:ea:b4:24:96:5f:c5:63:ba:1d:
30:0d:eb:64:88:1e:09:86:00:c8:2a:bf:df:3c:bd:
8b:20:b9:27:31:89:3b:9b:df:e9:32:bd:e4:cd:c8:
07:a1:86:12:10:9d:55:d3:4c:18:d3:ad:82:e7:96:
cd:21:d6:95:c3:ce:dc:e8:cb:b1:78:c4:3d:30:9d:
71:9a:22:b2:95:65:88:3e:b0:e1:e5:19:d9:36:8a:
e8:9e:50:a3:27:05:15:8f:f7:b4:e0:bb:f4:e3:70:
e9:7c:d3:fd:35:32:b1:ba:2a:02:5b:62:6a:ce:0e:
72:2a:f6:c6:c0:41:c4:a9:65:ad:64:40:91:be:07:
bb:75:1d:68:ea:62:1a:00:d0:fd:2b:da:18:22:b3:
ea:93:44:4f:02:70:b3:6d:3d:76:ae:6c:9c:ae:60:
78:73:25:e7:3e:fb:22:ea:81:a4:47:a4:bc:24:7e:
ca:1e:cf:08:c4:f4:74:29:d3:f8:ea:7d:34:d8:b5:
39:26:27:11:67:15:5e:2f:df:b7:df:d2:bb:b5:49:
e3:aa:f6:d4:71:51:c1:12:ba:a8:eb:8f:55:8c:ee:
61:1c:6b:87:69:bf:6f:2a:27:f0:55:ca:c0:64:1c:
b6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:14:0D:84:D7:6F:D2:3E:17:38:AD:55:26:11:EF:C8:22:8C:CA:78
X509v3 Authority Key Identifier:
keyid:0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/zBQNhNdv0j4XOK1VJhHvyCKMyng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.232.0/24
185.106.234.0/24
IPv6:
2a00:a700::/48
2a00:a700:a::/48
Signature Algorithm: sha256WithRSAEncryption
9d:49:1b:81:a2:b3:28:2f:4f:f1:4b:4a:9e:83:ad:6b:49:0d:
28:76:c2:00:32:35:43:d4:cc:36:94:83:8f:24:8e:0c:37:3c:
ff:23:20:ca:ea:a2:ab:d4:ba:25:0b:71:ce:0c:f0:7d:8e:24:
da:f6:93:3c:47:76:c0:96:cb:7a:d4:ec:7a:6c:c7:fe:f6:88:
aa:85:ee:78:c8:82:71:24:ee:8d:8e:78:74:a4:63:51:d7:b4:
b3:54:23:31:a3:0a:ed:60:b7:58:30:da:68:94:cc:35:d3:4e:
c5:c0:3f:84:97:8f:bc:30:b3:b3:f2:d5:ec:f2:d1:95:8a:4b:
10:85:9b:f6:dd:81:ed:c0:3b:41:d7:c6:df:95:17:a5:a4:7c:
b4:22:33:77:58:40:de:20:26:35:d2:82:80:72:32:75:62:b6:
41:d9:93:93:b4:a0:4a:fd:6d:e2:0b:27:c4:86:ab:4a:c4:9f:
ca:dd:a1:4b:eb:ab:52:41:9b:19:e9:03:7e:3f:4d:31:10:4a:
3d:6a:38:9f:6e:8e:6f:8a:52:31:88:62:41:53:1e:a9:8c:e8:
87:68:42:d9:f0:52:0b:dd:1f:51:6e:43:75:01:6c:ab:ef:3d:
39:3f:81:6c:ab:31:c1:02:d7:1d:eb:eb:c8:0a:83:b1:cc:cf:
f9:b9:09:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:39 2024 by rpki-client on console-fra.rpki-client.org