Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/ZQJGYJq20E47DB7zn25WrgF8Pg0.roa
File: ZQJGYJq20E47DB7zn25WrgF8Pg0.roa (raw, json)
Hash identifier: /oyHUVNaqhgpoX+G5j1GLldWs/AE/NII7dfLnnecFB8=
Subject key identifier: 65:02:46:60:9A:B6:D0:4E:3B:0C:1E:F3:9F:6E:56:AE:01:7C:3E:0D
Certificate issuer: /CN=d44de659759b0274124a7b481d0976840b7ade06
Certificate serial: 01856CAF35E248491F12DE68D96C79EB9A21
Authority key identifier: D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/ZQJGYJq20E47DB7zn25WrgF8Pg0.roa
Signing time: Sun 01 Jan 2023 09:34:59 +0000
ROA not before: Sun 01 Jan 2023 09:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52023
IP address blocks: 91.212.148.0/24 maxlen: 24
37.143.165.0/24 maxlen: 24
37.143.166.0/24 maxlen: 24
37.143.162.0/24 maxlen: 24
37.143.164.0/24 maxlen: 24
37.143.163.0/24 maxlen: 24
37.143.167.0/24 maxlen: 24
37.143.170.0/24 maxlen: 24
2a03:8f84::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:35:e2:48:49:1f:12:de:68:d9:6c:79:eb:9a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44de659759b0274124a7b481d0976840b7ade06
Validity
Not Before: Jan 1 09:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=650246609ab6d04e3b0c1ef39f6e56ae017c3e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1f:11:1a:e9:0d:07:8c:6d:be:6f:fb:26:5f:
60:b9:3c:6e:94:b7:82:da:46:f7:ae:1a:ce:b9:bd:
77:a8:f4:fd:ae:d3:fb:2c:57:17:65:5f:13:57:d5:
eb:c2:29:4a:62:8c:17:15:e3:b3:cf:33:9f:bc:3b:
14:cc:1a:5e:81:cc:07:61:8f:aa:b8:5e:6e:39:95:
ab:df:39:31:f4:ca:bd:9a:7f:f7:11:d7:7b:14:25:
bb:57:b3:16:29:1a:62:8b:35:f5:f1:e7:f0:86:eb:
32:ab:9c:b6:3f:20:a3:d8:83:af:55:59:1c:c4:1f:
ee:c8:e2:81:43:ca:e3:13:86:aa:95:06:71:1e:6a:
ce:83:41:ff:d6:5f:21:0c:3c:24:e1:86:ce:7c:bb:
8f:33:30:37:65:40:e6:5d:33:6e:63:0b:d5:45:2a:
06:01:91:fd:b0:51:5a:c3:58:1e:0a:5b:ee:e3:ff:
77:95:1e:6d:b4:fe:37:cd:bc:d6:00:d0:62:36:58:
31:10:b6:d8:87:aa:c3:4f:1b:7b:1c:74:9a:53:c9:
7a:53:25:ab:98:10:d1:2d:e2:58:2c:48:b8:dd:64:
c9:d0:a1:6e:7c:55:d0:14:85:fa:f1:8c:2c:9a:43:
3c:26:a2:66:8b:a6:53:60:fb:59:9d:2e:14:e9:3b:
ed:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:02:46:60:9A:B6:D0:4E:3B:0C:1E:F3:9F:6E:56:AE:01:7C:3E:0D
X509v3 Authority Key Identifier:
keyid:D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/ZQJGYJq20E47DB7zn25WrgF8Pg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.162.0-37.143.167.255
37.143.170.0/24
91.212.148.0/24
IPv6:
2a03:8f84::/32
Signature Algorithm: sha256WithRSAEncryption
b9:4b:f2:95:52:dd:c7:23:f1:b1:6c:3a:7d:2b:4f:03:8a:bc:
73:1b:15:6c:8a:9b:06:a1:a8:e9:9d:e2:0c:66:3b:64:b8:a2:
75:bb:40:86:0d:fb:22:dd:bd:fe:f6:2a:43:c6:6a:09:58:22:
06:7b:02:29:d1:7b:84:a6:a0:4c:59:6f:f1:85:35:4f:ae:21:
46:ed:60:e7:9a:0b:4c:10:a7:0c:b8:a9:ab:34:42:02:d6:1c:
67:55:5f:92:f2:47:83:d8:ed:87:78:cc:ef:38:54:2d:06:20:
60:d8:96:fc:c7:d2:e3:9a:cf:fe:b4:33:05:91:12:e2:6b:d4:
43:80:90:e2:6c:c0:4b:1d:69:7c:f6:46:c8:6c:de:11:7e:f6:
53:d0:f1:35:4d:e2:1d:b7:d0:66:01:b6:b1:51:e5:55:9b:fd:
93:1f:98:40:25:a2:ab:64:32:72:b8:8f:1c:37:c5:30:fd:d9:
7d:9e:11:8a:f2:65:8e:5b:66:3b:85:8a:75:aa:3f:2f:39:56:
51:e5:29:21:83:38:53:e3:96:ce:55:28:27:56:a7:f1:d7:7e:
33:44:d6:f3:36:31:0b:9a:49:b4:ec:10:1b:ea:96:13:8e:aa:
f2:01:17:48:8c:ad:a1:2b:48:06:6f:41:e1:13:5a:00:a8:df:
17:0c:fb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:36 2023 by rpki-client on console-fra.rpki-client.org