Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zA3nyiozYE6gYcKCsUsNoJ_OVyA.roa
File: zA3nyiozYE6gYcKCsUsNoJ_OVyA.roa (raw, json)
Hash identifier: Z9743a2mKKNGPk+IHuFgtJKejJ2VR08sf7jlA3oPMPw=
Subject key identifier: CC:0D:E7:CA:2A:33:60:4E:A0:61:C2:82:B1:4B:0D:A0:9F:CE:57:20
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0187D7D8D2A6E9870E75839C69459F78FB68
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zA3nyiozYE6gYcKCsUsNoJ_OVyA.roa
Signing time: Mon 01 May 2023 15:05:23 +0000
ROA not before: Mon 01 May 2023 15:05:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212653
IP address blocks: 193.34.79.0/24 maxlen: 24
185.185.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d7:d8:d2:a6:e9:87:0e:75:83:9c:69:45:9f:78:fb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: May 1 15:05:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc0de7ca2a33604ea061c282b14b0da09fce5720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5c:1f:98:c1:d5:5d:10:52:c8:5e:f3:bf:11:
c2:2a:3e:92:ab:c4:da:b1:c0:2c:ad:cb:6b:98:d8:
d3:d8:16:e2:28:6a:ad:a9:83:11:f2:43:b1:7d:22:
bd:08:18:c0:a4:1e:86:08:7c:bf:30:4c:40:81:ef:
84:54:73:b6:e9:ab:82:37:5e:2f:77:92:ff:d6:62:
78:5c:59:46:4d:b2:a1:23:d3:ff:aa:19:43:da:fb:
f1:94:47:0f:a3:a4:a9:eb:77:b2:c1:23:63:37:95:
ad:41:ae:cf:2f:96:c1:c7:99:43:81:c4:62:c7:f0:
cb:a7:75:2f:57:ef:37:cc:cf:62:0c:b5:08:04:9d:
6d:6a:1f:c7:25:b7:1c:0a:f6:59:ba:94:bf:c6:07:
73:f9:07:03:69:11:8e:f8:4b:5c:69:c8:5a:9f:5c:
45:27:33:80:8c:35:e9:11:5b:ac:20:85:0a:5f:37:
30:4f:63:1b:e0:47:33:c0:6b:fc:6b:e6:3a:78:dd:
e7:1a:77:e2:9c:d9:ee:82:f0:10:3a:0c:96:ab:12:
a3:cf:fb:f3:af:97:ba:ac:a7:93:65:b2:af:23:fc:
a3:8e:53:e7:e4:af:64:40:00:67:00:2e:0b:2e:b7:
57:67:0a:a3:88:31:33:cf:a9:e3:ed:fa:fd:15:6e:
d7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0D:E7:CA:2A:33:60:4E:A0:61:C2:82:B1:4B:0D:A0:9F:CE:57:20
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zA3nyiozYE6gYcKCsUsNoJ_OVyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.43.0/24
193.34.79.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:0e:5c:60:24:1d:35:ec:5b:50:d9:47:39:5d:78:60:82:c0:
eb:1b:c5:9d:a7:0e:ea:21:93:cc:1e:11:e5:af:91:a3:c5:87:
94:73:80:f2:cd:70:2d:96:81:d4:d9:e8:94:00:bb:ff:05:09:
0f:ea:d7:d3:6f:8f:9c:d7:af:73:6c:bf:c5:05:a0:3d:1b:3a:
75:65:17:40:ad:e0:3e:26:f8:65:63:20:0a:86:d0:dc:fa:01:
f9:7d:7c:22:7f:81:47:e4:99:61:30:99:1e:a4:13:fa:6c:b8:
2f:93:d8:dd:ec:d9:a3:e3:7b:2c:62:2a:94:03:30:57:ed:37:
41:63:8a:35:34:19:c3:f2:27:70:aa:0b:03:c9:c0:e5:7d:f6:
ca:e6:ee:ea:3c:0d:3e:32:43:29:11:1f:7a:e9:21:93:65:5a:
07:1f:79:ca:3a:5a:d1:eb:7a:06:b1:91:18:86:c0:ce:78:f7:
0c:12:bb:5f:70:55:7d:67:01:60:69:6b:99:7f:56:75:2e:de:
65:64:f9:36:81:48:9e:f8:4a:9d:f1:99:e4:01:63:0b:78:e2:
b2:ad:73:eb:9f:79:9b:6f:f7:d3:d4:c6:09:52:5c:86:0c:9f:
f1:cc:d9:c6:4c:6f:26:c2:02:3f:cf:73:cf:ee:c1:1e:4f:ef:
12:49:94:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 14:16:59 2023 by rpki-client on console-ams.rpki-client.org