Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/kZzRsvEX0sqM-1TxpqACpo2adyI.roa
File: kZzRsvEX0sqM-1TxpqACpo2adyI.roa (raw, json)
Hash identifier: Hk9c1VmMp5Xwb3nBNpnUDfFNQi86VIs9p5GGT92gTUU=
Subject key identifier: 91:9C:D1:B2:F1:17:D2:CA:8C:FB:54:F1:A6:A0:02:A6:8D:9A:77:22
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018AD39AB9BB7B76B3EA3A42A4B3A2F1F988
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/kZzRsvEX0sqM-1TxpqACpo2adyI.roa
Signing time: Tue 26 Sep 2023 22:27:27 +0000
ROA not before: Tue 26 Sep 2023 22:27:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47894
IP address blocks: 94.103.36.0/24 maxlen: 24
94.103.38.0/24 maxlen: 24
94.103.37.0/24 maxlen: 24
94.103.39.0/24 maxlen: 24
94.103.41.0/24 maxlen: 24
94.103.43.0/24 maxlen: 24
94.103.42.0/24 maxlen: 24
185.35.20.0/24 maxlen: 24
185.35.22.0/24 maxlen: 24
185.35.23.0/24 maxlen: 24
2a00:7300:42::/48 maxlen: 48
2a00:7300:1::/48 maxlen: 48
2a00:7300::/32 maxlen: 32
2a00:7300:100::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d3:9a:b9:bb:7b:76:b3:ea:3a:42:a4:b3:a2:f1:f9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Sep 26 22:27:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=919cd1b2f117d2ca8cfb54f1a6a002a68d9a7722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c9:eb:76:1f:dd:3d:77:1c:24:cc:43:c3:c7:
47:16:4f:7b:37:b8:34:e5:06:b7:af:48:f9:ee:d1:
89:18:de:c3:70:02:70:da:c5:b9:7d:6e:d5:f9:4d:
ad:30:66:a1:32:6d:9c:2b:3f:f6:46:80:c6:36:48:
65:49:0e:2d:ec:1e:9d:26:6b:4d:ac:7b:39:dc:78:
a8:8f:ed:47:3e:11:fb:e2:0e:3f:a4:91:e4:dc:5d:
3f:60:92:00:8c:3c:5e:95:89:3d:3e:08:57:12:26:
e8:35:18:cb:88:5c:77:2f:a4:9d:2d:1b:6a:81:42:
a9:a3:f4:c2:fc:b7:3e:bd:48:46:0d:60:5e:bd:2f:
e1:96:98:75:8f:38:6d:a0:e2:1c:9d:37:48:5a:22:
c0:21:20:de:68:d5:27:82:68:59:76:8e:ca:cd:a8:
6f:e9:2e:d0:5a:1b:f4:86:40:f6:2a:46:65:8e:b0:
c6:ab:f2:4a:5a:d2:9e:2e:7b:b3:d6:34:56:27:ec:
4b:44:68:82:50:70:36:b6:c4:6e:36:81:8d:3d:da:
be:3b:71:72:6d:cd:82:a7:93:ba:57:17:31:92:8d:
f3:e2:6a:5d:01:a1:a9:47:82:be:87:87:71:81:91:
81:88:1b:82:c0:97:22:5f:7c:89:2e:5a:29:1e:41:
d2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9C:D1:B2:F1:17:D2:CA:8C:FB:54:F1:A6:A0:02:A6:8D:9A:77:22
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/kZzRsvEX0sqM-1TxpqACpo2adyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.36.0/22
94.103.41.0-94.103.43.255
185.35.20.0/24
185.35.22.0/23
IPv6:
2a00:7300::/32
Signature Algorithm: sha256WithRSAEncryption
b6:f6:90:60:47:eb:29:ce:40:55:57:12:5e:82:61:2c:bb:0f:
58:80:f2:7e:4c:46:c7:9e:3c:05:fd:35:0a:29:46:33:b2:6d:
d8:f0:99:5a:91:95:9b:b5:64:99:3b:16:49:35:6b:61:a4:58:
7c:cf:c9:7b:33:d9:b9:06:ca:eb:26:fb:09:34:e8:ec:25:3e:
0f:44:e9:82:3f:35:d0:8e:a5:f4:51:b6:1d:00:61:8a:b6:40:
2c:46:8a:c2:06:70:b2:e0:71:8d:1e:95:70:ca:ae:54:00:b3:
9b:02:b8:58:81:98:0e:a8:19:c9:fd:17:3e:15:91:7d:a2:75:
35:d2:22:18:78:7d:b8:e3:29:19:8c:ce:6f:25:71:bd:d9:92:
55:22:f1:ed:8f:cc:d9:34:db:9f:ca:73:95:ac:1b:92:a1:52:
9b:f9:fa:94:de:9c:c9:85:ec:fa:24:4a:7d:fb:9a:3a:04:04:
d5:fc:02:5e:db:34:5e:a1:52:50:ab:b3:8e:3e:96:4b:35:ce:
c3:88:10:13:af:98:eb:67:e1:12:a5:09:ef:53:15:80:21:1f:
46:47:ec:58:80:65:6e:63:16:10:6a:2b:22:45:03:60:51:64:
fc:e8:28:38:90:39:d8:aa:d8:fa:ec:55:8d:43:80:06:84:4f:
43:be:82:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:00 2024 by rpki-client on console-fra.rpki-client.org