Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/ZGXbn0NYJ5S3tLY88PNuySb5vVo.roa
File: ZGXbn0NYJ5S3tLY88PNuySb5vVo.roa (raw, json)
Hash identifier: R5L3UwgulRGDTTevFS6yi67RdEgTHScpEo9+F/ZNpgA=
Subject key identifier: 64:65:DB:9F:43:58:27:94:B7:B4:B6:3C:F0:F3:6E:C9:26:F9:BD:5A
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 0186C9BE8ACA8CBA4F0F34F0F0383A3B4A76
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/ZGXbn0NYJ5S3tLY88PNuySb5vVo.roa
Signing time: Fri 10 Mar 2023 04:19:13 +0000
ROA not before: Fri 10 Mar 2023 04:19:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213305
IP address blocks: 185.115.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jul 2023 07:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c9:be:8a:ca:8c:ba:4f:0f:34:f0:f0:38:3a:3b:4a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Mar 10 04:19:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6465db9f43582794b7b4b63cf0f36ec926f9bd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9c:d3:22:d9:2e:0b:f1:7d:e4:cd:e2:25:f9:
2f:60:dd:24:b6:d9:a6:f4:45:a6:01:fd:39:12:7d:
85:eb:db:73:0d:e7:c5:a0:15:ff:91:df:92:a4:7b:
65:fc:75:a0:f3:1e:01:7f:7b:89:c9:f8:fa:f6:33:
b9:56:56:69:78:26:97:79:6e:36:f4:b0:62:7f:df:
cd:8c:a9:c6:d2:e3:97:63:ae:a6:13:ed:b6:9f:b1:
dd:2d:e0:13:66:11:dd:81:d9:8c:d7:b4:65:1a:1a:
6e:14:32:c7:e3:f4:3c:d7:17:17:45:b0:e9:dc:86:
f0:8e:34:39:7a:d2:d8:03:dc:43:50:0e:2b:b7:bc:
ba:06:1a:f9:f6:b9:11:34:b9:1b:6e:ac:c9:8d:50:
6e:b4:64:9d:62:a9:fa:f8:ad:50:61:ba:5c:6c:55:
4e:69:de:87:60:9e:03:fc:60:23:56:78:2f:2b:3e:
8e:02:ee:57:00:3c:b5:ad:05:b5:14:48:28:65:42:
9a:57:18:c4:90:1b:00:c4:dd:e2:5e:27:56:ea:e6:
9b:dc:aa:42:7b:a8:7e:d4:7c:92:80:f7:c5:8e:37:
23:22:2c:06:f3:69:2f:78:3a:0d:1c:ee:f3:ae:df:
77:8b:08:d8:51:77:40:4b:d8:5e:b5:c9:80:6f:4f:
8d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:65:DB:9F:43:58:27:94:B7:B4:B6:3C:F0:F3:6E:C9:26:F9:BD:5A
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/ZGXbn0NYJ5S3tLY88PNuySb5vVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.207.0/24
Signature Algorithm: sha256WithRSAEncryption
88:36:ac:44:4c:82:c2:62:2f:ec:88:ed:80:29:a8:2c:dd:0d:
7c:d1:a8:0d:5e:df:22:75:82:1f:00:3f:a0:f4:d6:37:67:66:
b0:09:55:99:a9:07:80:e3:40:e1:e5:96:b2:7f:29:dc:9b:80:
ea:3f:9a:b8:e4:e1:94:0a:c0:f6:9d:c8:5a:80:5b:07:75:20:
70:c1:c3:86:c8:f1:a7:9c:56:43:58:d9:9d:21:89:73:0f:6a:
a9:05:38:e4:0a:c5:cb:18:53:6c:47:87:0d:e6:fc:52:69:ee:
d5:4c:c9:ac:a5:48:6b:59:46:6a:0c:81:35:37:aa:a0:9c:37:
77:fe:cb:2b:2f:93:2a:43:6e:ac:c7:e2:60:cc:04:a7:cb:89:
2b:5d:f9:2f:cd:57:18:a7:e9:1f:4b:43:22:08:cb:26:01:cc:
cd:20:a7:c4:0a:14:a0:b7:0e:0f:0f:ca:d5:c1:b7:b5:6c:54:
d0:9a:c3:3e:f5:e7:af:d9:6f:ab:e6:f5:cd:4a:28:6d:aa:dd:
55:dd:4f:1b:77:a3:db:4f:ee:94:5d:74:95:88:74:ac:e5:93:
bb:df:e7:28:c7:fa:01:f6:bb:3a:21:78:ad:e4:a8:2b:5d:f6:
2c:72:28:7d:4d:9a:d0:01:af:2b:49:07:a8:27:ea:60:35:51:
37:57:c7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:43 2024 by rpki-client on console-ams.rpki-client.org