Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/ZIUKji7xqtzD8CgvSQAIbPBTmw8.roa
File: ZIUKji7xqtzD8CgvSQAIbPBTmw8.roa (raw, json)
Hash identifier: Vf8P8B9yLY/D2gNSZcpXFZhSBeudOMLc+ZK2INM8dfI=
Subject key identifier: 64:85:0A:8E:2E:F1:AA:DC:C3:F0:28:2F:49:00:08:6C:F0:53:9B:0F
Certificate issuer: /CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Certificate serial: 01856ECB6152E26C87197DEBA107063701AB
Authority key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/ZIUKji7xqtzD8CgvSQAIbPBTmw8.roa
Signing time: Sun 01 Jan 2023 19:25:00 +0000
ROA not before: Sun 01 Jan 2023 19:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8897
IP address blocks: 185.156.17.0/24 maxlen: 24
185.156.16.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:61:52:e2:6c:87:19:7d:eb:a1:07:06:37:01:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Validity
Not Before: Jan 1 19:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64850a8e2ef1aadcc3f0282f4900086cf0539b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:18:99:7a:f3:14:91:70:93:0d:bb:6d:ca:
b8:35:96:a6:93:24:7f:9c:a2:6a:bc:d8:6e:35:35:
c0:e0:a8:e8:9e:b7:59:45:49:41:ba:1b:c0:f0:89:
6a:0f:62:53:d8:ee:ec:34:f8:b6:6c:17:54:1f:d8:
55:b5:18:67:ea:f6:0e:72:ec:85:20:c9:75:b0:f6:
a6:60:4e:63:75:09:91:e8:80:2c:47:84:6a:7a:e5:
a5:52:ce:7d:b5:53:07:27:dd:73:73:56:90:48:1c:
80:c0:f1:73:0d:c7:32:48:d5:98:3c:80:15:33:46:
12:f8:f1:4a:92:60:d8:4a:62:52:5b:20:e4:6f:9f:
f4:1b:38:ca:5e:5b:fd:66:2e:28:3c:88:96:97:b5:
b7:2a:5b:d7:f4:b8:53:14:5a:fe:33:07:31:2e:b5:
62:a7:6b:72:d5:1d:f6:b1:c8:0f:6c:90:fb:5d:8a:
16:e4:d9:21:12:68:ec:5a:65:3e:8a:c3:f0:cb:fb:
d6:a8:a2:c8:e2:f8:ad:2b:d9:96:51:cb:e2:6b:5e:
be:fd:21:c0:db:3f:18:b2:94:39:d5:ca:5c:20:a1:
88:b8:12:9d:8e:f7:8f:79:35:f3:90:1e:71:8a:0b:
76:0a:af:07:c3:ed:1f:81:e3:45:71:8f:27:52:c8:
9e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:85:0A:8E:2E:F1:AA:DC:C3:F0:28:2F:49:00:08:6C:F0:53:9B:0F
X509v3 Authority Key Identifier:
keyid:34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/ZIUKji7xqtzD8CgvSQAIbPBTmw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.16.0/22
Signature Algorithm: sha256WithRSAEncryption
05:d0:a2:d8:14:ad:c6:ac:a0:1a:e6:73:9b:35:65:9b:7a:bd:
bd:55:8c:99:a5:72:07:f1:e4:88:b0:bd:d9:c0:d2:bd:72:3b:
25:72:d9:43:14:3b:1e:3e:b1:99:f1:cd:71:fe:4e:4e:40:c5:
08:ad:d5:6d:a7:75:d6:d5:f4:22:8f:5b:c8:03:02:c3:ad:f7:
a3:4e:2a:b1:89:cf:c6:7d:25:f5:ab:7b:0f:6e:1d:e8:1e:e0:
2a:60:83:42:dc:b2:6a:62:30:62:de:11:cc:3e:c1:52:f5:d6:
55:5a:b1:5b:b3:6b:4e:90:db:23:62:fa:1f:99:03:9c:f8:53:
5c:4e:ae:0a:33:8b:14:7d:2a:2d:6c:58:26:87:7d:d2:b7:31:
66:85:b8:fa:d3:cf:bc:e3:3e:56:99:e7:e7:c0:54:5f:cc:cb:
17:68:e3:07:03:00:9a:15:55:5c:f5:3a:e2:8f:28:61:ec:6e:
1c:2f:60:8d:da:e2:4f:df:cd:05:06:ea:9a:4c:a1:1b:21:b0:
a4:09:18:c3:22:a4:27:ec:f3:63:8b:9b:e1:6c:3a:90:e1:ab:
21:e0:be:26:a3:ab:11:08:af:a3:e3:c3:98:5b:39:c4:5f:37:
d5:08:f6:bd:a2:7d:08:1b:36:b9:97:30:b1:38:c9:db:a6:4f:
76:93:5b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:09 2024 by rpki-client on console-fra.rpki-client.org