Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/ZYoPzUtdOde6mMb05nTYhMKCVG8.roa
File: ZYoPzUtdOde6mMb05nTYhMKCVG8.roa (raw, json)
Hash identifier: SDh4I7suwvYzpSB++PxumHmO+H2U77p7Gr5CfuqJsi0=
Subject key identifier: 65:8A:0F:CD:4B:5D:39:D7:BA:98:C6:F4:E6:74:D8:84:C2:82:54:6F
Certificate issuer: /CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf
Certificate serial: 01856B40D586D9E7525D8D668906C8753CD2
Authority key identifier: EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/ZYoPzUtdOde6mMb05nTYhMKCVG8.roa
Signing time: Sun 01 Jan 2023 02:54:49 +0000
ROA not before: Sun 01 Jan 2023 02:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41753
IP address blocks: 185.102.16.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:40:d5:86:d9:e7:52:5d:8d:66:89:06:c8:75:3c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf
Validity
Not Before: Jan 1 02:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=658a0fcd4b5d39d7ba98c6f4e674d884c282546f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6b:a9:59:4c:06:be:2f:ba:c7:08:fe:3f:ee:
6c:64:0b:5d:bb:fa:00:ba:05:f7:c8:9f:c1:1f:6a:
99:81:25:23:04:6b:68:f5:dc:ab:02:01:7e:dc:1f:
25:e7:50:5f:23:f8:b8:1a:5a:4b:23:27:17:ff:f7:
53:e8:f0:be:06:cb:f9:6a:71:39:19:07:e4:07:18:
cc:ec:2d:73:82:f4:bd:9a:18:74:18:67:da:1c:46:
20:85:c8:77:42:57:d4:a7:29:8e:d1:15:79:7e:d8:
99:2c:7a:5c:21:8e:93:6c:c5:40:bb:b0:f3:82:d0:
1b:9f:6a:b7:d2:c7:e7:f5:ff:a5:ef:5e:7d:80:31:
0f:ed:4b:a7:9e:48:6c:2d:2d:31:89:63:51:1c:c8:
2e:20:d2:bb:a7:59:a3:c6:9c:09:2f:be:32:c8:8d:
10:24:59:44:08:7a:b5:22:8b:ea:07:b0:60:8f:8b:
4c:13:c4:2d:b5:20:c5:5d:f1:0f:16:da:36:5e:72:
01:e3:92:fc:1a:0c:ee:a2:9f:56:ef:b4:3a:85:2a:
d4:bd:24:8d:30:08:fd:fd:c0:75:19:16:bb:ae:69:
a9:bc:fc:c4:13:dc:15:d7:14:96:23:cc:dd:21:15:
96:90:4c:2f:da:a9:e7:c8:9e:8f:7f:95:9c:35:55:
8f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8A:0F:CD:4B:5D:39:D7:BA:98:C6:F4:E6:74:D8:84:C2:82:54:6F
X509v3 Authority Key Identifier:
keyid:EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/ZYoPzUtdOde6mMb05nTYhMKCVG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.16.0/22
Signature Algorithm: sha256WithRSAEncryption
30:af:b7:a5:3b:7d:d9:d8:af:c5:f4:e7:a1:4b:d8:67:7d:46:
ae:ba:4c:4e:5e:ac:e2:ef:ca:c7:c2:bb:64:1a:2a:82:c6:f9:
c6:5c:55:6b:c2:80:30:16:3e:e6:82:bc:43:6c:bd:7e:fd:67:
19:93:40:12:35:a7:d8:7e:15:70:da:5b:2d:25:fb:0c:d4:85:
d5:12:00:10:61:e2:bc:61:cd:fc:df:a7:29:ed:60:b0:c3:e8:
99:b9:dd:48:74:f8:1d:44:07:87:cb:20:28:4c:31:b1:e5:42:
cc:02:d4:ca:f4:52:d3:1a:bd:a0:04:89:fd:74:5e:b0:ea:0d:
a1:fb:ae:bb:f3:54:c6:92:32:0d:57:56:41:fe:21:f1:55:e1:
bf:e1:a9:47:3c:52:85:b7:d4:85:79:97:47:bc:65:40:46:23:
b2:3b:b2:07:73:9e:eb:fa:d8:a2:65:0e:fa:e2:62:1a:1a:85:
32:fe:ca:c3:9f:24:40:7f:ba:ca:2f:34:12:be:b4:b2:f2:05:
0e:01:2b:30:d5:92:97:57:a5:8f:57:a5:d0:3d:ba:19:ff:39:
a4:32:11:cd:4a:31:d1:71:18:ff:98:b5:37:14:e6:6f:2d:53:
24:46:cc:d6:c9:9b:df:98:4a:44:35:c3:59:b2:77:f6:58:92:
c2:ad:e5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:35 2024 by rpki-client on console-ams.rpki-client.org