Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Zoohe5wa6EALxQRK4A6nYrKKWdE.roa
File: Zoohe5wa6EALxQRK4A6nYrKKWdE.roa (raw, json)
Hash identifier: 1D44b5K0eAjrlGncwgO0vtiPjFFMRYyKsHuxHNZXkfw=
Subject key identifier: 66:8A:21:7B:9C:1A:E8:40:0B:C5:04:4A:E0:0E:A7:62:B2:8A:59:D1
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018C44FB5039A8548B53480CE49DE7BBA00C
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Zoohe5wa6EALxQRK4A6nYrKKWdE.roa
Signing time: Thu 07 Dec 2023 15:52:49 +0000
ROA not before: Thu 07 Dec 2023 15:52:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206068
IP address blocks: 86.104.192.0/24 maxlen: 24
86.104.195.0/24 maxlen: 24
89.32.126.0/24 maxlen: 24
86.104.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:44:fb:50:39:a8:54:8b:53:48:0c:e4:9d:e7:bb:a0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Dec 7 15:52:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=668a217b9c1ae8400bc5044ae00ea762b28a59d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:d1:c4:36:2e:b0:30:19:c7:22:e4:4e:3e:
61:34:e8:ff:b5:56:46:a5:bb:44:a2:19:15:bd:4d:
66:6a:a2:af:92:19:f5:8f:5c:87:5d:a3:24:42:2b:
82:75:2a:60:48:ee:41:68:cd:9c:4e:84:2c:a4:47:
42:2f:bd:55:b9:30:8e:c4:bb:96:94:fd:19:2d:3d:
04:e4:8a:60:a8:b6:84:44:99:44:f6:ab:62:d8:f0:
4d:65:97:c6:fc:95:e5:11:fd:00:bf:5b:b9:e3:8d:
92:99:90:ea:39:9f:22:c0:88:2c:9f:8d:a4:ca:c1:
34:07:a7:85:b5:dc:eb:67:bd:4e:74:17:05:f4:58:
ff:68:71:bf:e0:70:6b:04:b5:67:76:9f:1c:41:b1:
d0:c7:6f:7e:4f:b5:4e:c9:77:15:43:a8:40:6c:26:
97:e8:f5:dd:7a:a6:3b:eb:22:22:29:57:df:ce:5c:
bb:69:2b:28:1d:01:9e:5a:b9:e0:c8:02:39:5e:16:
9a:b7:fe:a5:ce:b2:39:df:59:9c:97:d5:1a:67:4f:
df:57:12:6c:86:78:de:94:3b:2f:0c:d6:35:23:f6:
c9:bb:83:ed:6c:0d:0f:37:44:79:07:e2:04:57:86:
bd:49:5e:4a:d4:5f:d8:0d:7c:b0:be:5d:df:c6:dc:
f0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8A:21:7B:9C:1A:E8:40:0B:C5:04:4A:E0:0E:A7:62:B2:8A:59:D1
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Zoohe5wa6EALxQRK4A6nYrKKWdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.19.0/24
86.104.192.0/24
86.104.195.0/24
89.32.126.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:d2:1f:cc:ee:15:3a:af:cd:74:d0:98:42:70:83:a0:c7:1e:
fe:06:75:83:c4:d2:7c:74:7c:7e:06:c9:2e:2f:ae:b4:9e:44:
1d:8d:b1:70:91:12:8e:a5:ce:a5:6f:9e:b6:e9:b5:60:8a:d6:
c8:a8:ee:ec:07:c8:37:fc:49:4d:8f:70:ca:c3:b9:e2:09:5b:
21:8e:38:99:05:fe:0d:6d:42:84:40:74:2d:b4:eb:20:d4:d8:
f5:a7:94:ef:62:6c:78:03:b1:83:23:19:c6:9a:1e:49:de:75:
80:f6:fd:e3:a5:66:77:6d:92:dd:36:e1:d8:cb:fb:7f:81:35:
16:71:a0:d4:fc:f5:6b:81:39:89:b2:0e:5d:77:6e:60:4a:80:
fa:2a:2b:8c:56:8b:12:fc:91:85:f4:a9:5c:63:b9:56:54:91:
fb:03:27:d4:0b:a7:17:81:58:80:d1:56:64:09:4c:0c:5c:b5:
81:10:94:fb:c5:24:62:aa:a0:f8:dc:e0:4c:41:b5:c4:a6:af:
25:6c:91:57:cd:41:3d:ca:10:d5:c5:51:f6:dc:d0:68:f9:95:
3c:95:f1:0c:c9:24:5b:87:35:e1:d3:90:72:4e:ad:e4:2c:5d:
2d:05:4b:7f:dc:d4:a3:f5:0f:bc:c1:41:74:3a:26:59:ba:24:
90:85:48:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:21 2024 by rpki-client on console-fra.rpki-client.org