Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Z1cCc3QFsfQ9kGad-9YUeOm9gUM.roa
File: Z1cCc3QFsfQ9kGad-9YUeOm9gUM.roa (raw, json)
Hash identifier: 0wxCZGfvg+o/CLfd2vD1/aKhFO1EG+HkZXl9g6RRRC4=
Subject key identifier: 67:57:02:73:74:05:B1:F4:3D:90:66:9D:FB:D6:14:78:E9:BD:81:43
Certificate issuer: /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Certificate serial: 01856CCAF597FEC4B2FEBE66C910EE2D8607
Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Z1cCc3QFsfQ9kGad-9YUeOm9gUM.roa
Signing time: Sun 01 Jan 2023 10:05:18 +0000
ROA not before: Sun 01 Jan 2023 10:05:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60423
IP address blocks: 185.83.113.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:f5:97:fe:c4:b2:fe:be:66:c9:10:ee:2d:86:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Validity
Not Before: Jan 1 10:05:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=675702737405b1f43d90669dfbd61478e9bd8143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ef:06:f8:86:a4:9f:48:eb:66:b4:5a:69:22:
e3:c4:1e:d4:49:01:14:06:df:6a:e3:4c:5a:80:57:
fc:f3:3e:68:68:5b:df:47:b7:73:98:65:67:4f:26:
b1:66:11:0f:18:9f:84:9f:30:b8:11:6c:74:e1:83:
0b:7c:ca:0a:d2:17:6b:9b:a1:83:b5:6e:3b:02:39:
03:c7:59:df:86:bd:fe:dd:21:9f:36:a2:17:df:fa:
9e:49:83:6e:1d:12:25:a8:d1:25:79:1f:7f:79:04:
66:1c:75:17:d3:34:04:90:2c:b8:7e:b8:ee:cb:a7:
8c:ad:ef:e7:37:9d:56:3c:8b:b7:c3:9c:d2:bd:a6:
73:d0:52:ba:9d:f1:a2:8c:16:28:9d:95:b0:36:b1:
b4:88:9b:ae:f2:b1:4a:f0:12:dc:49:57:d3:66:3b:
cd:b0:09:89:69:09:76:20:aa:63:75:f6:14:b7:36:
34:67:23:44:07:3e:32:42:b4:cd:44:73:0d:d3:57:
dd:bc:40:63:cf:a9:cb:bf:42:a5:c6:3a:1d:a9:78:
3d:e0:bf:4c:bb:35:4a:7e:7a:0e:df:d0:50:0a:2b:
b0:03:25:7f:a6:2d:41:bc:02:81:17:81:0d:ef:48:
e3:ba:e7:b5:b6:5f:61:ab:fd:63:0b:f3:e4:c0:c2:
12:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:57:02:73:74:05:B1:F4:3D:90:66:9D:FB:D6:14:78:E9:BD:81:43
X509v3 Authority Key Identifier:
keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Z1cCc3QFsfQ9kGad-9YUeOm9gUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.113.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:b2:c8:44:d3:e0:da:95:d2:55:25:34:16:3c:02:55:5a:56:
41:89:be:eb:7d:46:08:fc:a1:12:2c:64:33:01:2f:f3:31:b5:
3f:d2:75:e7:33:96:96:77:6e:80:6c:7b:35:79:00:fd:65:bc:
26:98:49:01:cd:5f:34:a1:58:eb:53:ef:f3:c8:e4:15:7d:bb:
de:82:be:aa:ff:03:51:53:78:5c:4e:d5:06:25:f6:9b:ac:c3:
5d:50:99:20:80:68:cc:0e:39:a5:96:95:98:3e:b9:b4:32:61:
b6:07:f2:49:9a:c8:cb:fb:62:a8:13:51:a1:52:85:aa:68:7f:
8c:46:69:20:57:b6:6e:9b:f2:25:9c:2e:c5:8a:24:18:70:ac:
d0:e1:3f:25:df:b1:3e:16:33:ae:1e:e9:ae:dd:7b:77:8e:66:
35:44:a3:31:d9:6f:53:d5:95:5d:42:f6:d4:d5:30:cf:1c:53:
2d:2e:31:f8:cb:75:60:95:b9:c7:7e:de:19:63:a0:cc:82:fb:
5f:fc:0f:f7:5b:f2:f9:9d:21:38:1c:84:21:84:dd:0c:b0:e9:
f4:92:e9:75:d6:fa:be:02:6b:10:3e:a1:1a:70:20:05:49:65:
16:f7:35:34:49:9b:70:46:ad:f6:a6:de:2b:ba:23:ec:ff:dd:
6f:b7:a4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:55 2024 by rpki-client on console-ams.rpki-client.org