Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ZK6HF8Bfia9VlZ4R2g7ewI2lS10.roa
File: ZK6HF8Bfia9VlZ4R2g7ewI2lS10.roa (raw, json)
Hash identifier: xmep2ST3SW6flpA7gkcfiV7JFfX9OWPy60fD74iaqKo=
Subject key identifier: 64:AE:87:17:C0:5F:89:AF:55:95:9E:11:DA:0E:DE:C0:8D:A5:4B:5D
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018A4C7BECA5DF5E0D4D86566DDC20DBF3BC
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ZK6HF8Bfia9VlZ4R2g7ewI2lS10.roa
Signing time: Thu 31 Aug 2023 16:45:04 +0000
ROA not before: Thu 31 Aug 2023 16:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211306
IP address blocks: 91.239.225.0/24 maxlen: 24
176.96.92.0/24 maxlen: 24
77.36.56.0/24 maxlen: 24
77.232.218.0/24 maxlen: 24
178.159.146.0/24 maxlen: 24
77.232.216.0/23 maxlen: 23
91.200.132.0/24 maxlen: 24
91.237.49.0/24 maxlen: 24
93.120.44.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4c:7b:ec:a5:df:5e:0d:4d:86:56:6d:dc:20:db:f3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Aug 31 16:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64ae8717c05f89af55959e11da0edec08da54b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1b:6e:20:f1:73:3e:fd:e9:f7:9d:0b:1d:49:
c6:fc:41:07:50:08:1f:18:22:25:b9:d2:22:66:44:
4a:55:5d:e4:ac:93:59:c6:99:2d:a9:23:1d:2f:01:
d3:63:58:e0:12:1d:32:c6:08:df:02:00:43:71:1e:
24:59:f9:69:8f:af:d9:0e:cf:c1:91:5a:4d:b6:f8:
70:ab:f0:b0:87:20:21:25:a9:5d:c2:5b:d7:68:2f:
13:a7:17:35:00:50:40:79:61:ec:a6:16:d5:56:94:
3c:c8:69:22:a6:57:31:43:57:13:c4:60:1c:09:b0:
23:f6:db:97:03:fc:94:ff:1b:04:52:dc:2f:c7:50:
88:62:c5:01:07:54:fe:7b:06:8d:00:39:d3:8d:e4:
56:95:63:56:d4:b6:ce:60:a7:8a:6a:ab:64:99:ef:
a0:cb:83:2a:f9:09:6c:67:47:14:7e:4c:b7:7a:3a:
e2:6f:d6:59:4e:89:d0:bb:67:62:f1:14:cf:5e:06:
73:f1:86:fb:3c:b9:85:85:b0:84:49:cd:73:91:88:
df:ad:09:b4:d9:c0:c1:a5:18:3d:a7:24:9a:85:17:
96:f4:df:a6:38:f4:f6:29:29:68:4f:d3:6e:8b:fa:
fe:45:82:67:76:a3:a3:ec:30:2c:ab:43:78:1a:65:
28:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AE:87:17:C0:5F:89:AF:55:95:9E:11:DA:0E:DE:C0:8D:A5:4B:5D
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ZK6HF8Bfia9VlZ4R2g7ewI2lS10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.36.56.0/24
77.232.216.0-77.232.218.255
91.200.132.0/24
91.237.49.0/24
91.239.225.0/24
93.120.44.0/23
176.96.92.0/24
178.159.146.0/24
Signature Algorithm: sha256WithRSAEncryption
65:84:f2:dd:3d:92:4c:37:51:ef:ae:79:e3:1f:c1:c7:bd:cb:
06:eb:55:48:8f:e4:42:8d:b7:ca:e7:da:17:21:f9:c0:48:98:
f9:aa:4e:c9:dc:4e:7f:fe:3a:79:c5:34:9f:05:bb:d8:d0:73:
65:4a:2a:e4:17:c6:ca:0c:6e:f0:a1:ab:3d:ef:67:38:4e:3c:
af:42:1d:b6:3e:72:4a:18:c8:8f:74:cd:25:01:a8:e4:cf:bc:
79:59:09:b7:f0:eb:7f:13:81:9e:56:df:1e:e9:4b:e5:b3:17:
59:7e:69:97:52:e8:46:fe:d1:52:93:20:ee:d2:1e:b9:9d:7a:
2e:9e:00:58:55:6e:e6:34:96:95:da:70:6f:a8:2e:ff:39:cc:
2b:03:ec:11:1a:66:12:71:f8:e4:54:e5:9b:f2:35:07:3e:fd:
91:4f:15:c1:93:cf:52:07:65:58:59:b9:6f:64:a1:1c:cc:54:
b6:4a:af:4f:9a:18:d6:de:12:0c:b2:22:5b:e4:ca:8d:11:29:
3b:7a:20:a2:1d:1d:19:24:1d:81:84:2d:99:31:de:4a:8d:d5:
46:7c:b8:ce:ce:2c:f6:46:27:65:c3:78:c0:60:1e:32:11:9e:
90:77:2c:11:83:ab:97:2f:2d:79:cf:e2:df:52:cc:fe:a7:d0:
c4:1b:05:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:56 2024 by rpki-client on console-ams.rpki-client.org