Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ZaKJVb9rBC8nalY7GauEh6RHgIY.roa
File: ZaKJVb9rBC8nalY7GauEh6RHgIY.roa (raw, json)
Hash identifier: ubz8j6ib+JFZi7x0Ys/TADMONDgHtqD7ShSc+MnAlrM=
Subject key identifier: 65:A2:89:55:BF:6B:04:2F:27:6A:56:3B:19:AB:84:87:A4:47:80:86
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01856BDCA7401FB07213F17F384B7C6F7CBF
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ZaKJVb9rBC8nalY7GauEh6RHgIY.roa
Signing time: Sun 01 Jan 2023 05:45:00 +0000
ROA not before: Sun 01 Jan 2023 05:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 91.245.184.0/22 maxlen: 22
193.36.208.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:a7:40:1f:b0:72:13:f1:7f:38:4b:7c:6f:7c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 1 05:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65a28955bf6b042f276a563b19ab8487a4478086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:9d:71:d2:2b:be:2d:ee:d9:e9:83:04:5d:
d5:b9:0f:4c:e0:ec:19:fa:30:74:da:b1:79:57:c5:
b1:84:91:ad:f3:18:ee:b2:81:59:bf:bb:76:9b:12:
f9:cf:de:fc:ae:4b:36:e6:a6:10:b1:c4:74:dc:bd:
2c:94:a5:fc:b5:52:eb:d5:f9:f1:1a:30:bb:14:6f:
1c:10:b9:b3:25:67:f3:44:4c:00:e4:c1:6e:99:18:
de:f3:61:ee:52:60:be:eb:5f:aa:04:d1:e2:43:28:
21:d6:0e:35:17:a5:41:39:a7:ce:9c:4f:30:d0:e2:
30:2c:d4:d3:24:54:9b:d4:21:af:0b:af:5c:a2:88:
28:e3:89:da:7e:6d:89:ce:a9:57:87:b3:b6:f3:1e:
3d:c9:cf:27:ef:53:54:ee:05:dd:98:e5:4e:e9:27:
31:86:38:c8:bf:6e:16:89:0a:11:c2:d9:59:aa:6d:
be:06:da:73:ba:7e:bd:71:1d:8f:84:54:42:e9:41:
1b:79:5b:0f:f8:87:b7:16:b3:3f:48:86:7d:b4:6d:
7e:31:bf:68:69:04:0f:e7:94:53:5c:4f:cf:a3:85:
21:39:0b:7b:49:59:01:65:55:d0:6e:c6:4e:b5:93:
c6:44:3c:a2:d8:a2:f6:a2:69:4a:ac:43:51:a8:a3:
fa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A2:89:55:BF:6B:04:2F:27:6A:56:3B:19:AB:84:87:A4:47:80:86
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ZaKJVb9rBC8nalY7GauEh6RHgIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.184.0/22
193.36.208.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:ff:a4:2d:ae:d5:1a:ee:2a:f8:f1:c8:80:81:59:49:fd:5f:
09:18:24:24:4b:ed:56:52:55:41:67:3a:fc:f9:69:99:50:f8:
ed:89:6f:12:f6:d2:40:3b:a9:be:f4:ea:bc:58:80:9f:12:f3:
ec:d3:94:c6:77:cf:2f:6c:d1:84:07:9f:5d:b1:e3:f7:49:e5:
9a:f8:89:4b:f3:94:4e:7d:9d:37:91:c7:7e:17:3d:61:e9:75:
84:9a:b2:e8:9c:3d:1a:49:18:bc:b7:f8:14:7e:3e:f7:bc:52:
89:8c:7f:97:84:c0:85:d1:90:df:bc:8e:2a:24:a0:46:4c:bc:
0f:80:78:1e:9c:0d:83:fb:7c:1a:19:45:27:4e:8c:f4:b8:7b:
dc:8c:5b:cd:b1:35:77:fa:81:89:87:b3:e4:6b:2a:d0:41:41:
ef:1e:23:e9:25:41:e3:f0:2d:28:5a:65:7b:fd:38:9e:3d:4d:
44:81:a5:8f:51:81:18:5a:a3:f8:cb:80:76:c3:d0:52:3f:86:
b7:ab:f6:90:e0:87:6b:fc:b0:28:c5:ad:31:eb:0b:ee:8f:7a:
77:9d:dd:3a:43:87:bd:0f:b6:d2:1f:53:b3:68:3f:88:8f:67:
17:25:7b:d3:d2:a4:05:94:69:09:fa:dd:66:5d:7d:1e:36:25:
03:f6:3d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:56 2024 by rpki-client on console-ams.rpki-client.org