Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/zuQQVkguF7QO1qAzxXdFQAYHa8k.roa
File: zuQQVkguF7QO1qAzxXdFQAYHa8k.roa (raw, json)
Hash identifier: qnSvqY9dN72twv4Ey8AyDWG3N4RkVPRTYu3krBIYRzo=
Subject key identifier: CE:E4:10:56:48:2E:17:B4:0E:D6:A0:33:C5:77:45:40:06:07:6B:C9
Certificate issuer: /CN=12ee6257d0c3a2b930561af2522d9e5af7f9cbc7
Certificate serial: 01856F824D3FC67D57E572874F0FAC0EBFEC
Authority key identifier: 12:EE:62:57:D0:C3:A2:B9:30:56:1A:F2:52:2D:9E:5A:F7:F9:CB:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/zuQQVkguF7QO1qAzxXdFQAYHa8k.roa
Signing time: Sun 01 Jan 2023 22:44:48 +0000
ROA not before: Sun 01 Jan 2023 22:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.235.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:4d:3f:c6:7d:57:e5:72:87:4f:0f:ac:0e:bf:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ee6257d0c3a2b930561af2522d9e5af7f9cbc7
Validity
Not Before: Jan 1 22:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cee41056482e17b40ed6a033c577454006076bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:93:01:84:87:39:dd:c4:46:12:db:9d:76:5c:
76:ea:f8:d8:9a:ed:9e:6b:2c:ef:9e:e3:c1:49:27:
93:19:ea:5a:ff:21:80:a3:a1:85:a0:bb:60:94:31:
36:3a:85:cd:ef:b8:e1:66:af:c8:47:c0:06:5f:0b:
44:9b:59:64:77:3b:5a:b6:c8:77:6d:61:8d:9c:7b:
6e:8d:fe:19:9f:d2:11:c2:55:3d:cd:f4:af:7f:71:
79:32:66:c9:8d:70:57:3a:96:7a:5d:06:db:69:a8:
07:ac:14:e8:4e:a8:d9:de:de:ba:39:54:26:cb:db:
da:1e:ae:63:1c:e8:a4:93:0b:c1:d8:88:30:3a:15:
13:d5:f3:68:2e:c1:66:49:65:73:c6:ff:a7:e8:75:
f7:16:63:fb:9f:ee:ab:41:3f:ff:7f:c0:0a:04:bb:
1d:96:26:f5:70:06:eb:7d:40:0e:9a:6c:c8:96:4b:
01:e9:d7:56:f4:87:36:b3:13:44:be:f7:bf:1e:b3:
39:d9:13:91:3d:83:2d:62:af:12:c6:2b:de:8d:8d:
83:50:92:78:50:29:bb:a1:8b:a5:67:1b:85:8f:9c:
b5:84:a0:9a:d8:18:7e:15:62:91:c9:42:7c:9e:5d:
bd:1d:61:a2:27:90:15:41:13:64:61:ef:28:34:d2:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E4:10:56:48:2E:17:B4:0E:D6:A0:33:C5:77:45:40:06:07:6B:C9
X509v3 Authority Key Identifier:
keyid:12:EE:62:57:D0:C3:A2:B9:30:56:1A:F2:52:2D:9E:5A:F7:F9:CB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/zuQQVkguF7QO1qAzxXdFQAYHa8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/Eu5iV9DDorkwVhryUi2eWvf5y8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.38.0/24
Signature Algorithm: sha256WithRSAEncryption
89:56:3d:62:eb:26:76:81:b0:66:56:77:04:62:93:2c:f9:51:
79:dc:4b:5a:80:a5:06:40:4a:a9:0b:fb:c5:cd:28:ef:f8:35:
b2:ae:c0:af:a4:35:66:59:99:57:81:b0:fb:af:4c:ca:5c:fa:
51:ef:64:22:6b:a7:2f:cb:f9:4c:ce:3d:2f:e1:4b:a1:82:12:
9e:f2:d6:d5:9d:0a:63:55:fa:bc:87:f4:32:72:d3:89:9e:a0:
fc:0f:9e:75:6f:60:79:4a:a6:9f:c8:93:b1:44:4a:0e:fc:6c:
b6:3c:78:76:8e:08:d0:e2:96:87:77:c2:66:41:46:c6:19:1b:
ff:83:ea:e8:a7:f7:2f:39:3f:1c:bc:ff:04:07:23:df:22:70:
a5:f9:f2:5e:93:d0:65:47:06:ad:fd:41:96:6f:1b:4b:e1:7f:
37:d7:fa:3a:61:1d:9b:c1:b1:b4:2c:8e:20:31:5b:87:81:21:
95:1d:21:70:22:47:19:0d:bd:37:7c:e3:3f:7b:0d:fd:6a:71:
e0:7c:1a:86:23:2b:fc:e4:91:1a:86:2d:6e:d8:99:2f:c0:aa:
6b:65:e0:0d:f2:eb:f3:84:14:95:c8:b3:9d:18:a4:52:da:a5:
61:bb:2a:c3:23:8f:c8:38:cc:00:a5:9b:54:f2:c4:d2:e3:03:
03:05:78:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:37 2024 by rpki-client on console-ams.rpki-client.org