Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ZtzauQ9qT9xjSw8F-DgBwedkAMg.roa
File: ZtzauQ9qT9xjSw8F-DgBwedkAMg.roa (raw, json)
Hash identifier: YM/J1uYJqwg2cy5jOvWI5569T3YILc5ZFQBAw1GKkpM=
Subject key identifier: 66:DC:DA:B9:0F:6A:4F:DC:63:4B:0F:05:F8:38:01:C1:E7:64:00:C8
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0187FB7AEC04C24A84D09F802DB8D92E3B1A
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ZtzauQ9qT9xjSw8F-DgBwedkAMg.roa
Signing time: Mon 08 May 2023 13:09:09 +0000
ROA not before: Mon 08 May 2023 13:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205570
IP address blocks: 212.69.14.0/24 maxlen: 24
79.175.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fb:7a:ec:04:c2:4a:84:d0:9f:80:2d:b8:d9:2e:3b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 8 13:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66dcdab90f6a4fdc634b0f05f83801c1e76400c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:6c:fc:05:ee:7e:4f:50:12:c8:ce:00:ce:
74:37:5c:27:e7:00:1c:55:5a:4a:aa:d9:60:b2:71:
54:96:d6:d3:18:09:3d:4d:87:67:4e:56:77:78:93:
e2:0a:b6:16:b8:ba:8e:2f:a9:88:04:8e:e0:64:bf:
9f:ff:a7:c4:e4:c9:21:19:84:3d:9a:f1:e9:49:0d:
e2:d8:36:3b:50:05:7e:5a:5c:0b:9e:4d:09:7f:7e:
bb:a8:66:b0:6c:a2:7e:37:f0:85:ab:ec:09:7e:f3:
23:11:5e:23:10:26:2a:a4:07:b3:eb:01:9e:c2:17:
94:df:33:d4:a7:cf:9a:84:77:6d:ea:1b:be:4e:c0:
27:c6:c6:d3:3d:79:41:12:68:13:26:43:d5:29:5e:
99:03:02:e3:1e:b0:cd:c8:14:39:a3:67:d0:a8:5d:
59:02:e1:55:5a:85:99:3d:22:ab:01:d5:fd:40:72:
30:b2:30:04:70:0f:6b:ee:95:a9:1b:4d:b7:93:f5:
01:ab:df:2b:b0:50:9e:ed:b8:4d:f1:c1:03:cf:bf:
e9:12:01:af:a4:d4:82:a2:ae:9a:1b:13:aa:a6:1a:
2c:89:c9:37:30:ac:8f:5c:dd:96:38:4a:9c:bc:a3:
be:86:39:61:ba:4a:ff:8c:69:0a:95:5f:95:55:80:
a3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DC:DA:B9:0F:6A:4F:DC:63:4B:0F:05:F8:38:01:C1:E7:64:00:C8
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ZtzauQ9qT9xjSw8F-DgBwedkAMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.67.0/24
212.69.14.0/24
Signature Algorithm: sha256WithRSAEncryption
59:94:a3:2f:d7:19:c4:25:63:62:3b:35:28:96:42:16:ca:02:
65:d6:76:7d:0f:9b:63:0e:95:51:c3:45:1b:6e:ae:a3:71:b9:
e9:66:a7:f9:e6:8c:ed:9e:95:5d:ae:40:41:0e:6d:6a:00:23:
e3:c5:81:5e:e6:01:22:4b:c6:93:a9:6c:de:19:f4:f8:78:0b:
c5:50:f7:0a:bb:2c:6f:80:e8:00:98:a8:5b:2f:04:e7:1b:75:
07:fa:f8:df:88:a4:50:0c:33:31:a7:82:99:f4:18:35:60:a2:
a2:e1:b1:53:60:42:96:f4:b1:be:d4:cd:60:b4:31:a0:9d:3a:
ca:78:07:da:6d:2e:41:40:65:41:65:01:7c:4f:60:79:6b:71:
29:d3:3a:eb:1a:5a:4e:62:7a:9b:3f:0d:03:5e:59:5d:6c:0d:
1e:14:75:07:8f:90:b8:da:0b:4a:a7:69:de:17:d3:97:00:99:
01:55:1e:89:f0:87:29:b6:af:16:97:3f:05:93:c9:7e:e1:22:
62:45:d8:66:7b:29:12:75:45:d1:7b:26:4f:7a:02:0b:93:7b:
c8:e6:49:d3:fd:97:36:b9:68:58:1e:fe:96:92:27:46:a6:fa:
10:cf:bc:e7:74:a8:7b:f2:2a:08:62:79:5c:60:85:33:d9:f1:
f3:fb:1c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org