Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/ZJdyck8ybB_I1z7dB9Hcw0mMPbE.roa
File: ZJdyck8ybB_I1z7dB9Hcw0mMPbE.roa (raw, json)
Hash identifier: Ccm3zQ+uDE0f203ZA/PJKWSqoUablHMPFwQAuvgjUxI=
Subject key identifier: 64:97:72:72:4F:32:6C:1F:C8:D7:3E:DD:07:D1:DC:C3:49:8C:3D:B1
Certificate issuer: /CN=42004477243ca20b95dc8efe07337639806f6075
Certificate serial: 01856D13BB1983C3D4B217A51668BB122B35
Authority key identifier: 42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/ZJdyck8ybB_I1z7dB9Hcw0mMPbE.roa
Signing time: Sun 01 Jan 2023 11:24:47 +0000
ROA not before: Sun 01 Jan 2023 11:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204918
IP address blocks: 185.135.96.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:bb:19:83:c3:d4:b2:17:a5:16:68:bb:12:2b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42004477243ca20b95dc8efe07337639806f6075
Validity
Not Before: Jan 1 11:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=649772724f326c1fc8d73edd07d1dcc3498c3db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d3:94:ad:d7:86:96:a7:1f:d4:bc:58:22:c0:
01:51:da:bd:86:39:a9:91:81:dc:97:74:0c:c7:43:
00:33:93:1a:4a:7b:80:7a:b7:bc:a3:c2:1e:78:19:
d9:93:06:ee:30:58:66:ce:af:bd:ef:af:5e:6b:a9:
08:68:35:d1:23:d2:04:54:c1:24:7b:47:b8:d7:96:
1a:29:29:51:cb:86:b0:b0:92:7c:47:7b:94:c0:9a:
d3:44:26:48:6a:20:a6:b8:58:15:9f:81:92:9a:63:
e3:21:3b:7d:6b:e5:20:91:2a:49:7c:84:e8:ac:e6:
41:32:d6:90:8c:a1:4a:64:5b:d0:9c:5b:ce:a0:34:
f4:a4:36:97:db:12:6a:18:80:66:a6:49:1c:7d:92:
42:b2:8a:f9:2a:9d:e4:6c:df:8b:7f:62:4e:4a:a3:
15:37:07:8b:46:db:24:ea:12:db:cb:ad:81:73:0e:
49:ae:f6:e4:b2:21:0a:7a:90:46:75:3a:04:83:f4:
14:50:e8:c1:f5:73:b8:75:6c:ac:d8:62:10:2c:7c:
14:dd:6f:29:37:f5:4f:9d:d2:7a:dc:be:be:a3:7d:
7c:8f:b5:df:0f:de:54:4e:f3:4c:f1:31:87:88:ab:
1c:59:bc:53:f3:b7:c9:5c:fa:7e:e9:3d:ea:11:de:
6a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:97:72:72:4F:32:6C:1F:C8:D7:3E:DD:07:D1:DC:C3:49:8C:3D:B1
X509v3 Authority Key Identifier:
keyid:42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/ZJdyck8ybB_I1z7dB9Hcw0mMPbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.96.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:c2:51:4a:0b:e8:e6:56:3f:ca:b4:0e:b8:95:d6:57:de:a9:
aa:9a:08:bc:22:ae:3c:ea:47:7f:31:48:03:36:cc:1b:9b:f1:
93:43:e8:b0:87:10:3e:71:22:a8:e6:bd:3f:73:a1:d9:95:f2:
0d:dc:80:61:b9:39:8d:0b:d3:a9:9d:9d:e2:49:8e:77:19:4c:
89:b6:69:ce:bd:67:61:2b:b0:c2:d5:e0:9f:01:ac:cd:fc:fb:
d5:95:14:33:13:c8:a1:95:86:fb:e0:bf:d9:f9:ac:47:94:f5:
d5:e5:80:e4:4b:f4:f1:c6:15:4b:eb:0b:0a:fc:b6:06:20:76:
b7:1a:65:43:8f:a5:aa:fa:a2:09:bf:1b:3f:18:3a:14:1d:8d:
58:88:d8:d1:e9:d1:b9:7a:57:96:e4:8e:52:f5:ac:61:e8:aa:
bc:8f:b3:e1:c0:75:b0:25:af:4c:1b:e2:97:e7:db:5f:90:e8:
7b:6e:06:25:91:05:9f:e5:15:6b:e3:37:4c:93:8d:ae:54:ea:
f5:24:29:1c:36:f2:76:0e:5a:50:47:fc:fa:ee:bb:71:b0:4d:
04:be:a3:c5:b2:1c:3b:de:41:a1:67:75:3b:4b:aa:b7:cf:ca:
9a:77:e9:2f:45:dc:f4:31:8f:e5:3d:53:1d:e9:1c:26:22:3f:
4a:2c:90:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:28 2024 by rpki-client on console-ams.rpki-client.org