Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/ZiCPK_LYEWBn_3u5sFZyEg3L_8s.roa
File: ZiCPK_LYEWBn_3u5sFZyEg3L_8s.roa (raw, json)
Hash identifier: ulVKPLikssMdYwK7wObieVCvf2/MpTyGdXt1uZQlbhU=
Subject key identifier: 66:20:8F:2B:F2:D8:11:60:67:FF:7B:B9:B0:56:72:12:0D:CB:FF:CB
Certificate issuer: /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial: 018ABCC8E5F274F58C01B5B2E5BA2BD9F787
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/ZiCPK_LYEWBn_3u5sFZyEg3L_8s.roa
Signing time: Fri 22 Sep 2023 12:06:37 +0000
ROA not before: Fri 22 Sep 2023 12:06:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 91.209.234.0/24 maxlen: 24
185.154.8.0/22 maxlen: 24
77.75.180.0/24 maxlen: 24
185.193.68.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:c8:e5:f2:74:f5:8c:01:b5:b2:e5:ba:2b:d9:f7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Validity
Not Before: Sep 22 12:06:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66208f2bf2d8116067ff7bb9b05672120dcbffcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:6d:61:2c:0f:5e:9a:66:25:a4:11:6e:d6:
4e:88:ea:f3:82:b9:3f:07:fe:17:f0:56:19:1b:c2:
b7:65:78:84:a2:3d:a1:29:b9:b3:e3:79:36:84:88:
95:93:52:bf:0c:b4:bc:38:47:8a:f0:f1:74:f7:ec:
ef:28:6c:2f:d4:a6:ba:7c:be:50:21:71:ff:6f:fa:
2e:9f:f9:62:bd:9b:8c:67:17:96:de:69:93:f7:bd:
60:00:d0:4c:79:66:6b:e6:cd:f9:39:54:e2:2c:df:
4d:ea:1b:de:82:bf:1b:8d:54:11:3b:86:71:81:4d:
e9:22:1e:ba:8c:ba:85:9c:23:67:54:49:77:f3:13:
20:41:97:b0:63:66:2c:f8:1e:bd:6b:64:6d:a8:05:
33:20:23:b9:be:3f:79:fa:3b:ee:dc:cc:69:8c:bc:
39:5e:6b:f1:73:1f:45:83:61:44:14:90:f2:6e:62:
46:d7:39:36:23:fb:19:91:1d:f3:21:03:c0:3c:98:
58:4a:59:dd:0a:71:16:b6:34:37:90:ad:54:25:65:
fc:ef:8c:c6:de:de:06:ac:20:50:49:9b:4d:4a:1f:
5a:dc:06:f5:59:14:79:e7:c7:2f:67:04:41:0e:b7:
32:9a:97:cd:4c:33:ca:82:e0:83:1a:8b:ae:44:d1:
5a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:20:8F:2B:F2:D8:11:60:67:FF:7B:B9:B0:56:72:12:0D:CB:FF:CB
X509v3 Authority Key Identifier:
keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/ZiCPK_LYEWBn_3u5sFZyEg3L_8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.180.0/24
91.209.234.0/24
185.154.8.0/22
185.193.68.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:7a:c7:a1:08:1c:af:c9:8d:dd:fe:be:cc:0b:1e:51:ec:7f:
38:fb:81:4d:e8:8f:85:24:1b:65:04:6d:5e:02:7b:67:2e:5c:
70:18:48:a0:7c:bc:96:d0:23:1c:01:0a:aa:a9:c5:b4:b9:6c:
0c:a2:8f:80:24:b3:7d:15:6d:92:31:3c:6b:7d:ba:dc:70:30:
59:10:d6:30:1f:91:5a:8e:b4:52:23:ff:e8:ef:44:b6:93:3a:
a1:b9:8c:81:cd:e0:8a:de:69:67:49:9e:28:e8:02:de:f4:87:
05:fb:ed:c8:4b:b0:fa:3f:4a:73:57:0e:23:59:49:2c:09:4d:
67:13:50:f6:e5:96:bb:57:96:d5:2e:87:cc:62:28:f2:38:99:
fa:81:79:07:41:89:8c:24:d4:2a:7e:ff:9d:c9:79:9b:ad:a1:
70:a7:2f:3a:95:57:ba:2d:46:26:3e:16:28:52:15:25:67:4f:
ad:bd:dc:7b:9e:4f:e9:be:1c:b1:48:18:c1:2b:99:27:61:2e:
6b:eb:13:ac:99:25:0c:7c:77:49:62:58:0b:58:b4:cb:23:d5:
ec:e7:ba:32:14:49:74:46:16:78:2b:7e:eb:26:9e:b7:87:d5:
87:8b:67:fb:26:38:05:9e:7d:a6:6d:57:c6:70:90:44:8e:ac:
f2:b2:c1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 08:19:01 2023 by rpki-client on console-ams.rpki-client.org