Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/zbAWQh2H85rqV-nC0YosTBEtVdY.roa
File: zbAWQh2H85rqV-nC0YosTBEtVdY.roa (raw, json)
Hash identifier: XDjLS1mC/VrtWfKvOEZ6C2upoXQq+qLmEpGao+Og6jk=
Subject key identifier: CD:B0:16:42:1D:87:F3:9A:EA:57:E9:C2:D1:8A:2C:4C:11:2D:55:D6
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 01856E141CC66DCBC95420AF0AB7C77FCFD0
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/zbAWQh2H85rqV-nC0YosTBEtVdY.roa
Signing time: Sun 01 Jan 2023 16:04:49 +0000
ROA not before: Sun 01 Jan 2023 16:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7155
IP address blocks: 185.15.32.0/22 maxlen: 22
37.252.200.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 14 Feb 2023 08:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:1c:c6:6d:cb:c9:54:20:af:0a:b7:c7:7f:cf:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Jan 1 16:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdb016421d87f39aea57e9c2d18a2c4c112d55d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3e:5f:2a:20:a1:36:fb:3c:6a:c7:8c:9c:51:
79:5c:4d:6f:3e:17:de:64:11:04:91:d0:45:01:d7:
0f:d7:a4:e7:79:bc:50:20:21:57:f0:c2:ee:a7:3c:
92:37:37:67:53:f9:e7:20:ca:02:17:b3:b3:07:2d:
23:69:a3:43:fa:82:2a:bc:00:ee:bb:12:a6:f2:cb:
ee:58:36:a6:41:52:32:6e:5c:31:18:87:55:46:af:
fb:fa:e0:16:7a:ab:d5:c1:04:4e:cb:6c:52:d5:51:
2f:12:51:5d:98:8b:ed:f4:7d:bd:d1:29:18:55:73:
c7:36:2c:44:19:8b:a9:65:28:83:b0:44:27:ec:5d:
35:8f:e9:72:18:ba:df:b8:4e:57:81:c3:bd:e3:80:
d6:5f:0b:f1:5b:de:25:a5:57:22:2b:db:3c:8c:2f:
cb:12:7a:55:0e:04:0a:00:ec:f7:c0:fd:21:5d:74:
f4:d8:5a:0f:0a:ef:bb:d9:56:ed:4b:27:ed:fe:68:
72:88:36:b3:14:1a:30:5c:60:a0:c7:e6:fe:e1:d5:
92:07:03:92:ab:1a:68:02:ca:e5:9c:ba:86:3d:70:
88:6d:10:28:f3:1b:94:16:30:d3:98:b1:39:1a:59:
74:18:ee:eb:e4:90:2c:8c:f9:e8:95:b9:70:6a:da:
b3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B0:16:42:1D:87:F3:9A:EA:57:E9:C2:D1:8A:2C:4C:11:2D:55:D6
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/zbAWQh2H85rqV-nC0YosTBEtVdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.200.0/21
185.15.32.0/22
Signature Algorithm: sha256WithRSAEncryption
33:c2:e7:a4:86:83:ab:f5:f4:f1:09:74:87:2b:23:16:cd:08:
87:91:2f:f4:fd:83:60:2c:53:5c:72:5e:65:48:67:79:75:e1:
49:2b:16:da:c2:28:b0:8f:a8:57:7e:2c:d2:20:09:12:b3:ad:
f5:28:b2:e8:76:32:cc:38:79:4b:6d:6e:23:ca:a7:5b:b0:22:
e3:85:46:82:c6:ce:54:19:80:d2:aa:1b:f9:23:a7:b8:25:43:
e0:81:6f:fa:77:5b:64:6b:eb:6d:0d:c0:1c:d5:6d:57:a2:7c:
1b:e0:73:90:90:98:ee:f7:ee:a6:fc:c9:94:16:34:4c:84:ea:
26:18:f6:dd:e7:3f:1b:cf:7a:4f:67:67:88:42:5b:9a:92:b0:
22:34:5a:09:12:9d:c4:af:9a:38:27:41:f5:ff:3e:4d:e2:f3:
c0:40:30:c4:e7:ee:81:50:cf:55:1d:74:a9:3e:85:62:fd:2a:
cb:f8:b8:0d:96:e6:51:1b:86:31:34:35:73:94:21:46:86:9d:
85:d4:1e:90:1c:dd:12:f3:d8:29:f6:bb:c7:7b:31:50:59:52:
ce:d5:e5:4f:12:53:71:ab:5a:1c:b4:3a:7c:65:32:c2:47:5e:
50:ff:ab:7d:b5:1c:f0:41:a9:bc:6b:17:15:e7:47:2e:cd:29:
85:43:1a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:58 2024 by rpki-client on console-fra.rpki-client.org