Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/ZwNtVsHgRvF7XfC69XYqodHf2MI.roa
File: ZwNtVsHgRvF7XfC69XYqodHf2MI.roa (raw, json)
Hash identifier: kKzJqJHaZjf1uM4ZySYqHYRVQTlf25HelQwCgseumdU=
Subject key identifier: 67:03:6D:56:C1:E0:46:F1:7B:5D:F0:BA:F5:76:2A:A1:D1:DF:D8:C2
Certificate issuer: /CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Certificate serial: 018C41099023F93D3B17F57EA72E29CAB430
Authority key identifier: EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/ZwNtVsHgRvF7XfC69XYqodHf2MI.roa
Signing time: Wed 06 Dec 2023 21:29:54 +0000
ROA not before: Wed 06 Dec 2023 21:29:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5650
IP address blocks: 185.192.36.0/23 maxlen: 23
185.192.36.0/22 maxlen: 22
185.192.38.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:41:09:90:23:f9:3d:3b:17:f5:7e:a7:2e:29:ca:b4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Validity
Not Before: Dec 6 21:29:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67036d56c1e046f17b5df0baf5762aa1d1dfd8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d1:04:00:46:1b:30:33:31:a5:89:9e:90:f2:
af:7f:10:00:44:4b:a4:59:00:55:51:43:d7:86:e4:
40:c1:b1:74:3f:45:96:53:f7:ab:77:c6:4f:91:bf:
bb:01:96:ab:e2:3c:af:80:cd:ea:6d:65:8c:8e:7e:
52:b7:02:7f:cc:cf:05:e1:66:8e:77:59:34:f4:65:
d4:47:7a:75:1b:0a:cf:96:62:c0:f7:a6:7a:7e:86:
09:a0:9d:ee:8b:83:f1:19:2d:f8:51:ef:5a:28:3e:
d8:71:c5:c3:52:14:74:f0:fb:8d:72:9b:d7:65:be:
66:21:7c:81:09:34:5d:dc:db:cd:1e:bd:91:ef:3d:
f2:1f:b2:6a:c8:49:1a:8e:4e:c7:8e:70:1e:bf:d0:
6b:62:ad:43:d7:13:92:2c:5e:8c:b1:ca:89:4e:74:
5a:29:7f:81:d5:b7:d6:b3:99:6e:1c:0f:6b:fc:7c:
1e:40:ec:1f:4c:c5:69:2a:ef:be:cf:90:05:27:c3:
d8:90:a6:0f:03:ee:be:92:0f:f7:55:f3:c4:b3:1a:
31:03:f5:32:49:47:9c:8f:5c:92:f3:5f:a6:07:93:
96:ae:77:63:6a:05:2a:89:38:53:87:1c:70:b6:0e:
c9:c5:6f:0f:bb:12:df:14:e3:ed:24:9a:c3:a6:39:
d6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:03:6D:56:C1:E0:46:F1:7B:5D:F0:BA:F5:76:2A:A1:D1:DF:D8:C2
X509v3 Authority Key Identifier:
keyid:EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/ZwNtVsHgRvF7XfC69XYqodHf2MI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.36.0/22
Signature Algorithm: sha256WithRSAEncryption
56:9a:8c:55:42:ab:27:53:9e:01:e7:ce:2f:9a:ab:cd:db:9a:
d1:d7:bf:c0:6d:53:3c:42:e1:67:e7:b3:15:65:31:83:40:51:
63:6d:90:8b:0a:3b:f1:35:42:90:31:3f:85:15:43:7b:36:93:
ec:e4:ae:c2:81:44:9d:a3:fa:11:c8:e8:6d:6c:8b:7a:56:2a:
3a:c3:ac:6a:e5:57:6e:cf:d0:c0:ef:0d:a4:ec:f6:b0:ad:94:
27:da:45:da:b2:e2:99:74:d4:15:59:a7:ec:6a:6f:5d:3d:07:
28:40:8e:55:52:a5:2e:b9:ca:d5:1c:eb:ea:31:c1:80:73:be:
7f:83:ec:5d:64:91:46:bd:82:a6:2e:a9:bb:72:c7:6b:cb:e8:
30:25:0b:42:88:ac:38:9f:60:69:46:27:3e:48:8b:ce:d0:e7:
28:68:ef:3a:96:8b:cf:07:3c:78:14:a0:bf:8e:e5:41:d3:c9:
c1:ba:83:9b:f8:21:27:03:b1:37:a6:16:86:e0:d2:54:45:23:
3e:3f:d4:36:31:e3:01:a3:85:ae:24:5e:e5:22:e2:c1:1f:be:
81:72:15:05:8b:0e:87:8b:53:23:72:8e:06:46:ce:a3:7c:9f:
8e:61:63:38:1e:5d:fc:51:ba:f5:d4:2a:16:7f:33:e3:3f:48:
4f:cf:bd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:28 2024 by rpki-client on console-fra.rpki-client.org