Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/Zzr42P3DUVuZQwuP5mDDgI-FRSE.roa
File: Zzr42P3DUVuZQwuP5mDDgI-FRSE.roa (raw, json)
Hash identifier: R8Tmd+Ra7UNHkhui40d9HwxucwHhyMblBKZ/5W9wEO0=
Subject key identifier: 67:3A:F8:D8:FD:C3:51:5B:99:43:0B:8F:E6:60:C3:80:8F:85:45:21
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 018570675B65DB3CDA2DC0DA12809BCECAEA
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/Zzr42P3DUVuZQwuP5mDDgI-FRSE.roa
Signing time: Mon 02 Jan 2023 02:54:59 +0000
ROA not before: Mon 02 Jan 2023 02:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206276
IP address blocks: 212.63.112.0/22 maxlen: 22
185.179.184.0/22 maxlen: 22
194.49.56.0/22 maxlen: 22
45.8.12.0/22 maxlen: 22
185.190.100.0/22 maxlen: 22
78.142.212.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:5b:65:db:3c:da:2d:c0:da:12:80:9b:ce:ca:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Jan 2 02:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=673af8d8fdc3515b99430b8fe660c3808f854521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4d:ff:15:b7:4b:b7:0c:80:35:72:dd:e0:59:
8d:67:63:c7:b9:7f:e5:08:fb:86:59:28:ed:0a:a2:
79:4f:ed:3e:74:fb:b0:26:bd:5c:33:a3:f9:fa:3e:
eb:cd:1e:22:82:b8:e0:17:1a:1e:e1:4a:d7:5f:9a:
7e:fb:41:2b:7e:53:60:19:ac:d0:07:0b:d8:89:0a:
20:f0:18:e3:6b:31:0d:ee:55:72:7d:ba:62:36:d4:
5f:a6:33:08:eb:0c:ac:db:aa:60:e8:1b:52:bd:94:
a0:bd:18:ec:59:c8:d8:75:e5:fa:18:a9:e3:81:63:
76:72:7b:f4:f5:5a:e1:66:0b:8a:48:b1:e7:b8:7b:
cc:22:61:d4:4d:09:27:2f:3d:34:71:07:50:cb:cf:
85:f2:77:9e:4a:80:23:14:f7:1e:4b:ba:19:9d:b7:
2c:2a:af:7e:2d:d8:a8:53:04:9a:cb:8b:d7:2a:d3:
5f:8f:83:33:90:eb:db:82:7f:d9:f5:2c:fd:19:55:
26:47:1d:ae:42:b2:ad:22:da:cd:35:95:86:0d:68:
d4:08:18:12:f9:e2:95:52:c8:dd:56:18:8c:12:e9:
b7:13:a3:a3:a2:1e:36:a1:dd:6b:7c:8d:d7:69:d4:
90:c0:f8:af:00:d7:20:54:be:07:41:41:47:32:f2:
ac:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3A:F8:D8:FD:C3:51:5B:99:43:0B:8F:E6:60:C3:80:8F:85:45:21
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/Zzr42P3DUVuZQwuP5mDDgI-FRSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.12.0/22
78.142.212.0/22
185.179.184.0/22
185.190.100.0/22
194.49.56.0/22
212.63.112.0/22
Signature Algorithm: sha256WithRSAEncryption
55:13:af:db:3c:9a:31:1b:37:18:eb:48:2c:af:34:01:62:4a:
41:c6:e6:ca:dc:81:38:63:92:0d:25:9e:e4:b5:f9:cc:5f:17:
fc:32:3e:d5:49:cd:d9:9e:76:dd:7d:87:8c:b6:48:00:5b:b5:
c6:b4:a6:56:ce:2a:49:ce:d8:09:bb:32:5e:ae:5b:20:12:e5:
f6:f3:88:2b:92:86:c9:fe:d6:0b:51:fe:ce:d2:5e:eb:b8:6b:
a5:7f:82:bd:3a:a0:b9:22:39:22:64:a9:11:3e:40:a1:98:58:
ce:8e:35:0f:fa:5f:d1:3b:64:fb:84:3a:8f:0c:c1:9d:52:b9:
97:6f:b4:8e:d6:ee:b5:1a:bf:7e:b5:75:73:aa:97:0d:b8:60:
dc:8b:f7:49:6c:ea:b7:30:db:f6:ba:67:55:da:e9:46:58:9d:
08:93:4c:e8:a1:98:1e:3c:a8:48:04:1a:71:c6:bd:8d:cf:69:
a4:b7:1f:e8:c2:96:fb:79:5c:c2:49:2a:70:47:37:f1:c7:7c:
e3:a3:b8:cb:af:8b:e4:56:f1:1f:91:30:1c:6c:b9:73:72:1e:
04:25:a6:15:4b:03:b5:9c:9e:85:c8:8f:35:44:8d:e1:cf:43:
88:a2:71:0f:21:d4:d0:72:47:8e:79:4e:21:60:1c:9a:c7:8a:
b6:7c:cf:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 14:25:56 2023 by rpki-client on console-fra.rpki-client.org