Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9bcb3d-94fa-42cd-9def-4c651075d48b/1/ZHuPyIwq7ZJnPk500Gi55Pnu0vs.roa
File: ZHuPyIwq7ZJnPk500Gi55Pnu0vs.roa (raw, json)
Hash identifier: SxFSrqf+1rPOmVtwX0EhjTQC4c7GT1Syid2ppGvIcbI=
Subject key identifier: 64:7B:8F:C8:8C:2A:ED:92:67:3E:4E:74:D0:68:B9:E4:F9:EE:D2:FB
Certificate issuer: /CN=0701ffb8989389ae28cb332c88dc9d399d98aea3
Certificate serial: 0187709D4839CE0BC79DE4B26BAA5DAB5AB6
Authority key identifier: 07:01:FF:B8:98:93:89:AE:28:CB:33:2C:88:DC:9D:39:9D:98:AE:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwH_uJiTia4oyzMsiNydOZ2YrqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9bcb3d-94fa-42cd-9def-4c651075d48b/1/ZHuPyIwq7ZJnPk500Gi55Pnu0vs.roa
Signing time: Tue 11 Apr 2023 13:59:28 +0000
ROA not before: Tue 11 Apr 2023 13:59:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197653
IP address blocks: 94.185.70.0/23 maxlen: 23
185.118.16.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:9d:48:39:ce:0b:c7:9d:e4:b2:6b:aa:5d:ab:5a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0701ffb8989389ae28cb332c88dc9d399d98aea3
Validity
Not Before: Apr 11 13:59:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=647b8fc88c2aed92673e4e74d068b9e4f9eed2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:c2:44:28:25:6c:a3:65:fe:5a:67:31:8a:
0e:af:8e:7f:ac:48:27:3f:00:58:be:75:cb:82:ee:
06:25:43:c2:fc:d3:30:9f:dd:a5:ca:b9:7c:fb:3f:
9a:25:9b:21:4c:99:bf:15:0d:45:da:72:62:a9:c8:
11:44:c5:76:de:0d:07:94:0b:f8:04:c4:de:c5:77:
8d:9b:e5:fe:bc:b9:e6:17:f1:dd:aa:a6:db:7e:a5:
75:57:0a:16:d9:77:1c:69:c4:f4:f7:ce:12:af:01:
08:32:5d:d5:73:23:e6:82:cf:22:fa:5c:d1:05:ff:
fe:f1:06:b2:c7:32:bf:ba:1d:1a:f1:12:7e:07:7a:
24:47:c6:bf:33:b4:af:9a:47:af:61:e9:c2:9a:5a:
a0:e7:52:bc:fb:f1:f0:59:16:1e:3a:2a:5b:95:60:
81:c2:0a:c6:ef:95:8f:ed:c8:78:aa:17:22:f9:ee:
8f:25:27:a0:c5:e2:39:11:1d:35:af:ff:2a:95:ea:
7e:14:8f:ae:94:90:d7:87:b1:3c:cb:74:08:27:c1:
cc:c3:84:16:c0:f7:c2:71:b9:31:9c:74:a8:53:32:
2a:3c:07:e7:e6:87:41:a7:15:05:ab:8c:fb:64:b1:
23:31:88:32:70:cf:5f:27:e3:94:94:fb:a8:38:ea:
75:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7B:8F:C8:8C:2A:ED:92:67:3E:4E:74:D0:68:B9:E4:F9:EE:D2:FB
X509v3 Authority Key Identifier:
keyid:07:01:FF:B8:98:93:89:AE:28:CB:33:2C:88:DC:9D:39:9D:98:AE:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwH_uJiTia4oyzMsiNydOZ2YrqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcb3d-94fa-42cd-9def-4c651075d48b/1/ZHuPyIwq7ZJnPk500Gi55Pnu0vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcb3d-94fa-42cd-9def-4c651075d48b/1/BwH_uJiTia4oyzMsiNydOZ2YrqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.185.70.0/23
185.118.16.0/23
Signature Algorithm: sha256WithRSAEncryption
43:19:d8:f7:4b:52:4b:17:99:e7:93:86:37:fb:6c:48:77:9a:
53:9d:a4:ba:49:b7:ae:44:47:48:7b:88:4d:5d:a1:5e:53:20:
3b:d2:dd:89:03:c5:d2:3e:33:3e:55:65:4c:4f:2b:5d:a0:99:
bb:59:a7:85:c6:4c:c6:1a:d6:ac:4a:8d:f2:eb:6b:c4:06:4a:
cb:54:c2:bd:3c:ab:0c:96:fa:78:d8:30:8d:aa:7c:1a:e6:35:
c8:e4:8d:64:03:c0:76:78:e8:a8:1b:0d:3b:42:a5:ae:d2:f1:
72:19:3c:e5:7c:19:da:ca:aa:27:42:b7:06:95:d9:ed:ad:fc:
2a:93:9c:8e:41:fc:d2:ea:59:09:27:99:da:ee:29:cc:b1:ae:
cc:5a:4c:9c:f1:c3:c3:7e:67:5c:1f:b8:49:c8:d5:50:62:b3:
32:ac:60:38:90:8d:6e:aa:45:94:46:2a:38:44:4c:9e:f0:ff:
ba:fd:d9:75:e2:63:68:fc:de:61:ee:35:4a:7e:ef:5f:a9:a9:
a0:fb:d6:8b:42:b3:75:14:17:3a:3c:a2:55:18:64:db:7e:21:
0e:38:af:12:2c:b5:48:ce:d1:2b:31:83:11:b2:b2:e6:16:14:
bb:3e:e6:cb:cd:81:ad:64:f3:ae:0e:cb:16:e4:92:7a:6a:6c:
d9:5a:02:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:02 2023 by rpki-client on console-ams.rpki-client.org