Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/Zfe6rWuCZoiJ8OEk2gBxLB-f2qs.roa
File: Zfe6rWuCZoiJ8OEk2gBxLB-f2qs.roa (raw, json)
Hash identifier: PbY9UGFZnZgxOxSVCBNkhyX0aR3JjrK5fV4E/7gmmdQ=
Subject key identifier: 65:F7:BA:AD:6B:82:66:88:89:F0:E1:24:DA:00:71:2C:1F:9F:DA:AB
Certificate issuer: /CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Certificate serial: 018756D78D136D884D7518C9BE1CB89286E2
Authority key identifier: 6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/Zfe6rWuCZoiJ8OEk2gBxLB-f2qs.roa
Signing time: Thu 06 Apr 2023 13:52:59 +0000
ROA not before: Thu 06 Apr 2023 13:52:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41652
IP address blocks: 185.212.225.0/24 maxlen: 24
185.212.226.0/24 maxlen: 24
185.212.224.0/22 maxlen: 22
185.212.224.0/24 maxlen: 24
185.212.227.0/24 maxlen: 24
2a0b:7cc0:1::/48 maxlen: 48
2a0b:7cc0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:d7:8d:13:6d:88:4d:75:18:c9:be:1c:b8:92:86:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Validity
Not Before: Apr 6 13:52:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65f7baad6b82668889f0e124da00712c1f9fdaab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:e9:9b:7d:72:5b:57:c1:ca:12:3f:b6:60:
02:f1:ad:09:0b:67:19:83:4b:51:fc:02:d0:ba:11:
47:07:42:08:09:20:0b:96:46:b0:42:95:01:27:a9:
72:21:56:33:ea:9e:a0:2d:03:98:64:e1:3a:d9:39:
73:92:c7:d5:40:24:f1:78:93:00:15:b0:5d:db:48:
ba:96:db:f5:5b:0f:e0:f9:9f:40:2e:f4:21:db:86:
f8:d7:c7:44:1d:34:38:d5:a6:00:c5:30:2a:17:bb:
9b:14:fd:dc:36:ab:03:fc:9d:3c:f1:3e:0a:df:63:
3d:bf:6a:cc:90:bd:b9:39:ba:0a:fa:8d:77:44:40:
99:ae:af:ed:2a:9c:4a:80:40:cc:28:c1:f8:8e:e0:
61:7b:cb:0f:24:07:68:e5:23:ad:ee:81:40:8b:83:
35:e5:3f:54:7d:c5:45:38:c1:cd:20:1f:7e:90:63:
62:37:0f:72:42:46:22:36:5b:cb:11:b8:4f:10:c6:
4a:bc:ed:15:d5:04:6a:3e:ed:61:24:70:ab:3d:79:
53:70:84:62:39:05:4b:f6:cc:15:b8:8e:5c:c3:96:
10:f4:fa:39:5f:e4:b8:39:31:87:7f:22:f7:93:61:
58:cd:67:7c:ac:44:38:e3:90:13:df:d3:11:ed:1c:
5f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F7:BA:AD:6B:82:66:88:89:F0:E1:24:DA:00:71:2C:1F:9F:DA:AB
X509v3 Authority Key Identifier:
keyid:6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/Zfe6rWuCZoiJ8OEk2gBxLB-f2qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.224.0/22
IPv6:
2a0b:7cc0::/29
Signature Algorithm: sha256WithRSAEncryption
30:17:9c:80:86:b2:74:c4:b6:54:d5:b1:6a:25:2a:9d:a9:a8:
92:71:7d:d3:0f:03:51:4e:56:1f:05:6e:78:d6:f5:6f:3f:37:
70:3d:21:d8:6f:98:80:4b:b6:0a:c6:4e:76:36:d9:59:60:0a:
24:d4:9f:29:4b:64:39:96:ec:50:e7:63:00:44:af:53:62:36:
1a:35:97:45:f1:35:8c:03:07:b0:5e:48:29:a4:d5:01:0a:8d:
a0:3c:49:9f:4e:9d:3d:03:00:0e:73:f8:25:0c:78:dd:70:ad:
25:fa:df:06:8b:29:d9:3f:25:a6:39:3a:94:50:d6:f0:0f:16:
cf:54:74:8a:00:01:b0:2c:9f:a1:bf:ca:9f:f3:c8:36:31:16:
b0:df:6d:ea:01:d4:1c:b7:4e:24:5f:e7:82:62:48:bc:80:f4:
d0:84:48:71:0d:3b:c0:64:ab:e6:ff:5d:e9:c5:69:e3:8a:ce:
75:fa:67:ef:b6:2d:1c:e6:85:e8:aa:ae:3b:cd:44:d4:4d:3e:
5c:61:3a:7d:c2:34:7d:fe:7f:55:a2:c3:c6:4b:0c:be:97:a1:
b6:25:ed:72:f8:d3:9c:bb:5d:94:e6:d6:e3:f8:dc:78:84:d1:
19:58:6d:d6:c0:85:a2:98:7d:4a:00:60:53:14:90:5f:4d:6a:
aa:2a:80:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:24 2024 by rpki-client on console-fra.rpki-client.org