Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/ZKeMxuCva_vvR1w5omFopA_nFcc.roa
File: ZKeMxuCva_vvR1w5omFopA_nFcc.roa (raw, json)
Hash identifier: XrjynQj2ubl8hJpxU0RULSrPG/I1/SRiw1YhiyQLE6E=
Subject key identifier: 64:A7:8C:C6:E0:AF:6B:FB:EF:47:5C:39:A2:61:68:A4:0F:E7:15:C7
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 01856B935D0AE2785E246322DFA03A58CD45
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/ZKeMxuCva_vvR1w5omFopA_nFcc.roa
Signing time: Sun 01 Jan 2023 04:24:57 +0000
ROA not before: Sun 01 Jan 2023 04:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14163
IP address blocks: 213.152.229.0/24 maxlen: 24
213.161.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:5d:0a:e2:78:5e:24:63:22:df:a0:3a:58:cd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 04:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64a78cc6e0af6bfbef475c39a26168a40fe715c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:b1:90:7f:ac:62:fa:56:8e:01:80:d8:b1:
44:79:cd:d9:9f:86:33:af:4a:83:25:c5:6c:79:0e:
05:83:04:03:87:3e:23:bb:26:7a:3d:48:c7:00:2b:
15:20:af:0d:8c:3c:a7:1e:dc:31:e8:21:08:11:89:
f6:3f:12:9d:eb:f2:2f:95:25:40:c3:00:4d:33:1d:
f9:ae:ad:ee:c9:64:ca:3a:60:3e:19:b2:e5:f0:05:
9c:b8:b6:95:ac:e7:47:75:02:89:71:ac:52:5f:c2:
36:6b:aa:49:1c:36:31:52:bc:d9:4d:00:c1:3f:a4:
a1:96:94:9c:ba:cc:72:c2:7d:da:99:4c:e7:6e:ec:
33:96:c4:26:dd:41:3f:b1:19:9c:77:dd:91:1f:b6:
46:2d:e4:7e:c6:2f:8b:26:7d:e6:44:40:56:fa:87:
ed:32:43:5c:bb:e7:5f:10:90:12:aa:76:5b:cb:af:
74:d6:c7:87:07:41:9e:bc:a9:f7:c4:9f:bc:31:f3:
ee:f9:6c:12:0f:79:17:e1:8f:2c:3b:cb:50:74:7f:
34:df:f3:58:ba:0b:c6:05:b5:c3:a9:92:2c:73:20:
2b:f6:45:ef:f6:25:6a:d7:21:f7:68:f2:c9:3f:4b:
bd:32:81:e3:ad:40:eb:13:4b:b0:d4:03:54:84:3d:
2e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A7:8C:C6:E0:AF:6B:FB:EF:47:5C:39:A2:61:68:A4:0F:E7:15:C7
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/ZKeMxuCva_vvR1w5omFopA_nFcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.152.229.0/24
213.161.86.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:21:aa:6d:b1:e0:c8:a4:39:ab:e5:e4:38:78:df:18:b8:28:
96:6c:a1:a3:6b:65:13:14:a6:bb:fc:b8:75:79:f0:e1:ed:fe:
73:70:a6:5a:22:cb:24:e8:50:a7:be:39:9e:70:bb:b3:cb:84:
e0:62:bb:9a:49:57:0e:4e:a8:c6:a5:0a:51:4a:e8:e4:eb:1f:
65:4a:7a:bc:84:35:75:19:63:6a:0e:e7:6f:12:20:76:0d:01:
e3:66:68:97:af:e0:6b:29:99:a3:f3:f0:33:53:46:be:38:f0:
1d:ba:bc:89:91:02:05:b6:a6:94:ed:04:01:1d:9a:de:e3:3f:
f0:8c:4a:fa:19:34:f1:2c:30:7b:21:fd:75:d6:fa:e1:12:4b:
c2:8c:60:75:7c:b1:2d:be:a9:3b:79:76:28:f7:0d:36:41:13:
06:de:fb:0b:26:8a:ba:5d:0f:cf:f3:a8:34:c3:c5:f2:7a:fc:
e8:57:6f:56:2c:de:56:5c:a9:60:12:d5:3e:5c:68:9f:0b:2c:
59:bd:93:cb:52:26:10:17:23:7b:eb:fd:ce:40:eb:b4:01:2a:
53:ba:a0:c9:1c:2f:41:23:c1:d1:17:4b:31:ae:38:2b:bf:08:
1d:72:d3:9a:f1:10:91:8b:2a:6b:f9:ff:10:b4:35:85:e2:ad:
11:b9:4a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:46 2024 by rpki-client on console-fra.rpki-client.org