Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zyiw_bK1cxuUU1e3ZmcJIKQ4ETQ.roa
File: zyiw_bK1cxuUU1e3ZmcJIKQ4ETQ.roa (raw, json)
Hash identifier: SkjdEOe8Iv+b8lMXcWxjyZHuiHpFM6MLnTQH49yKTJc=
Subject key identifier: CF:28:B0:FD:B2:B5:73:1B:94:53:57:B7:66:67:09:20:A4:38:11:34
Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial: 0187C18E9B6C9B211FABB33D86B25E67A62A
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zyiw_bK1cxuUU1e3ZmcJIKQ4ETQ.roa
Signing time: Thu 27 Apr 2023 07:12:41 +0000
ROA not before: Thu 27 Apr 2023 07:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48291
IP address blocks: 185.38.138.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c1:8e:9b:6c:9b:21:1f:ab:b3:3d:86:b2:5e:67:a6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
Validity
Not Before: Apr 27 07:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf28b0fdb2b5731b945357b766670920a4381134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4f:72:12:04:cc:5a:c3:09:50:a9:a9:81:43:
b7:35:ac:c8:2e:b4:ac:1f:2f:4f:83:17:17:a7:37:
1d:aa:b3:8d:56:86:12:36:cd:2f:11:74:1a:70:6a:
73:f8:54:53:0c:4b:55:23:3c:b7:18:d2:e5:e4:1c:
ba:15:a6:c1:3f:86:f6:98:ef:3a:ad:13:c9:a4:81:
1e:f7:22:25:9f:81:dc:6f:11:53:c8:c9:c6:e1:17:
32:5e:da:cc:74:a6:a3:34:a5:0d:3b:34:78:6c:fc:
1b:db:9d:aa:08:83:5a:2b:56:de:d9:95:5f:79:ba:
11:7f:bc:e7:a1:a0:3b:d1:86:27:1e:c1:39:21:ba:
d8:08:69:e2:6f:88:e7:c4:f9:ed:5e:32:c7:7b:07:
be:20:db:92:57:ad:8d:5f:d7:00:33:27:50:59:ef:
23:d3:4d:a3:50:95:3e:7a:88:19:9a:30:28:45:b6:
38:a4:88:33:9a:dd:32:36:1b:d3:06:09:51:04:9a:
1a:0c:d0:78:f1:d3:d7:67:e6:b1:62:e7:6e:e6:b5:
51:c0:ba:ad:37:07:8c:3a:e8:f3:35:bf:bd:67:ce:
a4:10:05:3f:00:b2:d5:d2:a6:47:5d:58:4e:56:1a:
d1:98:7d:57:26:f4:d5:ae:16:2b:d4:d2:d8:24:12:
62:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:28:B0:FD:B2:B5:73:1B:94:53:57:B7:66:67:09:20:A4:38:11:34
X509v3 Authority Key Identifier:
keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zyiw_bK1cxuUU1e3ZmcJIKQ4ETQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.138.0/23
Signature Algorithm: sha256WithRSAEncryption
18:02:ac:76:d9:61:39:b1:cd:ad:e9:c0:8a:fc:71:79:42:09:
f0:b8:ca:67:65:5a:21:e1:5b:b5:83:85:30:da:30:0f:6a:27:
b3:53:82:1f:6d:7b:59:a6:aa:1c:80:fc:52:81:51:53:0f:01:
b7:68:5e:e2:bf:72:80:bf:9d:ed:76:00:e7:f3:02:73:94:44:
f3:84:dc:37:8c:a0:9b:09:9f:da:69:17:37:4f:f9:bc:ff:f6:
9b:56:54:12:c6:34:0c:3e:9c:a5:ad:32:0a:44:c6:ff:da:18:
b4:fa:df:8f:a8:5d:65:26:0a:a5:70:0a:4c:fd:08:7b:66:92:
08:57:53:13:56:24:cf:c1:fb:c3:dc:c6:db:99:8b:cb:9f:4b:
26:49:14:4b:00:2c:6d:a4:cd:1e:db:ef:47:11:a1:bf:7f:9e:
1e:df:87:25:91:da:19:1e:1b:3e:91:01:08:db:98:7d:46:0e:
4e:84:b9:f5:79:37:0d:84:d8:74:e4:0c:b8:1a:6e:61:5e:31:
7a:46:fe:1e:7f:1a:bd:fe:e4:92:b3:c2:45:70:df:ec:bc:50:
84:97:23:46:d1:1a:46:1d:2c:fa:2b:d0:e0:b0:0f:1b:80:1a:
6c:17:ac:f4:fc:8f:a9:64:2d:e6:77:d2:e8:24:4f:6a:b6:b9:
c4:24:0b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:16 2024 by rpki-client on console-fra.rpki-client.org