Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/z4z_U5edXe0cU02xGL5TA4djQqg.roa
File: z4z_U5edXe0cU02xGL5TA4djQqg.roa (raw, json)
Hash identifier: 51gZ9UeV4lPPglx326u1UJnQgdbSLbuUEgExbpCj2HM=
Subject key identifier: CF:8C:FF:53:97:9D:5D:ED:1C:53:4D:B1:18:BE:53:03:87:63:42:A8
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 01856D41A07B92A9A15DF26CF129BFA8C932
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/z4z_U5edXe0cU02xGL5TA4djQqg.roa
Signing time: Sun 01 Jan 2023 12:14:55 +0000
ROA not before: Sun 01 Jan 2023 12:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39392
IP address blocks: 185.203.84.0/24 maxlen: 24
185.203.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:a0:7b:92:a9:a1:5d:f2:6c:f1:29:bf:a8:c9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Jan 1 12:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf8cff53979d5ded1c534db118be5303876342a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ea:27:27:0e:85:4f:3b:41:2e:06:6e:99:d1:
7f:2e:85:89:0c:e3:74:48:13:f4:7d:46:e9:7a:16:
14:c3:71:22:3a:bd:d4:b2:40:10:02:bf:f8:69:1e:
c5:61:10:77:65:a7:fd:1e:96:9b:cb:d8:3c:a7:24:
88:d1:fc:6e:06:2d:ef:b6:74:dc:0a:71:01:52:c9:
91:96:5d:61:ec:9a:9a:a3:70:56:3e:33:87:5b:c1:
20:ed:25:a6:7b:d7:01:18:af:55:12:28:5f:e5:04:
3a:80:50:6f:d2:69:0f:69:2e:1d:e8:01:09:69:54:
d6:a4:ac:9e:cf:63:3e:6c:0c:b9:ec:64:34:6a:da:
da:d9:61:fe:f1:80:4b:53:bc:41:90:80:4a:9f:58:
ce:df:01:6d:81:42:bf:e8:17:c0:98:4b:76:26:4d:
67:1b:ee:eb:3f:75:d8:42:94:cf:b5:8f:14:78:57:
48:0b:e3:64:31:d6:75:85:d4:3a:a2:88:2f:06:e8:
3b:c4:2d:9d:b2:9c:fb:67:a2:62:36:92:42:32:ef:
e5:b6:e1:7a:9b:67:57:27:33:60:0b:f1:a8:f1:5b:
fc:73:38:4f:f8:71:9d:16:88:2e:cf:c7:b8:e0:55:
9a:d6:96:7c:fd:66:46:d1:85:91:46:6b:31:f9:47:
65:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8C:FF:53:97:9D:5D:ED:1C:53:4D:B1:18:BE:53:03:87:63:42:A8
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/z4z_U5edXe0cU02xGL5TA4djQqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.84.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:a7:54:2e:85:81:95:67:8f:a2:95:0a:34:c0:3b:ff:52:f9:
a8:1a:40:43:7b:b6:27:17:fc:1d:e9:61:73:83:d3:1f:38:e8:
ea:3d:12:f4:3f:56:4e:45:23:d4:63:6c:86:f9:9d:c7:51:9a:
b5:a2:f0:59:7a:60:72:a2:bb:03:fd:5f:14:1e:e1:f8:e2:5d:
63:ea:54:72:0b:d7:2d:bb:ba:49:46:e2:92:83:6d:47:9b:3c:
a8:40:19:56:49:c7:6b:c4:96:61:c3:09:75:4a:44:9a:fa:ab:
c9:3a:d3:c7:9d:43:b1:80:ce:2d:6c:79:bf:62:24:e7:11:77:
89:f1:a8:c0:fb:6e:f7:a1:b1:83:93:17:60:b3:c6:19:0e:d6:
db:8b:60:20:3d:11:4b:c3:f1:8c:20:00:16:c2:92:ff:32:db:
a2:bd:81:0f:ec:41:ed:3f:ed:07:e2:b4:2d:98:8f:74:87:fe:
f1:67:a6:9a:71:22:ef:9a:42:68:18:b3:b2:31:d0:de:03:b4:
fc:a0:44:4b:fa:82:f9:39:6c:22:5d:72:72:49:e1:ad:a5:5f:
c2:fa:41:a9:4f:80:79:20:5a:84:07:29:84:0e:f3:71:9c:2a:
55:2d:ec:b5:43:72:b5:aa:ed:ec:92:0d:d5:d6:57:54:4e:2a:
4b:ac:13:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:21 2024 by rpki-client on console-ams.rpki-client.org