Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/zJZrNYi1BDrJcJAiCHixDOuFWuo.roa
File: zJZrNYi1BDrJcJAiCHixDOuFWuo.roa (raw, json)
Hash identifier: MWe7vCMylZIeR7MX/O83lZOZGXcmDuRp1ZPlO5G418E=
Subject key identifier: CC:96:6B:35:88:B5:04:3A:C9:70:90:22:08:78:B1:0C:EB:85:5A:EA
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 01856D41A0FE8B1A575B6CD422D42197015E
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/zJZrNYi1BDrJcJAiCHixDOuFWuo.roa
Signing time: Sun 01 Jan 2023 12:14:55 +0000
ROA not before: Sun 01 Jan 2023 12:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 185.203.86.0/24 maxlen: 24
185.203.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:a0:fe:8b:1a:57:5b:6c:d4:22:d4:21:97:01:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Jan 1 12:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc966b3588b5043ac97090220878b10ceb855aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:2d:61:80:a1:b6:54:9f:d0:0e:ec:cb:3c:
43:a9:10:06:b7:80:ae:5e:2b:0c:fa:76:2a:6e:eb:
24:bc:01:30:c4:00:42:08:fd:94:71:8d:7b:b3:2b:
37:5b:ed:fa:7b:f2:4d:8e:cb:6d:f1:2e:0d:4a:67:
14:4c:be:d0:59:1e:a9:01:ab:35:7d:aa:87:e5:04:
60:2d:66:96:de:1e:25:84:95:b4:17:f9:18:be:e2:
90:5c:e3:e3:41:7c:30:0d:d1:0b:96:f1:6c:de:5a:
6a:57:53:85:9e:f2:da:8c:e5:b7:6e:d0:88:4f:51:
38:57:db:9b:fe:e8:0e:65:ae:46:d7:43:84:9e:99:
eb:4d:63:cd:c2:a8:8d:78:f1:42:fd:ae:84:b1:b2:
5e:5c:2b:38:43:54:c4:e0:28:50:68:2c:cb:4c:9b:
d1:c6:a4:e2:53:c8:fb:fd:3f:9e:ff:2c:2b:bd:0f:
9b:cb:88:ec:00:83:28:08:78:cf:93:2a:97:44:0f:
28:f4:ff:9b:c6:ff:ec:df:60:06:5c:6e:ee:4e:a9:
ac:03:ad:a9:68:49:62:57:96:51:8f:eb:b7:71:8e:
9e:c3:c9:3d:c2:2f:73:d0:cf:b4:a0:c4:23:89:0f:
a2:1e:da:16:ca:10:70:a0:fc:71:37:e1:05:50:5b:
a0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:96:6B:35:88:B5:04:3A:C9:70:90:22:08:78:B1:0C:EB:85:5A:EA
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/zJZrNYi1BDrJcJAiCHixDOuFWuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.86.0/23
Signature Algorithm: sha256WithRSAEncryption
63:5b:e3:51:54:ae:9b:24:3d:19:ed:09:1b:51:de:59:ef:ca:
74:6f:c0:d0:9d:8a:07:e2:52:33:f4:17:dd:be:ef:44:d9:54:
c0:06:1c:83:4e:94:69:ca:27:d4:5f:ff:b9:40:f3:c5:5e:c7:
6b:e5:63:84:a3:d4:43:ac:93:60:40:9f:f7:3e:48:74:15:ac:
65:e0:d9:3b:56:82:f0:81:2c:ae:c4:31:1a:43:4c:30:23:63:
b0:46:0c:29:dd:b1:c1:ad:b4:4f:6c:8d:51:12:46:d3:d4:7f:
4f:ea:1c:75:73:94:8f:6a:40:1a:ca:0e:8d:5d:a4:cf:d4:50:
44:42:5d:0e:45:e3:95:59:cc:9c:d1:11:b2:26:89:dd:04:fb:
04:83:24:03:5c:cc:c7:7a:18:56:5f:c9:1f:a6:32:2f:ce:5f:
3e:95:9a:38:54:85:76:4a:ed:65:59:16:48:ec:a5:b7:f5:19:
88:9c:cc:8b:81:f5:a2:86:39:fd:ba:d1:97:37:ee:07:90:37:
e7:9d:55:4b:92:c5:cd:33:e7:c5:ec:09:22:40:9c:ea:87:b5:
39:76:c5:71:94:08:48:2b:23:77:19:1e:17:fd:e9:26:1b:24:
33:fa:71:99:b9:4d:17:cd:7b:bd:fc:cc:dd:df:42:6c:30:61:
ef:d8:06:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:45 2024 by rpki-client on console-ams.rpki-client.org