Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/Zt-TGaA1dbW7FKqeLnkhi_w7Z44.roa
File: Zt-TGaA1dbW7FKqeLnkhi_w7Z44.roa (raw, json)
Hash identifier: cGpwR7fO5IO6B3QpSD6drVhD4YVANXvEPBg3+JaJy6s=
Subject key identifier: 66:DF:93:19:A0:35:75:B5:BB:14:AA:9E:2E:79:21:8B:FC:3B:67:8E
Certificate issuer: /CN=ea1c951d61b87da19439784d23667a89cb3290a4
Certificate serial: 01856F549218A3012F71C962470AC9BE03DD
Authority key identifier: EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/Zt-TGaA1dbW7FKqeLnkhi_w7Z44.roa
Signing time: Sun 01 Jan 2023 21:54:51 +0000
ROA not before: Sun 01 Jan 2023 21:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 185.113.239.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:92:18:a3:01:2f:71:c9:62:47:0a:c9:be:03:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea1c951d61b87da19439784d23667a89cb3290a4
Validity
Not Before: Jan 1 21:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66df9319a03575b5bb14aa9e2e79218bfc3b678e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:4f:2e:69:81:5f:68:3f:b2:aa:e8:3e:85:
48:c7:88:2c:d4:74:8e:12:6b:61:66:47:fb:87:72:
f5:7f:81:92:15:d8:3c:fe:8b:44:f1:63:a1:10:90:
30:5d:f2:46:ce:ce:82:d2:79:28:ca:f1:c1:1d:dd:
c3:a4:21:3f:e3:71:c0:5a:67:3a:bc:61:50:f8:f5:
91:6a:39:fd:7a:be:2c:f5:53:ae:ad:c7:42:ed:18:
30:7a:c5:ab:f9:7c:0c:bd:5a:43:62:84:97:a3:40:
8f:10:7b:48:5c:7f:60:d1:4e:68:a9:87:2d:e1:4f:
c4:11:ea:91:ab:b9:33:58:9b:79:a5:b1:87:26:4a:
a3:8c:64:78:1e:ba:07:5a:94:4b:00:96:e3:40:89:
1e:fd:43:59:d4:a4:12:5f:e7:65:2d:d5:7b:91:e1:
5a:6b:d9:22:02:ed:b8:19:89:55:cf:2b:57:7e:59:
f5:b6:25:3c:b5:de:31:2e:34:ff:e6:83:7c:82:cf:
b8:a9:28:9d:a5:ad:e8:52:12:db:cc:02:d7:c5:cf:
5a:3e:dd:56:db:bc:30:e0:13:9a:1d:88:8a:29:3a:
04:76:5f:93:2c:39:c7:e2:a4:91:38:ad:41:53:bb:
f1:7b:93:ad:2a:14:07:86:ec:fd:e7:41:7e:e5:81:
d4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DF:93:19:A0:35:75:B5:BB:14:AA:9E:2E:79:21:8B:FC:3B:67:8E
X509v3 Authority Key Identifier:
keyid:EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/Zt-TGaA1dbW7FKqeLnkhi_w7Z44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.239.0/24
Signature Algorithm: sha256WithRSAEncryption
78:da:a4:0d:04:e8:d9:b0:65:3f:75:fe:8b:02:5b:5a:3e:e4:
2a:e3:6f:ef:06:e1:59:3a:1c:6e:d7:9e:df:32:03:ef:88:aa:
ba:1c:75:5c:95:47:7a:3b:ff:a9:d1:6c:eb:72:db:e0:f3:65:
96:50:63:7b:d3:e7:9f:c9:16:5f:73:f5:65:e9:6c:48:4b:0a:
e4:2f:df:e7:51:0e:99:89:8e:68:62:67:66:3c:fe:03:19:37:
b5:f9:76:aa:dd:c9:c1:ef:58:fb:64:6a:0e:f5:e3:bf:30:82:
33:26:5e:98:c9:df:9f:19:f6:94:f2:b6:a9:36:f7:ee:28:a9:
37:5b:0c:3a:6a:b6:98:60:e1:fd:fc:2a:ad:98:80:7a:2d:d8:
bb:a4:e9:ed:1e:56:b6:07:9c:c6:4c:cd:af:28:68:01:f4:ca:
12:c0:24:b3:83:5e:d7:ef:1b:89:54:76:f7:dc:20:01:08:53:
9a:11:6d:fe:2b:66:82:85:5c:8a:a6:2a:79:d2:19:19:8b:e2:
e6:61:47:7e:17:2c:e9:00:73:9a:04:c1:1b:3f:66:a5:b8:40:
bb:35:03:3e:b5:58:91:bd:91:f9:8c:06:59:da:4d:1e:cd:a9:
7f:40:96:05:21:07:ed:3f:e8:d2:78:1e:b0:06:78:32:83:23:
a1:c4:06:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:57 2024 by rpki-client on console-fra.rpki-client.org