Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Zh7_nHRb0TkCWz5ZBo8--62jvbQ.roa
File: Zh7_nHRb0TkCWz5ZBo8--62jvbQ.roa (raw, json)
Hash identifier: N4+86KKYjxnfoLJPNKvU+7axIIW4JDswI5B6YGVcIHA=
Subject key identifier: 66:1E:FF:9C:74:5B:D1:39:02:5B:3E:59:06:8F:3E:FB:AD:A3:BD:B4
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 0187FB488FAFA6143AD1DB685BA18B4BC6FF
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Zh7_nHRb0TkCWz5ZBo8--62jvbQ.roa
Signing time: Mon 08 May 2023 12:14:09 +0000
ROA not before: Mon 08 May 2023 12:14:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.141.196.0/24 maxlen: 24
213.139.228.0/24 maxlen: 24
85.209.105.0/24 maxlen: 24
85.209.107.0/24 maxlen: 24
85.209.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fb:48:8f:af:a6:14:3a:d1:db:68:5b:a1:8b:4b:c6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: May 8 12:14:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=661eff9c745bd139025b3e59068f3efbada3bdb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4a:a6:68:be:e5:69:a4:9b:3a:cc:9c:61:41:
39:7c:9a:54:00:a7:e3:f6:14:29:91:44:8a:ba:df:
ae:1d:a8:df:ee:e9:ac:3d:30:b5:ba:cd:dd:41:13:
c2:f6:d5:1a:56:8e:e8:a1:61:92:cd:97:84:28:0f:
cf:b2:26:2b:13:8a:9a:6b:e6:dc:90:02:30:72:fc:
b9:91:15:62:5d:2e:86:3d:66:15:46:e8:96:c9:6c:
d7:20:c2:3e:33:4a:19:8e:1f:08:c9:dd:58:72:14:
7e:a3:6c:a3:94:4f:13:36:2f:bc:80:64:61:30:18:
49:2b:44:88:c4:2d:77:99:52:f2:51:4d:5a:bd:ef:
c7:18:0d:e9:ab:a7:f4:1b:b5:35:c2:94:a3:7a:cf:
cc:f9:ae:6a:60:a5:58:84:4f:47:26:19:48:4e:96:
88:45:45:a7:6f:c9:2e:f1:33:16:4e:c9:e6:08:8a:
bb:98:d5:cf:82:93:4b:9a:ac:70:24:7c:10:7f:d1:
2f:08:89:32:20:82:a2:2d:92:3f:8d:6e:b3:ce:24:
6a:80:fa:c6:55:2b:e3:6e:fa:5c:7b:de:47:25:b4:
2e:2d:bd:34:d4:c4:e1:55:ab:46:fa:d0:76:0a:8a:
28:63:73:f1:9c:06:2a:f3:3a:e3:97:81:d4:ab:ac:
25:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1E:FF:9C:74:5B:D1:39:02:5B:3E:59:06:8F:3E:FB:AD:A3:BD:B4
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Zh7_nHRb0TkCWz5ZBo8--62jvbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.196.0/24
85.209.105.0-85.209.107.255
213.139.228.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:f0:94:ad:48:63:a8:8c:bb:be:dc:bf:4f:4b:e8:11:a3:5a:
9b:a7:c3:f9:fc:e0:79:2d:56:34:80:82:25:25:f0:e8:a5:54:
40:52:da:84:cd:9f:14:31:c9:5f:ef:1f:24:e6:a7:18:3a:de:
99:f9:88:21:98:67:f0:5d:1d:d8:88:81:a0:0c:95:9b:9c:cb:
3e:14:31:c0:6b:22:fc:2f:bf:3a:8e:7b:78:f8:d5:dd:fc:d0:
d8:c6:84:0e:40:12:09:60:d2:ab:02:ed:af:15:95:ce:07:b9:
04:f4:4e:8f:8a:ae:0f:51:e0:c0:0c:ad:e3:fe:fe:b7:af:50:
c8:1d:a5:7b:e6:dd:fe:08:49:d4:cc:0e:04:53:69:cf:25:a3:
a1:ca:b8:d1:22:be:19:bc:7d:0e:8f:3d:82:0b:bc:40:98:38:
18:ac:2d:b3:ef:11:41:fe:cd:11:3b:80:d4:f6:3d:27:c3:11:
23:f4:78:5e:c3:40:20:b4:89:41:f3:cb:ae:10:2b:ce:1d:06:
38:0f:16:47:f2:b9:21:3f:0a:77:f0:03:ff:d5:55:bc:70:5e:
28:db:db:4e:58:a3:27:f5:d5:88:34:3c:4c:9d:0f:e7:29:57:
1a:86:ea:aa:17:ee:b8:15:6b:e5:47:1c:73:00:2f:9a:82:41:
b3:f8:a5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 22:31:01 2023 by rpki-client on console-fra.rpki-client.org