Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/ZiwAmHN2u11nBGv3Br6NkbbjhFA.roa
File: ZiwAmHN2u11nBGv3Br6NkbbjhFA.roa (raw, json)
Hash identifier: mijMFGKdv7Uz1OBhKgiCjJZP9+EHKGGBS22A5qhrce8=
Subject key identifier: 66:2C:00:98:73:76:BB:5D:67:04:6B:F7:06:BE:8D:91:B6:E3:84:50
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 018C49020E5FE82DE7882B7E7FA001BF88EC
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/ZiwAmHN2u11nBGv3Br6NkbbjhFA.roa
Signing time: Fri 08 Dec 2023 10:38:40 +0000
ROA not before: Fri 08 Dec 2023 10:38:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.182.168.0/24 maxlen: 24
62.182.169.0/24 maxlen: 24
62.182.170.0/24 maxlen: 24
62.182.171.0/24 maxlen: 24
62.182.174.0/24 maxlen: 24
62.182.173.0/24 maxlen: 24
194.15.153.0/24 maxlen: 24
194.15.154.0/24 maxlen: 24
194.15.155.0/24 maxlen: 24
83.97.96.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:49:02:0e:5f:e8:2d:e7:88:2b:7e:7f:a0:01:bf:88:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Dec 8 10:38:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=662c00987376bb5d67046bf706be8d91b6e38450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:40:65:23:43:be:73:0f:1a:24:28:3c:08:93:
69:b0:3b:e3:f4:36:10:fb:c6:a4:ce:c9:0d:10:a7:
de:e4:ea:ac:db:4d:a3:72:49:3e:d0:fb:55:47:58:
9c:41:b8:8f:a4:28:37:5a:17:08:5e:7c:a4:b7:43:
64:49:dd:e0:3a:de:20:df:97:d1:2c:ba:b9:36:54:
b1:1e:a4:04:53:42:74:87:cb:09:71:e5:97:c4:d9:
69:d4:74:c9:d5:77:f9:8c:16:81:b7:d5:dc:df:f4:
73:2e:ce:61:ff:04:2d:7a:0b:60:a2:ac:4a:08:d0:
0c:3e:d9:03:84:31:d9:dd:68:89:d8:27:c5:3b:0a:
34:1e:83:ec:9c:c3:81:e6:5e:51:75:69:fc:15:8d:
7c:f7:97:ca:45:c6:da:29:39:c4:62:05:3b:2d:79:
56:ae:5e:d8:03:32:ad:c3:ba:73:75:b4:89:fc:9b:
98:df:72:3b:3e:6d:a0:fb:1a:bb:57:d6:7f:31:2e:
5e:e0:b2:ac:3e:79:f0:f9:8e:df:90:5b:46:97:fe:
7f:9a:eb:98:10:36:35:0d:a4:a2:73:a0:18:38:0a:
ba:12:9d:5c:50:c1:14:b5:28:ed:7c:5e:f9:4e:29:
8e:af:ab:3c:1d:cf:cc:0e:5a:85:5d:3d:a9:fc:e1:
0f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2C:00:98:73:76:BB:5D:67:04:6B:F7:06:BE:8D:91:B6:E3:84:50
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/ZiwAmHN2u11nBGv3Br6NkbbjhFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.168.0/22
62.182.173.0-62.182.174.255
83.97.96.0/22
194.15.153.0-194.15.155.255
Signature Algorithm: sha256WithRSAEncryption
21:23:9f:bc:f5:ae:fc:9e:3e:7e:4c:20:7d:b0:16:2e:ac:0c:
6c:6a:ae:4b:8c:df:eb:f8:86:f4:3a:3d:bd:58:d8:34:af:6d:
36:18:cd:8c:e2:46:c0:10:d4:71:48:73:2e:2e:3c:52:0d:9f:
37:e7:be:8a:87:f4:2a:05:3d:3c:32:03:fa:39:a3:d8:8d:36:
91:a7:1e:a0:43:bb:6b:b5:b1:ab:6c:30:b0:bf:9b:78:19:35:
07:4e:19:16:e0:c5:d2:18:33:4b:28:fa:33:d4:a7:74:1a:3e:
2d:bd:7e:be:91:4f:35:ed:2b:3d:ba:3b:aa:2c:e1:dc:38:19:
95:28:60:04:d2:6a:ce:6d:64:6b:b9:a9:69:3a:96:a0:24:cf:
83:d6:0d:c0:23:61:f5:d6:4c:4d:d9:1b:ac:76:e1:c2:59:c8:
55:51:3b:28:fa:3a:73:d6:8a:d7:ee:40:d0:42:0c:dc:32:db:
28:66:9a:b0:16:a9:fb:2e:49:62:31:0b:ed:1a:9b:d8:06:b5:
ed:71:a6:f1:a1:a6:ca:a8:1d:c0:d9:20:3e:f9:de:a6:05:9e:
1d:50:08:c5:92:68:18:3b:c1:0a:fc:5b:35:43:c1:4e:f3:a8:
2a:06:0e:eb:6b:98:d3:27:26:5b:69:66:2a:1e:45:55:63:80:
b0:e7:25:53
-----BEGIN CERTIFICATE-----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Generated at Mon Dec 25 12:14:02 2023 by rpki-client on console-fra.rpki-client.org