Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/zIAKc6cWdOa5B7zjtkFkca6csd0.roa
File: zIAKc6cWdOa5B7zjtkFkca6csd0.roa (raw, json)
Hash identifier: 3LCQngiD8ow6mMt8OTXVBaD3DRWjQgXm9J/QpQgzmnE=
Subject key identifier: CC:80:0A:73:A7:16:74:E6:B9:07:BC:E3:B6:41:64:71:AE:9C:B1:DD
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0189FE22DBF53D58E0385CB89C008531424A
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/zIAKc6cWdOa5B7zjtkFkca6csd0.roa
Signing time: Wed 16 Aug 2023 11:37:24 +0000
ROA not before: Wed 16 Aug 2023 11:37:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.182.170.0/24 maxlen: 24
194.15.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fe:22:db:f5:3d:58:e0:38:5c:b8:9c:00:85:31:42:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Aug 16 11:37:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc800a73a71674e6b907bce3b6416471ae9cb1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:cd:d8:39:f8:f5:73:3a:ec:a1:4b:8b:3a:
65:3a:53:74:5e:37:59:90:ca:b0:bf:19:aa:b3:fd:
50:31:41:5e:a8:3e:ee:f4:4d:6e:b6:b6:1a:a4:66:
27:31:3c:20:ca:aa:46:49:25:67:b1:e1:21:ab:2b:
6e:78:27:88:9d:84:22:24:f7:e3:78:9f:ab:27:be:
46:16:6c:e8:39:ff:22:02:1c:9f:c6:52:c8:cb:f8:
8e:6a:93:43:f5:7a:92:a4:b6:9a:a9:af:47:0e:0a:
f8:3c:77:c3:bb:ac:80:9c:03:fc:e5:24:2a:07:ba:
cf:3c:cb:3b:60:b2:0a:9f:04:1d:18:a6:7d:0c:0b:
77:2b:97:0d:90:f3:6a:da:d5:f8:82:0d:f3:53:39:
61:d6:cd:8a:5c:79:c9:18:9e:f7:29:b1:bc:7e:60:
d1:65:6f:29:5a:42:db:32:9d:d3:74:65:0f:b0:c4:
87:1b:03:d1:0b:a1:57:44:16:e9:a1:a6:21:8f:76:
06:93:0e:12:62:17:14:2d:25:25:3c:82:6f:e3:b6:
5c:63:02:6f:00:53:ce:c3:61:f8:66:3e:13:e4:cb:
e9:dc:01:33:45:bb:81:bc:00:4b:9e:31:49:70:c5:
2e:5f:02:b8:1e:82:c2:ee:47:99:40:3c:63:46:01:
f2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:80:0A:73:A7:16:74:E6:B9:07:BC:E3:B6:41:64:71:AE:9C:B1:DD
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/zIAKc6cWdOa5B7zjtkFkca6csd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.170.0/24
194.15.153.0/24
Signature Algorithm: sha256WithRSAEncryption
67:9a:46:cf:3d:1d:4f:35:91:86:ba:4c:64:62:b6:30:b0:19:
2d:a5:88:a7:ea:15:00:d7:14:4a:80:c7:44:e2:2c:f5:48:7a:
2e:87:9c:e4:6d:bd:b6:c3:6a:64:f8:50:88:db:06:a9:df:c5:
98:9a:c5:3f:4e:86:b5:ed:86:45:85:05:d7:3a:44:cd:c4:92:
ad:76:34:c7:82:1f:72:6e:14:d6:eb:41:9f:ad:c1:7b:e6:85:
49:bc:8b:ff:8c:4d:8b:23:bf:09:bf:f7:30:92:56:9d:28:9a:
08:ca:04:e6:56:39:30:ab:6a:79:91:26:f6:d1:02:d7:bb:ea:
d0:9f:79:79:fc:b8:f8:12:3e:d0:de:99:04:3c:98:fb:34:6c:
a5:68:95:34:53:09:cb:0e:37:e5:77:fa:8b:c1:0c:f4:2c:74:
22:21:78:c2:0d:25:2f:2c:5f:94:c7:31:31:ae:c4:98:a6:b8:
3f:38:74:d3:4a:26:47:cb:c8:dc:b6:17:63:37:06:38:39:49:
9e:b0:58:61:48:03:3a:c2:07:48:68:c8:8d:a6:94:d1:c5:dd:
d5:6b:fd:cd:95:1f:5c:3f:dc:d3:2b:05:a4:72:16:00:06:49:
e7:37:76:c0:fe:32:e0:64:8e:d0:0e:2a:5d:99:01:6e:13:6a:
a1:35:0b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 07:06:00 2023 by rpki-client on console-ams.rpki-client.org