Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/ZgerCtUmon81x4RKlcIBytFTRgk.roa
File: ZgerCtUmon81x4RKlcIBytFTRgk.roa (raw, json)
Hash identifier: qYZoORV0A8TEPf4odQBtED4D7KgxqJrEhZ7gwuTASLA=
Subject key identifier: 66:07:AB:0A:D5:26:A2:7F:35:C7:84:4A:95:C2:01:CA:D1:53:46:09
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 01856F9DD54EE813F259CC51B6340D89523E
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/ZgerCtUmon81x4RKlcIBytFTRgk.roa
Signing time: Sun 01 Jan 2023 23:14:52 +0000
ROA not before: Sun 01 Jan 2023 23:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211634
IP address blocks: 85.153.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:d5:4e:e8:13:f2:59:cc:51:b6:34:0d:89:52:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 23:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6607ab0ad526a27f35c7844a95c201cad1534609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:a3:9a:20:5e:ec:7c:0a:af:0d:b6:de:8f:
fb:72:e1:55:e1:bc:c6:be:1a:fd:36:4e:c1:5e:cf:
8e:1f:e0:65:b5:04:8d:c1:0c:7a:ad:b6:5f:5e:d0:
14:83:60:11:75:7d:04:98:74:c6:6d:25:9e:5b:59:
be:07:a7:cd:b5:ee:23:a9:4a:03:d9:b2:45:92:d1:
56:34:a3:be:37:c2:c1:0e:b6:b7:46:fe:e6:e6:9a:
49:a9:92:21:d8:2b:d0:6b:51:6c:66:26:91:3d:31:
96:f7:61:80:15:7b:3c:a5:7a:40:ca:a4:d9:ce:d9:
bd:0f:72:be:ac:a3:82:e5:db:be:d8:7d:b7:90:ab:
7c:ca:c8:8c:ec:dd:86:dd:50:6e:d1:44:5a:54:88:
24:1e:7a:df:db:04:26:f6:33:ee:82:29:81:16:e7:
44:1c:71:fd:bd:96:c2:0c:1c:18:85:38:d6:11:d3:
f3:cd:64:38:63:77:29:c6:b0:50:db:4f:b5:fe:ce:
54:99:18:93:bc:2a:1f:02:6b:1a:7b:2a:c8:05:d4:
2d:a0:82:2f:40:6c:36:35:29:e3:09:4c:e4:76:54:
e7:fb:34:2c:1e:0d:fa:e1:3e:e3:5c:e7:e3:c9:c8:
d7:b7:84:f0:a6:88:a7:e4:68:27:d1:b8:34:26:ec:
90:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:07:AB:0A:D5:26:A2:7F:35:C7:84:4A:95:C2:01:CA:D1:53:46:09
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/ZgerCtUmon81x4RKlcIBytFTRgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.159.0/24
Signature Algorithm: sha256WithRSAEncryption
38:04:ec:a3:12:de:f6:41:5a:b7:57:13:b2:83:09:34:8e:d3:
e1:be:71:f9:1e:4a:61:6b:9e:a6:01:70:1a:1c:18:13:3c:6f:
d9:cb:7c:dc:eb:8b:c6:52:bc:ec:22:b1:6e:ec:5a:34:e6:99:
68:f2:ab:bb:df:53:04:d4:45:29:d8:be:90:1f:d3:8f:97:60:
6f:0e:93:69:45:a9:ed:43:12:a5:ea:78:2f:64:ce:7f:99:5b:
16:46:00:9e:04:12:d6:88:1f:97:23:55:05:d1:b7:83:73:f0:
b6:6d:f0:66:d0:21:63:f5:48:ad:4f:cd:31:95:9b:c2:5e:45:
d0:a0:cb:68:b3:fd:f0:56:3e:02:fa:7f:9a:58:08:e3:73:69:
7a:03:f1:f8:d0:75:11:01:5d:ed:e4:42:88:dc:32:a0:ba:2c:
f4:95:52:9d:7f:b2:2b:5c:cb:f3:0d:e4:c2:22:63:5a:bd:b3:
e7:ea:39:3c:8d:6a:cf:f9:17:5d:6c:02:39:dd:f0:6e:e2:4b:
7e:47:ce:51:b1:71:ba:0f:e1:6b:46:93:d7:cd:a7:36:d6:e1:
05:96:02:a5:9f:77:84:b4:ba:07:9a:b0:cf:dd:68:1a:14:68:
c5:0a:7d:e4:dd:ba:3c:0d:33:10:79:7a:65:da:a6:3e:3d:5c:
ce:5d:ac:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:22 2024 by rpki-client on console-ams.rpki-client.org