Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/RZyZKz067juCnyTkRlIXusk2gMA.roa
File: RZyZKz067juCnyTkRlIXusk2gMA.roa (raw, json)
Hash identifier: KeOWLceZX7jlsCb3+w6Kbj3Bc4+ybxOjJE3BfS5R0Ck=
Subject key identifier: 45:9C:99:2B:3D:3A:EE:3B:82:9F:24:E4:46:52:17:BA:C9:36:80:C0
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 0185714C3ED43C84CD9CB55B2D2F8A206747
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/RZyZKz067juCnyTkRlIXusk2gMA.roa
Signing time: Mon 02 Jan 2023 07:05:00 +0000
ROA not before: Mon 02 Jan 2023 07:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42354
IP address blocks: 94.16.27.0/24 maxlen: 32
185.228.148.184/29 maxlen: 32
185.228.148.84/32 maxlen: 32
185.228.149.112/28 maxlen: 32
144.208.213.140/32 maxlen: 32
185.228.150.176/29 maxlen: 32
144.208.213.143/32 maxlen: 32
2a00:11c0:62::/48 maxlen: 128
2a00:11c0:3d::/48 maxlen: 48
2a00:11c0:82:359:217:146:20:72/128 maxlen: 128
2a00:11c0:4b::/48 maxlen: 48
2a00:11c0:e:ffff:1::7/128 maxlen: 128
2a00:11c0:e:ffff:1::6/128 maxlen: 128
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:3e:d4:3c:84:cd:9c:b5:5b:2d:2f:8a:20:67:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 2 07:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=459c992b3d3aee3b829f24e4465217bac93680c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:f9:c0:f1:95:00:16:5a:65:24:35:20:e1:
ad:8b:a3:0b:e5:3a:d7:f1:ab:1e:3e:e5:47:58:d9:
7c:3e:0a:09:ad:ec:b7:83:6c:f1:db:ed:24:fb:97:
41:57:a1:6d:b4:19:2f:22:9d:f5:4f:f6:6c:72:14:
21:a4:df:b3:a6:05:d8:a3:79:b7:4d:d4:29:3b:0e:
b0:01:0e:12:6a:6a:bc:b1:20:1f:62:32:58:99:59:
72:38:27:50:f1:3a:2a:f7:c4:e4:11:58:e1:73:8a:
7b:40:b1:ec:39:a5:fb:92:c6:fd:6b:66:96:bd:31:
11:ae:09:88:97:62:ac:0f:b2:49:96:da:18:f9:60:
a6:60:f0:12:c6:6f:6f:1a:f0:58:67:d7:e4:19:84:
f6:a5:c9:8f:e5:76:52:74:12:36:1c:0e:f3:1e:39:
ed:15:53:a0:dd:3a:77:9b:d6:f5:1b:d2:14:c6:20:
c0:48:d0:8d:02:b2:60:7e:a8:a8:19:43:1d:ea:6c:
ac:e8:25:5d:4c:df:ad:4e:e2:7e:8d:76:5e:fa:13:
6a:ef:95:68:75:ca:85:f2:78:58:65:84:5d:19:7d:
cd:25:59:b0:63:26:47:4e:44:4c:d4:24:33:71:dd:
d0:b0:f5:8d:ab:4f:9b:1d:c7:11:ac:60:20:dd:62:
66:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9C:99:2B:3D:3A:EE:3B:82:9F:24:E4:46:52:17:BA:C9:36:80:C0
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/RZyZKz067juCnyTkRlIXusk2gMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.16.27.0/24
144.208.213.140/32
144.208.213.143/32
185.228.148.84/32
185.228.148.184/29
185.228.149.112/28
185.228.150.176/29
IPv6:
2a00:11c0:e:ffff:1:0:0:6/127
2a00:11c0:3d::/48
2a00:11c0:4b::/48
2a00:11c0:62::/48
2a00:11c0:82:359:217:146:20:72/128
Signature Algorithm: sha256WithRSAEncryption
29:54:d3:76:b1:56:a9:40:fa:2d:d4:aa:89:6c:40:c2:00:62:
4b:d8:98:46:8e:b3:dd:c7:a1:cc:27:e4:81:10:d8:3d:cf:e9:
08:e2:ab:c4:6b:1a:2e:c3:84:da:e8:98:b9:5a:50:a1:64:16:
b0:1e:35:d7:cb:46:60:cb:dd:0d:19:08:9a:04:fd:c4:f8:18:
08:66:f1:8b:7d:c0:2f:e2:74:af:83:5f:b0:19:46:05:44:38:
22:84:7a:1a:1a:d5:9b:2c:46:c1:7e:de:f0:89:38:4f:bf:a1:
15:64:f3:11:d3:84:29:ca:9e:c8:2b:d4:c9:ab:e0:d0:08:cb:
56:7c:2d:d1:60:87:11:32:3d:80:18:6d:10:a7:8c:84:06:ff:
73:ca:00:4b:b6:a4:2c:3c:ec:85:04:5b:45:d9:29:2e:4e:5a:
17:00:5a:e1:05:61:a5:59:b1:a6:94:0e:4b:7b:46:df:b5:10:
f2:16:f2:1a:a4:70:43:30:5f:47:3b:4e:e3:ed:6c:f2:3c:bd:
89:55:db:aa:27:5e:7a:41:74:d0:b6:c1:51:cd:1b:cf:54:f9:
56:02:ff:9f:cf:e3:57:64:89:2c:69:4f:2e:a6:6b:43:b0:f8:
0c:23:7c:aa:73:ab:76:1d:ae:7d:d7:99:75:9a:28:51:d1:db:
e7:b1:12:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:19 2023 by rpki-client on console-ams.rpki-client.org