Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/zgTwcGb7pN2k2ssm7C_7-cN-VuE.roa
File: zgTwcGb7pN2k2ssm7C_7-cN-VuE.roa (raw, json)
Hash identifier: yqsQgh2lYlMaJMWDfDxG32xiRxSdx31C021eq6MJQaI=
Subject key identifier: CE:04:F0:70:66:FB:A4:DD:A4:DA:CB:26:EC:2F:FB:F9:C3:7E:56:E1
Certificate issuer: /CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Certificate serial: 018964C05F880DED640158A436E152669816
Authority key identifier: 9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/zgTwcGb7pN2k2ssm7C_7-cN-VuE.roa
Signing time: Mon 17 Jul 2023 16:47:56 +0000
ROA not before: Mon 17 Jul 2023 16:47:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 185.207.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:5f:88:0d:ed:64:01:58:a4:36:e1:52:66:98:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Validity
Not Before: Jul 17 16:47:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce04f07066fba4dda4dacb26ec2ffbf9c37e56e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d4:ee:78:4f:71:3a:69:76:03:9a:7d:79:ac:
01:df:77:17:3e:68:9b:10:02:6b:0b:0e:a0:7d:51:
ea:1d:20:bd:35:b9:af:4a:c0:2c:a5:72:ab:f6:d8:
a2:6e:fb:9d:95:67:45:eb:ab:35:9b:92:53:10:9b:
d9:4c:c9:73:31:c9:e6:88:8c:e6:2d:19:ab:37:16:
1f:6b:51:3f:25:5c:28:27:97:cb:fa:c8:96:53:2d:
de:f4:af:02:b4:d8:cc:31:67:13:d5:e5:8a:ab:63:
ff:16:a9:dc:d3:17:e6:ac:74:2f:75:e2:99:2d:99:
56:01:50:cc:12:9f:3e:81:f2:d9:3f:c0:cd:af:cb:
de:9a:bd:fc:8f:23:c0:07:37:b4:a5:14:85:60:66:
a9:05:05:32:58:97:44:05:92:02:79:73:68:fb:b4:
72:a2:9b:64:4d:3a:98:78:a7:53:02:18:53:c3:55:
e7:58:f3:c9:29:16:d0:76:05:80:dc:b8:fa:1b:8d:
48:7a:20:30:d2:70:ad:09:93:e9:91:2d:aa:c0:07:
0a:60:ee:09:ec:0b:e3:5c:de:89:9d:6d:eb:7c:53:
fb:24:7e:e7:cd:21:95:00:ad:45:f3:20:ef:0b:40:
ac:e5:a8:70:3e:01:14:e6:98:2d:52:34:6b:cd:55:
8e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:04:F0:70:66:FB:A4:DD:A4:DA:CB:26:EC:2F:FB:F9:C3:7E:56:E1
X509v3 Authority Key Identifier:
keyid:9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/zgTwcGb7pN2k2ssm7C_7-cN-VuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.213.0/24
Signature Algorithm: sha256WithRSAEncryption
66:60:f4:57:3d:e0:bc:95:b4:85:d8:61:35:94:84:34:45:47:
a5:a4:3c:d7:77:2c:c3:7d:91:0d:61:35:0d:84:64:26:89:9c:
c5:44:3f:b4:7c:9b:50:5c:06:2a:b4:35:61:0d:70:c9:b0:33:
d3:fe:0d:4f:09:f8:2b:5c:0c:2f:3b:d4:af:da:79:c9:76:4b:
b2:23:f8:9c:2f:d5:db:ef:10:0c:57:1e:c9:69:f8:33:1c:f6:
c8:27:8e:16:35:77:90:d3:3b:00:75:d2:e7:f1:0b:2d:f3:1d:
c9:13:e7:86:2c:62:e6:11:1a:a4:55:87:63:d2:90:10:de:49:
f5:ab:a0:ed:23:77:13:29:e9:c7:4d:aa:ed:fb:49:78:d7:78:
2c:1f:0d:32:91:5a:d7:50:af:31:2d:81:82:12:27:b2:06:bd:
79:4f:c4:23:06:80:75:45:67:b8:fd:08:2f:77:4e:4a:6b:c5:
51:5f:f3:41:d8:2c:81:5c:e1:be:47:c9:c9:85:0b:44:21:fe:
0a:4b:14:bc:cb:6c:a5:2e:70:40:8f:d4:5b:1c:e1:14:6c:41:
4e:54:88:53:86:d9:71:3b:92:f7:27:17:18:cb:74:e8:1e:4b:
0c:f8:35:e0:a3:3c:0c:0a:d3:d2:86:9c:2e:f4:df:b4:96:ca:
01:94:b8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:16 2024 by rpki-client on console-fra.rpki-client.org