Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Zd1EVvVuNC2lXNoBxQYCDXlUPWc.roa
File: Zd1EVvVuNC2lXNoBxQYCDXlUPWc.roa (raw, json)
Hash identifier: zi1cdOUBCCB6bzsUr66sJJ5+9X5q/o59SA7fJ8Uf6eg=
Subject key identifier: 65:DD:44:56:F5:6E:34:2D:A5:5C:DA:01:C5:06:02:0D:79:54:3D:67
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 0188E4C63E26BF15A7D85059D1ABA3FD0272
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Zd1EVvVuNC2lXNoBxQYCDXlUPWc.roa
Signing time: Thu 22 Jun 2023 20:22:57 +0000
ROA not before: Thu 22 Jun 2023 20:22:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16625
IP address blocks: 92.123.240.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e4:c6:3e:26:bf:15:a7:d8:50:59:d1:ab:a3:fd:02:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jun 22 20:22:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65dd4456f56e342da55cda01c506020d79543d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:e7:29:4b:ce:30:9a:33:34:ae:20:cf:5f:
47:4a:d9:29:c9:5f:f0:b7:5c:91:e7:0c:7b:26:f4:
66:62:cf:24:0d:77:64:4a:37:93:62:56:c2:cd:14:
c9:95:89:2b:4e:e2:5d:05:d8:9e:49:69:b9:3b:91:
1f:7b:8d:55:4d:a0:9f:4e:52:4e:d3:82:b5:f9:4a:
5d:6c:3f:f3:23:92:ba:d6:36:22:69:e6:0a:44:f6:
6e:0c:7f:58:ab:68:32:2c:f0:87:26:f1:47:55:b6:
81:e5:3e:8d:a2:04:5b:c4:42:cc:87:42:e6:a9:9f:
74:2a:e8:c6:40:62:c3:a7:14:6c:92:4f:82:72:e0:
6b:b3:50:0b:67:32:fd:7b:8f:87:1c:4a:14:c3:42:
d4:c1:27:72:5e:e5:78:6d:f4:47:bf:d9:54:e1:8f:
00:50:e4:a5:fb:61:72:96:08:a8:0d:aa:54:f2:8c:
e1:d5:2d:92:5f:8f:bc:d4:3e:bd:c0:04:58:7f:78:
45:c5:4b:41:68:4f:7a:25:34:01:b0:71:3b:4d:d7:
6b:68:04:d0:08:10:4c:e0:c3:01:42:cb:6a:a2:1a:
c4:f7:5e:6c:71:d3:d5:05:00:7b:da:2e:c7:f3:d8:
cc:09:15:ad:b8:cf:d5:66:c0:1a:c3:99:f8:c7:d1:
f9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DD:44:56:F5:6E:34:2D:A5:5C:DA:01:C5:06:02:0D:79:54:3D:67
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Zd1EVvVuNC2lXNoBxQYCDXlUPWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.123.240.0/22
Signature Algorithm: sha256WithRSAEncryption
73:87:b5:be:10:cd:24:2f:95:d2:dd:05:6b:9a:92:e0:2b:b7:
88:9f:2d:29:cb:e4:63:f1:a7:25:fd:f4:a0:7f:cd:c4:e9:c8:
a9:df:71:56:38:fc:dd:0a:8b:0c:2c:5f:d0:13:fb:1b:e2:f0:
5b:b9:c2:49:e1:3e:2e:75:ce:be:8a:cc:4b:89:e7:9e:b3:b8:
b5:a4:d1:8d:d1:8e:60:a3:b1:d2:93:e1:09:fc:3b:56:3c:68:
a5:9d:77:cc:ae:61:b1:b5:f9:cf:0d:94:f6:a2:b2:1b:60:95:
de:58:10:90:aa:99:62:c7:96:b2:6f:e9:05:0e:40:29:39:e4:
95:9d:ee:4f:45:ef:29:a6:31:3b:f3:b3:2e:c1:dd:e8:6b:98:
8e:4d:64:73:71:c7:4a:7f:bc:49:2c:a3:cd:df:c0:ba:62:f8:
8d:7e:c7:fd:93:16:0d:bc:9b:34:da:5b:40:e8:e5:04:6f:81:
d4:a6:c5:a1:81:ce:da:39:09:09:40:df:06:f5:fc:20:84:2a:
b6:da:f1:02:99:82:48:33:64:e9:02:b1:b8:45:1c:bf:fb:cb:
52:6b:a9:91:e8:ed:df:21:d0:75:4a:a6:3a:91:43:9d:21:a3:
21:87:9b:a1:35:5a:09:64:78:07:b0:05:1d:88:e3:52:0e:3a:
a9:c8:62:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:22 2024 by rpki-client on console-ams.rpki-client.org