Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/zheo_5F7dCrOcO303JNHehLE_9g.roa
File: zheo_5F7dCrOcO303JNHehLE_9g.roa (raw, json)
Hash identifier: Xfim2RBd8fRxKm7v/nA/G5z9/GzCAJA4PW1uqF8iBoY=
Subject key identifier: CE:17:A8:FF:91:7B:74:2A:CE:70:ED:F4:DC:93:47:7A:12:C4:FF:D8
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 0187BE56A35ABA4679053A0A32E2F483EC6F
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/zheo_5F7dCrOcO303JNHehLE_9g.roa
Signing time: Wed 26 Apr 2023 16:12:41 +0000
ROA not before: Wed 26 Apr 2023 16:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21342
IP address blocks: 2.22.243.0/24 maxlen: 24
95.101.76.0/24 maxlen: 24
92.122.123.0/24 maxlen: 24
2.21.230.0/24 maxlen: 24
95.101.36.0/24 maxlen: 24
88.221.162.0/24 maxlen: 24
88.221.163.0/24 maxlen: 24
2.22.230.0/24 maxlen: 24
2.16.40.0/24 maxlen: 24
88.221.81.0/24 maxlen: 24
92.123.94.0/24 maxlen: 24
92.123.95.0/24 maxlen: 24
95.100.168.0/24 maxlen: 24
84.53.139.0/24 maxlen: 24
95.100.175.0/24 maxlen: 24
95.100.174.0/24 maxlen: 24
95.100.173.0/24 maxlen: 24
2.16.130.0/24 maxlen: 24
2.16.126.0/23 maxlen: 24
193.108.91.0/24 maxlen: 24
193.108.88.0/24 maxlen: 24
2a02:26f0:67::/48 maxlen: 48
2a02:26f0:117::/48 maxlen: 48
2a02:26f0:68::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:be:56:a3:5a:ba:46:79:05:3a:0a:32:e2:f4:83:ec:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Apr 26 16:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce17a8ff917b742ace70edf4dc93477a12c4ffd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:20:69:b6:5a:b2:96:b4:52:02:bd:e9:85:bd:
b2:81:d0:a8:35:c9:c2:10:2a:74:9a:21:b8:d2:33:
d3:eb:0c:8e:4d:a3:3d:07:be:99:30:29:6f:8a:57:
fd:0a:0d:8b:a6:85:c0:6f:a5:85:36:f1:46:8b:4c:
9a:24:1c:17:89:f4:77:ca:8a:d1:4e:79:b7:00:59:
de:7a:6b:9e:74:90:50:62:a7:e6:22:08:63:b7:a1:
57:ec:fb:db:4d:09:12:87:8a:3b:5c:12:bb:18:ff:
db:a2:2a:e3:e2:b3:a9:fb:e2:f1:22:6a:c1:b4:fe:
04:6f:56:c1:d0:bb:d5:7a:42:85:a1:24:3f:dc:fa:
7d:be:cd:1f:e0:11:5c:e7:91:65:da:83:c4:41:e6:
fe:76:aa:5c:fd:30:d7:87:55:ba:17:52:2b:4a:7c:
3b:b0:48:97:72:ff:76:15:2c:e8:49:ba:6e:d7:ef:
df:5e:70:8b:12:56:9b:13:e9:20:78:48:16:44:04:
ea:b3:b6:62:1d:fd:fd:7f:7e:2a:28:c4:0e:dd:35:
b0:fb:3b:5c:4f:c0:5f:7f:e0:a0:ff:98:ee:dd:45:
6f:02:fc:ac:e4:5b:37:21:e4:c1:02:29:fc:83:28:
21:a9:fa:f0:4f:47:eb:e5:df:f0:0f:c8:ac:d5:7e:
83:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:17:A8:FF:91:7B:74:2A:CE:70:ED:F4:DC:93:47:7A:12:C4:FF:D8
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/zheo_5F7dCrOcO303JNHehLE_9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.16.40.0/24
2.16.126.0/23
2.16.130.0/24
2.21.230.0/24
2.22.230.0/24
2.22.243.0/24
84.53.139.0/24
88.221.81.0/24
88.221.162.0/23
92.122.123.0/24
92.123.94.0/23
95.100.168.0/24
95.100.173.0-95.100.175.255
95.101.36.0/24
95.101.76.0/24
193.108.88.0/24
193.108.91.0/24
IPv6:
2a02:26f0:67::-2a02:26f0:68:ffff:ffff:ffff:ffff:ffff
2a02:26f0:117::/48
Signature Algorithm: sha256WithRSAEncryption
3f:60:d5:a5:89:b5:31:69:2d:39:bb:5a:46:ba:15:6a:d3:96:
ef:79:be:8d:11:37:20:3c:9d:67:ff:ef:f3:04:2c:d4:3f:af:
3a:df:a9:73:ae:42:60:db:07:09:4c:7b:89:e3:09:b9:58:fe:
34:cf:2c:0d:37:d5:2e:7c:0a:b6:8d:0b:3f:07:a4:7d:b0:55:
3f:82:ac:2a:83:4c:f7:3c:71:29:1b:0d:fd:f8:94:98:30:47:
eb:74:87:7c:27:ad:6e:12:3e:48:01:ac:d1:e3:53:2d:95:a8:
4d:a4:1e:74:da:38:64:bc:0f:c9:fd:58:a0:dd:a9:ee:1a:e7:
88:cf:bf:98:a3:ee:f7:e8:29:07:1a:91:31:16:35:2a:ec:1a:
13:c5:18:37:02:48:13:8d:5d:01:a7:a5:f5:59:73:f7:ea:e9:
06:e1:d2:8f:65:54:b2:80:5b:58:ec:aa:a4:ff:77:5c:7a:c1:
44:b9:3c:23:4e:f9:c2:a5:43:08:13:b5:82:8e:be:86:64:3f:
0f:73:43:9a:55:ad:7c:8f:7b:da:de:3b:60:59:61:19:5e:e7:
09:e9:3c:23:0f:ff:aa:ab:84:df:8a:01:73:7d:b2:b9:b3:12:
dc:0f:59:05:ea:a2:68:d8:4a:5e:d8:ac:6c:a2:c2:57:0c:84:
c3:0d:0e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 14:24:30 2023 by rpki-client on console-fra.rpki-client.org