Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1-ZO1-QmdMsgJGQUqDHOEtMdceYI.roa
File: 1-ZO1-QmdMsgJGQUqDHOEtMdceYI.roa (raw, json)
Hash identifier: AZsAaHznKtjviZ+QVyW/I8ATstN/8BYKmrBIgtV0hVQ=
Subject key identifier: F9:93:B5:F9:09:9D:32:C8:09:19:05:2A:0C:73:84:B4:C7:5C:79:82
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018A65619285F9C93A13B94EEB4DE36D75EB
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1-ZO1-QmdMsgJGQUqDHOEtMdceYI.roa
Signing time: Tue 05 Sep 2023 12:46:47 +0000
ROA not before: Tue 05 Sep 2023 12:46:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 82.115.0.0/21 maxlen: 24
46.249.112.0/22 maxlen: 24
185.129.108.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:65:61:92:85:f9:c9:3a:13:b9:4e:eb:4d:e3:6d:75:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Sep 5 12:46:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f993b5f9099d32c80919052a0c7384b4c75c7982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:08:bc:c4:f5:38:f3:91:9b:da:87:1a:dd:cc:
a1:fd:3c:ce:db:85:e1:16:ef:8a:10:de:de:ad:ac:
9e:10:94:9b:e7:39:72:b8:a4:47:91:b3:15:6b:d4:
5d:4a:ec:a6:69:e8:ca:7d:52:27:f3:53:fb:85:f5:
81:0c:3b:0b:55:e3:bb:2a:b2:46:a2:df:fa:da:e1:
a7:c1:e5:ea:cf:35:8c:e4:95:46:7e:41:31:4b:4a:
e0:18:0e:e1:8d:7d:8b:95:e3:63:58:ca:d8:b8:90:
ff:09:eb:fe:27:24:07:df:73:b6:e9:bc:04:31:66:
3b:42:ff:25:e8:29:58:f2:bd:b2:e9:b1:cc:cd:30:
4c:94:8a:ed:f8:50:6f:e8:8b:3c:8c:e3:28:29:da:
bc:dc:a4:0a:2c:58:1f:91:ed:3d:ad:ca:8d:af:ed:
ab:55:d1:d7:ee:00:94:d1:db:a6:f6:d9:bd:f3:e2:
dd:b3:d2:1d:74:54:24:ba:99:71:ab:ba:9f:36:fd:
9b:1c:33:e2:84:39:b6:75:6a:b5:3e:36:f8:09:40:
89:2d:44:cb:89:12:c1:9f:f7:62:01:d7:93:4c:92:
fc:51:ef:aa:ff:9f:1b:bc:43:14:2c:42:78:cf:d9:
85:9d:9f:e5:a7:b7:ee:f9:de:78:74:e4:8a:a7:51:
12:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:93:B5:F9:09:9D:32:C8:09:19:05:2A:0C:73:84:B4:C7:5C:79:82
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1-ZO1-QmdMsgJGQUqDHOEtMdceYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.112.0/22
82.115.0.0/21
185.129.108.0/23
Signature Algorithm: sha256WithRSAEncryption
d4:0a:b0:a7:79:fc:6a:23:83:dc:f7:ec:d6:51:5d:0f:d6:33:
72:0d:da:a8:31:4c:fa:8b:2b:65:d9:87:c8:29:de:6d:98:5b:
5d:c5:11:62:a1:f8:40:2b:4e:35:89:72:78:77:71:b5:52:0b:
26:29:a6:72:58:af:7c:1c:a2:5a:f0:25:36:55:ad:60:f6:a9:
fe:52:3c:42:ca:52:c2:52:51:10:a3:d3:06:a1:8a:35:5a:4b:
88:d7:be:51:a4:e8:8c:ec:fe:52:b0:bc:99:d0:8b:bc:59:fe:
9d:7a:39:8f:da:94:53:02:0c:f7:cf:f4:36:18:bd:53:ec:52:
89:37:84:1a:b8:09:35:2f:ff:c6:cf:5f:08:b6:67:5d:ec:6d:
b4:2f:4d:94:26:bc:62:af:13:9f:5c:87:03:2a:0d:b7:fb:73:
bc:27:a0:05:cb:ee:14:c8:b2:33:8d:ae:bb:9c:b7:95:3a:2c:
8c:1f:67:31:6a:34:3c:c9:fa:72:78:be:08:d4:8e:f5:3e:79:
bc:9e:b4:aa:fb:f0:30:c3:82:15:a6:07:0e:f0:9b:8d:e6:64:
e8:ee:8e:16:4c:84:e4:6b:21:d4:cc:e1:9b:a9:a3:41:db:17:
f1:9a:b0:a2:13:fd:03:69:d4:d6:15:fa:91:02:8e:39:04:8e:
d3:1d:7b:21
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 14 15:08:40 2023 by rpki-client on console-fra.rpki-client.org