Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/Z9l0kSwSGxOu9nQjrhV9H0qNduw.roa
File: Z9l0kSwSGxOu9nQjrhV9H0qNduw.roa (raw, json)
Hash identifier: bl2plZrmt8z6hFW/FoyXfJWLmGKE9zBj74xtG5vcU/s=
Subject key identifier: 67:D9:74:91:2C:12:1B:13:AE:F6:74:23:AE:15:7D:1F:4A:8D:76:EC
Certificate issuer: /CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Certificate serial: 01856D6F8F87A01A2B25B2F90A2C1CFA8A92
Authority key identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/Z9l0kSwSGxOu9nQjrhV9H0qNduw.roa
Signing time: Sun 01 Jan 2023 13:05:05 +0000
ROA not before: Sun 01 Jan 2023 13:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47581
IP address blocks: 185.146.127.0/24 maxlen: 24
212.58.157.0/24 maxlen: 24
212.58.159.0/24 maxlen: 24
212.58.158.0/24 maxlen: 24
2a07:7b80:106::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:8f:87:a0:1a:2b:25:b2:f9:0a:2c:1c:fa:8a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Validity
Not Before: Jan 1 13:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67d974912c121b13aef67423ae157d1f4a8d76ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3b:44:40:fc:47:42:7d:fe:96:ae:31:26:8f:
0a:a4:6f:5a:07:b4:35:61:b1:be:68:8c:df:b5:1b:
61:38:1e:d7:fa:bb:5b:c7:87:ca:6a:dc:4f:66:17:
2f:e4:df:4e:c2:8d:c0:4b:3e:8f:21:02:43:c3:72:
e5:80:ed:7c:05:5e:25:d7:c2:11:e6:1b:34:44:dd:
6e:d6:48:5c:f1:ce:b7:98:66:a9:d9:28:62:4b:db:
fe:fb:20:2a:12:98:20:91:a0:54:d3:8d:a2:6b:6c:
ca:e1:4e:6d:6e:1d:e4:bb:98:c8:fd:d6:5f:a6:59:
0d:bd:5e:93:eb:0e:5b:3c:64:29:3c:0e:b1:f0:47:
09:05:41:77:d0:cb:43:5c:57:66:52:35:ec:f6:5f:
35:af:55:11:02:a1:81:cc:da:7c:f1:c9:38:d8:e5:
5f:64:f5:6e:d3:61:1c:d9:6b:e7:1b:f6:86:bb:b4:
5c:13:25:8f:53:b2:e7:2f:46:ae:cd:b8:03:cf:1a:
e4:76:7a:40:f5:e9:e4:3d:1b:52:6c:da:f9:9b:29:
78:af:1c:24:dc:f6:6c:71:7d:e1:2e:5b:b2:66:9f:
4a:8d:36:3e:58:15:e0:05:04:9c:25:d6:24:80:08:
77:a6:02:fd:0f:65:95:0c:93:fb:5a:b3:4a:dd:24:
28:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D9:74:91:2C:12:1B:13:AE:F6:74:23:AE:15:7D:1F:4A:8D:76:EC
X509v3 Authority Key Identifier:
keyid:BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/Z9l0kSwSGxOu9nQjrhV9H0qNduw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.127.0/24
212.58.157.0-212.58.159.255
IPv6:
2a07:7b80:106::/48
Signature Algorithm: sha256WithRSAEncryption
a2:85:77:7e:ff:39:60:77:a3:51:62:5d:e5:dd:3b:58:40:0e:
01:67:7d:42:c1:0f:5b:14:fd:1a:31:40:2d:03:a1:c0:19:97:
8e:34:37:32:8d:28:22:b3:59:f3:aa:89:57:be:c3:c0:b4:b6:
f8:54:9f:ca:4f:00:b3:d7:35:f8:02:6c:df:56:02:33:15:90:
0c:f8:5c:b7:59:a3:1a:54:08:d5:6d:0f:da:69:ce:e2:e0:ce:
94:ef:16:5b:f1:e4:ca:91:b3:4a:80:af:7b:5c:43:98:5c:d3:
aa:be:28:5f:3b:77:40:b0:64:1c:47:8a:7b:f0:25:3c:bf:51:
d9:3e:45:5c:18:d7:4f:33:8d:7a:3e:3e:86:55:d2:5f:da:68:
87:da:f7:f5:5a:8a:92:a7:f7:09:c0:a2:be:42:eb:40:ed:54:
68:17:34:65:08:27:05:a8:54:1a:04:f0:d0:7c:73:d8:67:6b:
4e:bb:05:0b:a9:19:23:57:a6:74:6c:4b:bc:d2:c7:ef:36:ec:
7b:fb:d4:02:6d:7a:12:15:ec:bf:b2:92:7d:1a:11:df:ce:bd:
07:08:e2:bb:83:9e:c9:b5:d2:a1:61:26:56:c2:2d:04:e9:06:
4e:95:c1:90:b9:10:4d:26:f2:53:4c:ab:f1:23:b5:5b:b5:d4:
82:2a:8a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:27 2024 by rpki-client on console-ams.rpki-client.org