Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/Z0S6GPnYbzkRxPTsCLskKFn3Hhg.roa
File: Z0S6GPnYbzkRxPTsCLskKFn3Hhg.roa (raw, json)
Hash identifier: 8ijRVbUWMsi7bY6oZh55396gMLm0dys9Khv5Sn65Dew=
Subject key identifier: 67:44:BA:18:F9:D8:6F:39:11:C4:F4:EC:08:BB:24:28:59:F7:1E:18
Certificate issuer: /CN=261b941dbe59651fafbba9724a12775e07edb635
Certificate serial: 01856CCAC66AF5925C6BAADD1D403C1067C8
Authority key identifier: 26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/Z0S6GPnYbzkRxPTsCLskKFn3Hhg.roa
Signing time: Sun 01 Jan 2023 10:05:06 +0000
ROA not before: Sun 01 Jan 2023 10:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206903
IP address blocks: 185.172.152.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:c6:6a:f5:92:5c:6b:aa:dd:1d:40:3c:10:67:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=261b941dbe59651fafbba9724a12775e07edb635
Validity
Not Before: Jan 1 10:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6744ba18f9d86f3911c4f4ec08bb242859f71e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7c:9e:68:d6:57:6d:b3:26:7c:12:bd:8d:1a:
dc:4b:b5:3f:72:8c:a3:23:e7:e4:70:c9:8e:b3:62:
ec:3b:b7:74:82:c2:70:53:56:27:cc:1c:e8:f4:c0:
57:a0:70:f5:a0:2a:45:0c:b6:24:b9:a2:f2:0b:b6:
06:95:fa:5c:82:ab:b4:62:fc:87:3c:ef:29:b7:35:
0d:2f:4c:b1:47:c9:d0:a8:aa:b4:ea:6c:de:38:b8:
87:60:83:93:07:d8:01:9d:c0:2c:88:ac:0d:94:34:
5d:25:8b:38:02:a2:6f:cf:aa:d6:61:9e:59:d1:1b:
4f:72:03:04:62:9f:a5:66:ac:f5:8c:dc:50:48:0e:
f3:03:64:74:05:37:b4:5c:f1:38:bd:91:61:b8:af:
21:e3:d4:a7:79:cf:54:24:c9:80:3f:ba:14:a3:9a:
48:d2:d5:e5:27:2f:2e:85:dd:c4:80:23:2c:31:1b:
67:81:ff:66:f8:57:12:ba:c0:f3:50:0b:45:66:7b:
fe:9e:0f:12:0b:bb:f7:af:48:2e:e5:7f:72:f1:fd:
66:0c:48:cf:c7:3d:02:e2:1d:36:c8:6a:15:54:31:
e0:59:bb:23:80:3d:45:9c:8d:f5:a8:9a:e8:ea:cf:
a5:9e:74:f6:1d:75:f5:c3:cb:e9:8c:36:b7:5b:f4:
26:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:44:BA:18:F9:D8:6F:39:11:C4:F4:EC:08:BB:24:28:59:F7:1E:18
X509v3 Authority Key Identifier:
keyid:26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/Z0S6GPnYbzkRxPTsCLskKFn3Hhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.152.0/22
Signature Algorithm: sha256WithRSAEncryption
70:a2:05:83:da:13:f0:fd:fe:0d:26:4d:4b:0f:0c:bc:60:ee:
aa:3b:92:ce:3c:59:e6:7f:b1:a9:ba:ea:68:c8:54:97:1b:18:
94:03:9a:5f:74:f4:93:bf:54:01:db:a2:80:64:73:7a:d9:fa:
c2:14:48:18:d6:c8:a1:fa:c1:4b:dd:c5:e6:95:df:69:3f:eb:
b0:63:1a:74:fe:12:6d:c2:bb:df:f8:58:c7:63:23:6f:53:59:
b5:7b:8c:3b:7a:1f:a5:b2:11:e7:5e:4f:cc:12:58:4c:63:62:
86:61:2b:c6:e0:5f:0c:a4:f7:7b:c6:37:6e:f1:f2:21:ae:3f:
f9:18:13:2f:41:96:69:6d:59:44:6b:90:ce:ae:bc:40:12:22:
c5:1e:34:94:5c:14:c0:ec:3e:b7:80:ee:16:c2:8b:38:d6:c7:
c3:c4:78:ef:7f:c0:76:83:e1:0b:4c:2b:71:21:f9:b3:64:64:
fb:13:e9:73:fd:06:38:24:51:47:6c:8c:2f:bc:78:bf:62:ae:
7d:82:d5:be:bf:86:5b:b1:94:db:35:14:dd:75:71:bc:6b:fb:
7c:81:16:66:c9:ad:7d:52:b0:71:79:b1:f7:c9:7c:fe:4a:32:
f4:87:ea:46:c9:d7:6c:42:6b:66:21:d1:e4:0d:94:88:bf:32:
53:28:47:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:57 2024 by rpki-client on console-fra.rpki-client.org