Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/0ZHlzLOWX7x7o8kKCafhD1ntL_0.roa
File: 0ZHlzLOWX7x7o8kKCafhD1ntL_0.roa (raw, json)
Hash identifier: HWUFmoDrgHczIZ2twKORbV3SjuHlNfRR+C00HCP7B+E=
Subject key identifier: D1:91:E5:CC:B3:96:5F:BC:7B:A3:C9:0A:09:A7:E1:0F:59:ED:2F:FD
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 0186EE67D62F1C31371928EC749CD678EDDB
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/0ZHlzLOWX7x7o8kKCafhD1ntL_0.roa
Signing time: Fri 17 Mar 2023 07:10:27 +0000
ROA not before: Fri 17 Mar 2023 07:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211327
IP address blocks: 93.180.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ee:67:d6:2f:1c:31:37:19:28:ec:74:9c:d6:78:ed:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Mar 17 07:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d191e5ccb3965fbc7ba3c90a09a7e10f59ed2ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:c9:ff:62:c0:17:58:b5:94:cd:c1:d8:25:
c7:ba:b0:d9:a8:ae:3b:40:60:da:b5:0f:53:8f:46:
3a:45:f0:cf:64:21:fe:06:cc:62:df:ad:5d:4d:ce:
a1:3d:20:db:db:2e:d2:af:43:99:69:8d:37:21:d9:
3b:67:a3:3c:7b:8a:ba:55:ba:47:a6:72:5a:c1:af:
10:88:73:23:e5:f9:34:07:9c:d4:f5:08:e8:f2:df:
a2:a0:8b:e6:18:50:8d:d6:b5:1d:6d:d5:f5:9a:ad:
fc:6b:b5:97:40:98:b7:0b:db:b0:f4:10:79:d8:6e:
75:76:4d:37:ea:67:e1:be:12:73:11:e8:6d:fc:a8:
75:a7:0f:5d:1d:f2:ab:67:d1:bf:f4:57:da:a2:85:
af:8e:23:f5:2b:98:17:c5:c7:96:9e:de:1b:4d:53:
54:b2:ba:b1:7b:c7:43:7c:97:2c:3e:e5:58:66:8f:
10:d6:f5:04:78:e0:d8:ed:b7:fe:01:83:a6:49:09:
28:7e:c3:4c:fe:fb:5a:fc:7c:51:63:b3:c3:a9:c6:
30:87:89:19:3e:b1:3d:1a:2c:1b:c2:e5:2a:0e:34:
d1:46:af:9a:10:48:f3:45:cc:af:49:80:6c:46:ac:
0d:52:59:85:70:b5:11:5b:d4:23:bd:58:74:03:75:
22:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:91:E5:CC:B3:96:5F:BC:7B:A3:C9:0A:09:A7:E1:0F:59:ED:2F:FD
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/0ZHlzLOWX7x7o8kKCafhD1ntL_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.134.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:16:67:4e:ba:0d:6f:8d:d3:22:80:2b:5c:d3:a1:f7:c8:73:
6b:36:b2:6f:45:c3:0f:6b:ac:a9:b8:f8:7f:4c:31:b0:f8:5c:
04:70:b9:a5:64:b5:45:c3:04:cd:2e:db:e3:ca:a2:32:21:44:
32:79:01:04:d9:1c:51:99:49:8e:6f:0c:1b:0f:62:d7:4b:5e:
70:8b:56:f2:22:90:fe:e0:6c:f3:ac:fc:48:cd:b7:7d:a1:60:
28:25:df:56:c5:5a:77:1e:fd:46:f8:bb:6c:43:9e:76:63:3d:
b1:28:a2:f7:4b:15:e9:19:ce:43:d8:79:84:9f:17:88:aa:a2:
28:74:d7:7e:37:fb:79:ad:38:6b:21:ee:aa:31:f9:08:3e:41:
d6:d8:72:c6:17:fe:ed:49:b2:7a:d2:e2:c6:e5:cc:be:16:c1:
53:a6:04:6a:9a:5e:ef:83:cc:ae:93:87:36:97:6e:10:db:ec:
42:30:2f:83:f7:b8:d4:8d:4b:bf:c8:4e:fc:38:26:ec:61:96:
27:8c:6e:34:5f:9c:5c:4a:90:7d:92:76:02:76:ec:ac:d7:bd:
8f:6e:7d:69:4e:fc:30:7e:a6:7e:d3:18:f1:bc:1d:0d:32:04:
0a:b8:ac:9f:04:60:ee:2f:c1:ae:e2:53:7f:dc:8a:e9:22:8a:
56:7f:26:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:55 2024 by rpki-client on console-ams.rpki-client.org