Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/ZJprSqUaSau6j4UEbKIRKI0t-6k.roa
File: ZJprSqUaSau6j4UEbKIRKI0t-6k.roa (raw, json)
Hash identifier: djzJKzl9HDNObJQFLjZ88RfTFTP1nxPU1zDaIDB/1VM=
Subject key identifier: 64:9A:6B:4A:A5:1A:49:AB:BA:8F:85:04:6C:A2:11:28:8D:2D:FB:A9
Certificate issuer: /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial: 01860C68FB9A3027FC35BC8AB02F2B14949D
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/ZJprSqUaSau6j4UEbKIRKI0t-6k.roa
Signing time: Wed 01 Feb 2023 09:57:32 +0000
ROA not before: Wed 01 Feb 2023 09:57:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203560
IP address blocks: 178.21.145.0/24 maxlen: 24
178.21.144.0/24 maxlen: 24
178.21.146.0/24 maxlen: 24
178.21.147.0/24 maxlen: 24
2a02:2c0:3::/48 maxlen: 48
2a02:2c0:1::/48 maxlen: 48
2a02:2c0:2::/48 maxlen: 48
2a02:2c0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0c:68:fb:9a:30:27:fc:35:bc:8a:b0:2f:2b:14:94:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Validity
Not Before: Feb 1 09:57:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=649a6b4aa51a49abba8f85046ca211288d2dfba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:20:f0:f9:9d:48:a9:a1:6d:bc:a6:0e:74:
e6:12:32:44:12:03:1f:9d:bd:9f:a1:7b:19:07:9b:
b0:71:cc:c5:e7:f9:97:d5:0a:64:ce:aa:27:fd:4a:
16:18:d3:b4:07:18:2c:49:4c:a1:f1:d4:a5:d7:18:
71:74:d1:c0:8e:0c:76:ef:30:49:be:63:25:04:f9:
f1:37:89:fa:f6:ee:b7:d6:be:95:4a:a9:4b:b8:36:
1b:d3:2c:a0:db:f4:c9:bc:57:82:08:91:4c:57:70:
a1:c9:34:8b:a5:ed:00:65:ce:33:01:0f:69:07:1a:
ca:d5:75:b3:c3:d0:87:e2:2f:c4:07:49:71:49:50:
15:e7:2c:aa:a0:ea:b6:9b:20:6c:f3:be:9e:b6:60:
84:1c:01:3b:92:30:a2:ba:09:8b:70:bd:eb:74:0d:
f8:79:7e:58:fb:f2:ed:1f:7c:e5:7b:38:a0:9e:0c:
28:af:9b:f7:01:98:40:93:71:25:8d:dc:8d:9f:4e:
28:13:a6:1a:5a:9f:1f:b3:57:0f:b5:f6:0a:18:5b:
ce:86:f6:78:8e:82:2c:96:42:f5:9f:7f:e3:ca:55:
e4:7e:11:00:9f:04:14:69:3e:a9:29:1b:7f:f3:96:
5d:50:c2:b4:cf:4d:df:a9:fb:a7:a7:35:33:cc:47:
72:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9A:6B:4A:A5:1A:49:AB:BA:8F:85:04:6C:A2:11:28:8D:2D:FB:A9
X509v3 Authority Key Identifier:
keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/ZJprSqUaSau6j4UEbKIRKI0t-6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.144.0/22
IPv6:
2a02:2c0::/46
Signature Algorithm: sha256WithRSAEncryption
51:fd:f5:d6:c1:fd:3f:d0:7e:aa:4e:6f:11:dd:43:58:17:57:
83:90:fc:94:4c:e4:cb:0a:0c:ec:f6:31:7f:a9:e6:cc:3c:c8:
bd:16:cd:5a:17:e9:35:e4:8f:be:18:86:dd:f1:92:e4:b5:9c:
76:2f:d2:2e:ec:52:7d:c9:d4:f1:21:59:02:3c:9c:1c:b6:ff:
0a:e3:e3:d1:30:6a:cf:53:d2:b3:93:31:45:be:84:8e:21:0b:
94:bb:0c:1d:a8:52:b7:c9:24:30:ce:56:d9:d0:42:fc:be:a7:
d7:d5:7b:d4:96:55:d7:03:fc:31:3c:69:3a:ce:f5:59:23:1a:
29:74:c9:39:2e:63:76:07:34:64:2f:32:e6:6d:d8:e7:2a:b9:
d9:09:17:bf:a1:92:4b:90:f6:de:9c:99:98:63:0d:d7:50:16:
99:ac:b6:84:2b:24:5d:92:e3:2b:20:6c:6d:19:a3:19:01:1c:
fb:7f:6c:9d:70:fd:5e:19:af:8b:a8:25:9e:9d:0c:4a:79:90:
78:ee:64:28:63:ad:e8:3d:cf:42:be:e3:2f:e5:73:3d:ce:93:
f6:1a:ff:2e:88:6d:48:4f:7e:a5:c9:e6:7a:3c:d4:07:31:1d:
3d:ef:d9:4b:d5:59:40:24:04:d8:6b:1f:a7:7f:60:4f:08:55:
cc:5a:ae:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:25 2024 by rpki-client on console-ams.rpki-client.org