Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/ZDN9x58_lr_lpAEXw9-6VxM4Frw.roa
File: ZDN9x58_lr_lpAEXw9-6VxM4Frw.roa (raw, json)
Hash identifier: On5rAokM4vZuDcjuiL9VwZ1Y4Psl6LF6rne2vR6z1C4=
Subject key identifier: 64:33:7D:C7:9F:3F:96:BF:E5:A4:01:17:C3:DF:BA:57:13:38:16:BC
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0185E2489B363088CD3E4329547CE68BC05F
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/ZDN9x58_lr_lpAEXw9-6VxM4Frw.roa
Signing time: Tue 24 Jan 2023 05:38:07 +0000
ROA not before: Tue 24 Jan 2023 05:38:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20853
IP address blocks: 185.58.114.0/24 maxlen: 24
185.111.25.0/24 maxlen: 24
185.97.79.0/24 maxlen: 24
77.83.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e2:48:9b:36:30:88:cd:3e:43:29:54:7c:e6:8b:c0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 24 05:38:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64337dc79f3f96bfe5a40117c3dfba57133816bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:87:02:08:c7:3e:64:fa:15:ab:b1:52:f2:
19:10:a1:dc:8b:22:bf:91:01:39:67:04:5f:7a:3b:
bb:4e:c8:aa:26:6e:a7:c6:99:4e:5a:7d:53:d8:b3:
d3:2c:75:99:d4:f5:75:cb:4c:4e:b3:7a:7f:0e:c5:
0c:77:7b:d9:26:49:87:0d:c2:45:45:41:67:a2:54:
84:36:04:05:5e:8a:25:97:11:ff:9c:1d:c1:1b:b2:
69:2c:15:fc:9c:c3:90:e1:57:42:ce:1f:6e:2a:39:
78:b3:7c:ff:e6:6a:72:11:39:0e:22:77:bb:f0:bb:
c5:23:c3:49:b7:8b:ea:2d:97:97:85:76:37:a6:60:
1a:42:7f:3d:3c:e7:29:b8:9b:33:23:1b:1f:3c:06:
e1:c2:44:01:a5:e9:86:f9:5f:5f:9b:1d:d8:db:d6:
33:56:db:46:55:81:61:40:2e:78:df:1f:44:3c:4c:
c4:65:ea:ec:d5:91:b8:71:14:e4:73:a0:87:26:aa:
6a:36:07:8d:fd:3d:d1:24:21:4b:c3:d8:53:a2:8f:
88:ca:a5:13:6e:c6:84:66:c3:fe:30:8b:a3:37:3d:
04:82:83:24:32:95:d9:f6:33:fe:7e:cb:40:1c:7d:
9b:7c:7e:73:d7:b7:21:20:4f:d2:ff:22:4b:46:89:
15:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:33:7D:C7:9F:3F:96:BF:E5:A4:01:17:C3:DF:BA:57:13:38:16:BC
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/ZDN9x58_lr_lpAEXw9-6VxM4Frw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.245.0/24
185.58.114.0/24
185.97.79.0/24
185.111.25.0/24
Signature Algorithm: sha256WithRSAEncryption
43:0c:44:95:ec:46:04:1a:92:07:1d:6d:a4:e5:85:fd:96:a1:
8e:e2:79:98:d2:6c:78:61:ed:e4:6f:10:7f:5b:41:42:94:5d:
26:61:de:1c:ea:2e:b0:5b:5f:c8:cd:09:57:6e:3d:99:de:18:
76:24:91:d7:56:d7:f4:69:ac:67:61:e3:ae:05:c6:a1:74:04:
cd:f2:00:5d:42:9c:34:bb:83:94:f3:ca:30:45:20:c6:3a:0c:
e8:aa:f0:03:16:a2:70:af:2f:2e:b0:4e:57:27:1a:82:15:9f:
a3:51:5a:ab:21:8f:76:9d:38:c2:d0:b6:b9:18:2e:86:e8:85:
b8:05:2e:18:7c:0b:a9:df:6d:ef:99:fa:9c:32:b9:28:3b:24:
56:91:50:19:0f:4c:c7:10:a3:9d:ce:8b:58:dc:94:9e:ee:dc:
46:d7:e4:27:29:4d:57:71:bd:04:f2:45:0c:7e:c5:43:21:d1:
ed:e8:53:8c:08:6e:0b:8b:d6:16:8f:1c:3e:06:a3:62:33:06:
77:70:91:5b:56:4f:bf:eb:a8:f7:a9:62:8c:84:63:04:14:aa:
71:ab:c3:e3:d4:2b:9b:32:da:1b:98:a0:28:13:9b:1a:ba:c7:
6b:c3:4a:76:3c:ec:3f:ee:60:31:af:e6:b8:32:d6:68:28:1f:
1d:a6:0e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:17 2023 by rpki-client on console-fra.rpki-client.org