Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/ZHTqYdG3O6dz6st41rrmtimqwP0.roa
File: ZHTqYdG3O6dz6st41rrmtimqwP0.roa (raw, json)
Hash identifier: HTS7stov5Jdx1HowlbMoY3nJyZL68vwP4fReZRYup/A=
Subject key identifier: 64:74:EA:61:D1:B7:3B:A7:73:EA:CB:78:D6:BA:E6:B6:29:AA:C0:FD
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 01882F424AA3758C0D9D27210B90016960A1
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/ZHTqYdG3O6dz6st41rrmtimqwP0.roa
Signing time: Thu 18 May 2023 14:27:33 +0000
ROA not before: Thu 18 May 2023 14:27:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201021
IP address blocks: 185.106.20.0/24 maxlen: 24
185.106.23.0/24 maxlen: 24
185.106.22.0/24 maxlen: 24
185.106.21.0/24 maxlen: 24
185.28.63.0/24 maxlen: 24
185.28.62.0/24 maxlen: 24
185.28.61.0/24 maxlen: 24
185.28.60.0/24 maxlen: 24
185.103.197.0/24 maxlen: 24
185.103.196.0/24 maxlen: 24
185.103.199.0/24 maxlen: 24
185.103.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2f:42:4a:a3:75:8c:0d:9d:27:21:0b:90:01:69:60:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: May 18 14:27:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6474ea61d1b73ba773eacb78d6bae6b629aac0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:bc:8e:20:95:e7:a5:a7:ff:7c:03:08:80:
88:b9:67:5e:da:7d:80:8e:4a:c8:38:eb:22:6f:08:
70:15:3d:51:97:43:00:87:1a:63:51:21:12:fa:c1:
03:91:f3:32:e8:7a:d8:d1:a9:2b:c1:09:79:72:8c:
69:06:bd:b7:7f:9d:7a:cf:d3:3e:76:dd:bc:89:67:
b2:c8:82:94:85:e7:94:c9:cf:19:3d:99:c0:2b:d2:
18:d6:0e:fd:4d:f0:c0:7c:1e:83:82:4d:b5:8d:f8:
83:4f:e5:fb:94:53:4d:e2:50:48:98:0a:0d:87:36:
46:53:02:4f:34:67:57:00:49:73:ed:f0:b2:40:92:
0c:a8:2b:d8:58:25:9e:f4:97:a0:8c:f2:de:f5:5f:
9b:79:98:f2:f5:dd:cb:df:5f:f3:b9:8b:ef:67:c2:
a7:78:99:b4:8b:62:bc:1e:e7:a2:17:07:2c:d0:85:
25:90:da:89:1c:9c:24:b6:ce:05:81:60:e6:01:f3:
4e:da:9c:b0:0c:3a:46:03:14:fd:2e:d2:56:7c:2b:
f5:df:0e:cd:38:5f:4f:b9:c2:e7:28:cb:38:ac:6d:
86:4a:ee:57:4b:0d:33:f1:85:c1:24:94:e9:d3:74:
c3:be:aa:ee:66:32:b1:06:c9:b6:dc:b2:98:c0:8d:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:74:EA:61:D1:B7:3B:A7:73:EA:CB:78:D6:BA:E6:B6:29:AA:C0:FD
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/ZHTqYdG3O6dz6st41rrmtimqwP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.60.0/22
185.103.196.0/22
185.106.20.0/22
Signature Algorithm: sha256WithRSAEncryption
48:79:ca:c4:80:43:d3:e6:9c:e4:1b:69:17:57:d4:f9:b4:92:
4c:fc:87:ff:95:25:79:85:5c:06:dc:40:ad:69:7a:0e:82:39:
2c:c7:2f:25:b5:8b:82:0e:6f:1e:e0:2d:ca:71:38:16:7c:4e:
a6:80:7d:fa:59:ff:97:7c:39:10:3b:68:61:44:f0:27:51:bc:
e2:1d:16:15:92:ef:12:c0:f3:be:5f:e4:96:9c:39:f5:17:78:
6d:18:22:9b:27:0b:9a:11:b7:52:97:f6:9f:89:5e:5c:20:b0:
e5:4c:77:f4:d9:3e:db:2c:7a:f3:f8:b0:e2:65:3e:7c:c5:0b:
f6:b3:d2:b1:5c:91:f0:11:70:a9:0a:db:8b:27:b6:ff:b5:cc:
8e:19:22:0c:41:2d:65:28:d0:11:36:59:6e:fe:3d:a1:ed:a4:
f8:cd:63:b8:8e:a0:ef:31:70:62:95:95:3b:bd:d8:55:c9:44:
22:a5:17:a7:dd:ca:9e:40:8f:04:7c:83:06:dc:3c:7d:55:94:
dd:31:ac:17:40:de:37:cf:61:ef:42:92:13:b8:04:cf:8a:45:
89:b9:cb:a0:db:a4:ed:f2:44:3c:0f:26:e8:fc:ec:f3:fb:be:
a6:f8:ea:7d:6a:77:68:0d:8b:83:46:97:ff:2f:2b:e2:fd:0d:
d2:42:2b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 10:11:59 2023 by rpki-client on console-fra.rpki-client.org