Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/zIgczN3yWQGRd1QXBxCLsUoqAlo.roa
File: zIgczN3yWQGRd1QXBxCLsUoqAlo.roa (raw, json)
Hash identifier: 2plFwYrpC3FA2MBoXrHUy87GNM6/f8JeWs0PmG+jpmM=
Subject key identifier: CC:88:1C:CC:DD:F2:59:01:91:77:54:17:07:10:8B:B1:4A:2A:02:5A
Certificate issuer: /CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Certificate serial: 0185708CD0FD49E9D21160D973B6EA0744F1
Authority key identifier: CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/zIgczN3yWQGRd1QXBxCLsUoqAlo.roa
Signing time: Mon 02 Jan 2023 03:35:54 +0000
ROA not before: Mon 02 Jan 2023 03:35:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62095
IP address blocks: 31.169.73.0/24 maxlen: 24
185.11.248.0/24 maxlen: 24
185.11.251.0/24 maxlen: 24
185.11.250.0/24 maxlen: 24
185.11.249.0/24 maxlen: 24
2a02:ed40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:d0:fd:49:e9:d2:11:60:d9:73:b6:ea:07:44:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Validity
Not Before: Jan 2 03:35:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc881cccddf259019177541707108bb14a2a025a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:da:16:9b:30:73:f4:91:f3:da:b2:c4:12:
be:db:9d:38:ab:e7:ca:5d:3c:a6:5f:f8:f7:5d:21:
0e:b8:7a:5f:e0:ca:3d:2b:4e:98:3b:e1:5c:b1:3d:
86:46:b2:d4:d0:27:a6:02:5e:16:9a:d3:86:67:e7:
a7:30:f5:e6:09:f9:42:ba:00:aa:d0:02:49:40:2f:
f3:5c:0a:74:89:b1:e3:ce:61:82:c8:cb:64:7d:8d:
59:ec:11:0f:58:62:a9:6d:bd:39:1d:fc:f2:29:a4:
2c:5b:86:95:5a:ee:20:14:02:3f:5d:97:44:a5:02:
3f:8c:52:82:09:2e:42:88:c6:cf:4a:43:41:1b:0a:
28:a3:9b:1e:41:a9:89:1a:0c:59:71:df:f9:c9:2b:
4d:33:25:2d:72:8d:27:98:5c:08:09:e3:84:b2:a2:
41:94:8d:37:12:12:2b:17:9f:ad:aa:48:a4:dd:53:
2b:63:17:d3:1b:08:7a:51:74:c3:21:86:a9:30:9e:
86:de:d3:60:3b:fb:e3:3c:26:2e:90:19:0b:60:33:
ee:10:f7:f9:77:af:bb:13:79:b0:c7:d1:da:cf:11:
f6:f2:fa:f9:70:72:ab:d6:46:97:93:d4:98:b4:e0:
2a:59:00:64:b3:46:56:44:4e:1b:40:4d:1c:2a:d2:
89:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:88:1C:CC:DD:F2:59:01:91:77:54:17:07:10:8B:B1:4A:2A:02:5A
X509v3 Authority Key Identifier:
keyid:CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/zIgczN3yWQGRd1QXBxCLsUoqAlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.73.0/24
185.11.248.0/22
IPv6:
2a02:ed40::/29
Signature Algorithm: sha256WithRSAEncryption
0c:c3:de:1e:b1:29:ff:1a:a6:5f:b9:10:20:7b:94:bc:58:16:
e3:41:4d:ba:e6:64:92:25:46:9a:da:fe:8f:7b:be:fe:5f:ab:
ef:6d:8b:f9:c0:dd:e4:0a:d4:1b:82:10:55:30:0a:78:19:73:
70:84:33:2b:26:9a:e8:cb:b1:2b:e1:6e:e3:43:fe:55:3d:b3:
57:98:8f:42:5f:fe:a3:48:28:cb:ff:f2:59:f4:89:2b:f0:3c:
fa:96:61:34:50:32:97:14:32:92:97:26:cd:c5:ab:fd:5a:8a:
3f:25:52:7b:54:93:c3:fd:ce:61:78:93:ef:ac:15:6f:70:6b:
f1:f1:7f:8b:db:bf:bf:48:86:17:3f:70:a0:2b:d5:92:f1:80:
4f:dd:7e:6b:0e:cb:66:14:e3:92:34:26:84:90:fd:85:21:95:
52:bb:7c:91:8a:a9:e4:89:92:e4:0d:c9:93:a0:e7:a9:2c:74:
3d:cb:a0:d5:6f:03:1b:8f:36:5c:a6:65:a6:e2:14:2d:e3:75:
c3:5b:86:38:b7:26:eb:1b:d0:0f:7a:17:a3:3a:5d:dd:8a:32:
99:7f:aa:53:34:23:60:ce:9b:f3:8b:00:2a:1f:e8:5a:c6:dc:
be:d2:c3:3b:72:22:d8:7c:20:67:ed:d2:29:38:e0:da:2b:6f:
12:93:4d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:36 2024 by rpki-client on console-fra.rpki-client.org