Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/zqxBpdny-ZBkFLKFQQU51XCIevw.roa
File: zqxBpdny-ZBkFLKFQQU51XCIevw.roa (raw, json)
Hash identifier: /g88lmNpfkVuVBomD+Su63CbOQsbtbvsiBUdPi9t6ak=
Subject key identifier: CE:AC:41:A5:D9:F2:F9:90:64:14:B2:85:41:05:39:D5:70:88:7A:FC
Certificate issuer: /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial: 018B76C75200D0FA87FF748F089443C130AA
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/zqxBpdny-ZBkFLKFQQU51XCIevw.roa
Signing time: Sat 28 Oct 2023 14:54:15 +0000
ROA not before: Sat 28 Oct 2023 14:54:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42369
IP address blocks: 94.176.160.0/23 maxlen: 23
94.176.160.0/24 maxlen: 24
185.235.147.0/24 maxlen: 24
94.176.161.0/24 maxlen: 24
188.240.51.0/24 maxlen: 24
2a10:8b40::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:76:c7:52:00:d0:fa:87:ff:74:8f:08:94:43:c1:30:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Validity
Not Before: Oct 28 14:54:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ceac41a5d9f2f9906414b285410539d570887afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7f:c6:41:4a:b6:f9:22:75:51:a7:6d:2e:98:
c2:00:27:07:38:82:8c:12:06:3b:e8:65:c6:f9:15:
13:dc:4f:64:b1:25:09:5c:05:59:bc:c8:60:92:ee:
13:6e:a2:25:53:2f:df:25:38:39:85:5c:de:c1:c3:
2a:59:06:40:01:c5:6b:ca:4a:7b:d3:06:e0:2e:a4:
00:d3:b4:cc:ba:f2:ba:2a:07:47:a0:3e:46:4b:56:
23:4c:8b:ab:cd:3e:d3:35:26:cf:59:a8:49:aa:b0:
f7:8f:14:64:29:9a:bd:d6:82:0c:ba:82:ec:ff:f7:
56:30:61:c5:a1:ef:76:cd:8d:dc:c2:5c:e1:29:68:
2e:66:c5:0f:f6:fb:73:7d:92:86:07:67:8e:96:f9:
f8:5e:32:47:2c:c1:36:fb:d9:7e:20:5a:c4:6b:80:
c4:ac:01:13:e8:2b:28:a9:63:da:fb:5f:80:a7:c0:
b5:b2:fc:e4:37:f9:6a:2e:d2:9b:d3:40:86:4a:43:
df:23:82:9e:54:88:e2:69:ff:c8:f0:90:a4:56:24:
41:e2:00:45:19:6e:33:b9:0d:29:ad:b0:c2:23:6a:
af:db:ef:7a:a9:b4:f8:6e:a1:7e:b5:08:d6:fa:aa:
15:85:51:de:06:b3:89:1e:90:29:b0:04:04:95:9a:
9e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AC:41:A5:D9:F2:F9:90:64:14:B2:85:41:05:39:D5:70:88:7A:FC
X509v3 Authority Key Identifier:
keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/zqxBpdny-ZBkFLKFQQU51XCIevw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.160.0/23
185.235.147.0/24
188.240.51.0/24
IPv6:
2a10:8b40::/32
Signature Algorithm: sha256WithRSAEncryption
3e:65:fd:fb:fc:6e:b3:c5:a8:0a:ea:05:23:2c:65:c4:67:ac:
29:a9:6c:24:1a:eb:10:8e:2a:9a:6f:08:4d:5d:68:9c:95:bc:
50:25:f2:a7:be:c1:17:54:b9:17:83:c3:b2:26:50:7b:14:21:
d7:81:ac:71:6b:6e:40:82:f9:22:08:2f:07:b6:d8:c9:df:96:
2c:77:fb:a9:d2:50:2b:21:1f:84:ad:bb:ca:c0:09:ab:65:dd:
37:7b:9c:dd:bc:3b:37:ef:cf:0d:e0:ca:24:bd:88:80:43:da:
a1:d8:d9:68:a6:74:64:81:cb:d1:09:a2:e8:c8:42:c7:6f:41:
47:eb:f0:83:22:b5:4f:e2:45:8e:91:5f:78:e0:d7:b9:b6:bb:
71:af:4c:ba:40:65:a3:fe:4a:63:7c:2d:9f:97:f0:f3:f0:87:
d0:db:94:35:8f:9b:e9:07:90:54:92:12:9f:31:c3:19:34:0c:
9f:f1:e7:52:35:b3:55:1b:26:97:a6:28:4a:26:9c:69:f8:16:
91:ea:03:a3:d6:69:ad:55:9b:b0:45:42:01:fa:21:ce:91:31:
77:8a:e7:f5:b4:34:48:3c:09:12:3a:60:de:52:d4:dc:7c:05:
75:c5:bb:b8:96:25:c8:54:e3:0f:b5:3c:09:4c:d6:df:24:51:
3d:6f:86:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 11:08:44 2023 by rpki-client on console-ams.rpki-client.org