Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/ZpB3aAikEBQGi1_7sUgQfa1D0tU.roa
File: ZpB3aAikEBQGi1_7sUgQfa1D0tU.roa (raw, json)
Hash identifier: y+wfKPlTwg4D3PIPVeRM16sFpA0lWwJZW3tIJLuua08=
Subject key identifier: 66:90:77:68:08:A4:10:14:06:8B:5F:FB:B1:48:10:7D:AD:43:D2:D5
Certificate issuer: /CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Certificate serial: 0186E7BD4B2371D23350A444845892757D6A
Authority key identifier: 46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/ZpB3aAikEBQGi1_7sUgQfa1D0tU.roa
Signing time: Thu 16 Mar 2023 00:06:27 +0000
ROA not before: Thu 16 Mar 2023 00:06:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19875
IP address blocks: 185.156.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e7:bd:4b:23:71:d2:33:50:a4:44:84:58:92:75:7d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Validity
Not Before: Mar 16 00:06:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6690776808a41014068b5ffbb148107dad43d2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2e:62:ce:c6:4f:dd:ee:7a:d1:3a:90:0a:44:
a4:a9:e2:9b:1e:8a:fa:ac:da:f7:28:43:42:09:0b:
a2:5b:7d:0b:3c:96:c8:42:b7:f0:fd:21:93:d6:8e:
da:61:9b:23:37:d8:8d:b8:07:6a:30:af:2b:f2:7a:
11:db:48:83:f7:d0:2b:45:b8:93:cc:75:ad:39:7d:
60:c0:de:83:03:28:9b:b6:d6:8b:95:a2:59:d2:2d:
b8:2f:c8:04:2b:12:12:a3:04:51:4d:5b:da:6d:a4:
24:a6:dd:52:88:71:90:54:75:ea:32:79:9d:51:eb:
c3:fd:6d:5e:bd:fd:2a:d5:f7:b4:d7:26:2f:30:9a:
12:23:10:54:71:50:00:cb:be:fb:ab:93:93:c3:86:
c8:53:57:3a:e0:d5:3a:4c:b1:41:da:e5:e8:06:09:
72:10:06:ef:a1:7c:69:7e:1a:ba:b5:38:8f:fd:3c:
8c:3e:46:5f:16:f3:d4:7f:bd:89:a6:5e:cd:e7:14:
8b:28:8e:b8:8e:b3:df:71:28:87:14:44:b7:89:25:
11:da:f6:5d:cf:a6:1c:51:ec:1b:aa:c2:f8:c6:ff:
f6:30:45:9d:e6:02:47:bf:33:22:03:c8:11:82:0c:
55:0a:c5:fb:b6:ee:08:02:43:77:2b:3e:6c:ad:dd:
33:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:90:77:68:08:A4:10:14:06:8B:5F:FB:B1:48:10:7D:AD:43:D2:D5
X509v3 Authority Key Identifier:
keyid:46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/ZpB3aAikEBQGi1_7sUgQfa1D0tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.184.0/22
Signature Algorithm: sha256WithRSAEncryption
01:85:5e:d6:68:9e:b5:c1:04:42:60:e3:aa:fb:8c:d4:71:c7:
15:0d:34:ab:d6:7c:bf:90:74:17:4d:db:1c:d7:3f:2c:07:5e:
52:59:60:2f:9a:76:1f:2a:84:c3:5f:c6:99:1f:50:ae:5c:03:
26:be:02:68:d2:ea:3b:c4:5e:17:76:03:52:c1:c7:bc:67:f9:
3f:54:9d:85:1b:62:51:e1:a9:d1:ec:4d:1c:5e:6d:f3:7f:af:
a0:5d:93:50:55:49:9b:60:e7:ff:7c:63:11:06:b8:a3:57:a9:
f8:2a:2e:be:b3:7d:f9:75:00:f8:1e:18:2b:1c:a9:dd:83:50:
4d:08:d6:6a:ab:72:d6:92:6e:04:b3:05:be:de:0f:b6:07:a8:
ff:db:5c:0a:e7:f4:39:06:8d:8d:08:02:bd:23:d4:54:d2:73:
28:d4:1a:11:e3:fb:0a:93:f7:45:d7:e5:1c:43:9f:7b:df:44:
75:59:fc:62:3c:20:81:6b:c8:c6:ae:ef:e1:b2:b7:b8:7d:d8:
6a:89:f7:f7:6f:bf:21:76:49:d2:dc:85:c9:3a:75:aa:52:96:
74:0c:ee:6e:73:e6:8b:9c:cd:63:79:3e:f1:3d:a9:f5:6d:ac:
78:98:c7:f2:52:84:f1:01:c6:04:ef:ae:ac:19:12:8b:5a:65:
48:0e:9e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:45 2024 by rpki-client on console-ams.rpki-client.org