Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/1-zc7ShKLTpFit7OCU73n8z-Zlyc.roa
File: 1-zc7ShKLTpFit7OCU73n8z-Zlyc.roa (raw, json)
Hash identifier: q4LLGOmuWnMEl+gAGwHzC1Gea/Vwa6D7F7ITmqWuX9s=
Subject key identifier: FB:37:3B:4A:12:8B:4E:91:62:B7:B3:82:53:BD:E7:F3:3F:99:97:27
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01893429EE694DE9C86F94BE26655B7E8A99
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/1-zc7ShKLTpFit7OCU73n8z-Zlyc.roa
Signing time: Sat 08 Jul 2023 06:21:50 +0000
ROA not before: Sat 08 Jul 2023 06:21:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 185.226.204.0/22 maxlen: 24
185.101.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:34:29:ee:69:4d:e9:c8:6f:94:be:26:65:5b:7e:8a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jul 8 06:21:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb373b4a128b4e9162b7b38253bde7f33f999727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e7:c3:cb:94:af:1d:b1:6b:78:a8:f3:64:f5:
27:3f:31:23:6f:4c:01:6d:0b:10:6d:be:20:ca:cc:
7a:26:ff:c6:9c:2c:19:15:0e:b6:21:ba:df:10:a6:
38:ba:57:06:70:77:d0:e0:44:32:b7:ed:91:10:9d:
f8:1c:a1:a6:1a:83:88:b8:1b:0e:89:4e:47:42:cc:
5f:36:30:48:bb:ee:ea:0f:3f:96:d8:e8:dd:b0:f8:
0b:d9:cb:ea:a5:92:8d:b9:cc:fb:8c:8b:e4:ba:c9:
23:2a:a3:54:69:d8:99:8d:a8:0c:d0:9a:0b:76:a7:
15:0c:29:1f:f5:a5:b6:48:cc:b2:33:63:4a:e7:30:
72:32:98:0e:3c:e1:aa:a4:93:ff:f9:14:39:f6:d1:
f0:b1:21:c3:1a:3a:66:f2:9f:28:88:52:52:ea:b1:
1d:e5:2c:a2:da:fc:f1:0c:0b:36:96:3a:78:ec:69:
e6:18:62:f5:52:63:ea:93:09:3d:d5:86:ca:d8:92:
b6:c8:c6:f8:27:e8:a7:15:a4:77:04:ab:7a:5b:26:
a8:b0:bb:12:7c:84:65:9d:62:8d:f2:9d:34:07:cf:
0e:a8:8b:24:3a:f0:a6:25:34:ca:66:ad:f3:6e:6b:
11:a2:cc:93:6e:4f:2d:16:90:d2:60:d0:72:13:75:
0a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:37:3B:4A:12:8B:4E:91:62:B7:B3:82:53:BD:E7:F3:3F:99:97:27
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/1-zc7ShKLTpFit7OCU73n8z-Zlyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.252.0/22
185.226.204.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:ba:d2:64:45:b1:8b:81:58:5e:2f:f5:c2:3f:0d:3b:e9:eb:
b7:82:9b:5e:2a:12:c3:51:f9:17:f6:07:0f:90:da:cd:ac:6b:
32:17:48:3c:e1:3c:ff:2a:f8:df:f8:c0:c9:cd:b3:1f:e7:48:
df:81:32:77:c1:c2:15:66:fe:bc:c1:a1:72:b2:df:24:0b:a9:
56:66:56:fe:d1:02:46:a8:21:74:92:59:b2:32:1d:ea:c7:ce:
63:a6:8d:2e:7f:27:65:d8:45:eb:0d:e1:fe:c7:6d:54:be:03:
82:42:2e:95:28:ea:55:e9:2a:12:36:67:96:b2:fa:be:ed:09:
85:36:51:01:3d:e4:17:46:a3:d1:fd:1d:12:31:13:16:e3:69:
4d:f9:36:c2:1b:22:f9:7a:cd:8b:2d:f1:7e:87:74:ec:58:b3:
e7:1e:43:77:ac:be:dc:be:3c:57:6b:6f:ee:f9:e5:54:66:b0:
63:26:88:e5:9d:d5:ee:49:36:c6:68:e9:36:4a:d0:d0:62:36:
6f:ae:6e:d9:23:51:eb:61:a1:64:48:c0:fd:1d:b7:72:24:e2:
9d:eb:bf:fc:d2:cb:34:81:1f:d1:c0:87:55:56:6d:04:68:b3:
eb:05:53:89:ba:a1:5c:d2:5f:fe:a0:84:a2:f8:17:66:50:0f:
9f:54:08:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 15:50:08 2023 by rpki-client on console-ams.rpki-client.org