Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/zU0vM-SkyXnlBudpdeqRpHMeY5s.roa
File: zU0vM-SkyXnlBudpdeqRpHMeY5s.roa (raw, json)
Hash identifier: iPIAq6wsxIO4el7sb1HCqzQFKdKUkoHUfZChJ4FGFF4=
Subject key identifier: CD:4D:2F:33:E4:A4:C9:79:E5:06:E7:69:75:EA:91:A4:73:1E:63:9B
Certificate issuer: /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Certificate serial: 0185725593E5C6D7DFB4C1CC6E27A8FE460C
Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/zU0vM-SkyXnlBudpdeqRpHMeY5s.roa
Signing time: Mon 02 Jan 2023 11:54:48 +0000
ROA not before: Mon 02 Jan 2023 11:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13030
IP address blocks: 185.29.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:93:e5:c6:d7:df:b4:c1:cc:6e:27:a8:fe:46:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Validity
Not Before: Jan 2 11:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd4d2f33e4a4c979e506e76975ea91a4731e639b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d4:48:4f:a4:32:88:46:90:b7:3c:b8:c0:a2:
d8:f2:a0:94:d2:90:c5:8b:fd:9e:9f:76:80:98:4d:
82:8b:88:85:69:1f:0b:0f:2b:18:44:02:dd:55:53:
94:a0:45:9e:02:a5:fb:ed:df:0e:a6:be:c3:30:2d:
7e:3c:91:00:53:4b:1d:a4:b6:ac:92:81:1e:6f:57:
5b:a4:2e:dd:9d:23:a0:27:bd:66:3b:42:be:90:2f:
49:d8:9c:89:e3:97:d8:f6:05:24:f7:ae:e8:09:5c:
90:84:8e:db:18:aa:1d:c7:19:4e:10:1f:c1:bd:0b:
fa:a6:f0:32:f3:b7:da:74:9a:9e:f9:99:2e:ed:0c:
d3:0e:ee:cf:dd:19:71:08:3a:87:58:56:75:65:65:
aa:2c:ec:27:98:13:a8:55:2e:f4:b5:ec:6f:89:e7:
c6:85:ed:2f:99:0a:78:be:19:f9:da:b3:6d:e5:6d:
fe:c4:db:17:c7:de:00:23:07:17:2e:94:21:cd:81:
a9:63:ad:2c:e4:39:5c:63:46:07:d4:aa:8c:95:c0:
04:50:39:b4:d2:8e:19:23:e6:81:df:3e:be:c1:2f:
aa:cc:45:00:40:48:2a:ee:3e:db:aa:19:e6:fd:e6:
c6:2f:52:de:b8:ef:3d:19:c4:65:7e:c1:6e:59:31:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4D:2F:33:E4:A4:C9:79:E5:06:E7:69:75:EA:91:A4:73:1E:63:9B
X509v3 Authority Key Identifier:
keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/zU0vM-SkyXnlBudpdeqRpHMeY5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.76.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:ad:bc:00:7c:ee:bc:b5:05:5a:f7:5b:e9:f6:49:22:4c:f9:
41:d9:71:4c:a4:47:7b:50:62:e5:3f:94:a4:c7:5a:9e:25:43:
78:5b:ee:82:b2:50:29:83:36:67:42:f0:a0:04:fa:10:b0:18:
45:5d:01:df:a6:78:23:92:83:94:aa:3b:43:9f:46:d7:5e:6b:
28:a3:c4:05:c9:51:3b:bd:8f:8a:5d:ac:8c:03:a4:ca:5e:2f:
17:26:99:87:60:37:08:e1:ed:57:06:4c:f0:18:be:df:e8:2a:
0b:d0:f1:2f:26:dd:6e:46:5c:62:98:c1:6f:b8:9c:99:76:3a:
fa:b9:7b:1b:6e:be:f1:9e:2c:e9:47:ee:97:41:7b:3d:19:06:
03:f7:55:7e:1b:1a:56:0a:28:17:19:e5:81:c8:7c:df:26:98:
4d:ca:fb:b6:1a:c1:c5:f0:d1:c5:c4:69:ac:f6:5d:4f:b6:d2:
4d:96:c1:87:a2:66:8b:80:14:d8:aa:d9:ce:87:86:2b:b6:46:
e2:00:df:cf:01:31:8b:15:b2:7e:a8:20:e1:00:b7:57:67:65:
f0:c3:29:56:c1:1c:f9:a7:3d:3f:47:18:b4:7d:de:40:2a:37:
2c:92:97:fa:53:66:9b:8f:96:6a:dd:51:fc:69:48:e7:37:e6:
ac:9b:c8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:01 2024 by rpki-client on console-fra.rpki-client.org