Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/zcE4Vwq73EzqfPEWlT5JZGLcaGk.roa
File: zcE4Vwq73EzqfPEWlT5JZGLcaGk.roa (raw, json)
Hash identifier: kfSDGj7CZhNNyXM32VJ8z+tCC4EI4YqC5ASidGT5K5k=
Subject key identifier: CD:C1:38:57:0A:BB:DC:4C:EA:7C:F1:16:95:3E:49:64:62:DC:68:69
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0186B17A7FE4DFFE931F5AB32D5C4EABF40B
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/zcE4Vwq73EzqfPEWlT5JZGLcaGk.roa
Signing time: Sun 05 Mar 2023 11:14:00 +0000
ROA not before: Sun 05 Mar 2023 11:14:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204650
IP address blocks: 185.243.49.0/24 maxlen: 24
185.243.48.0/22 maxlen: 22
185.215.231.0/24 maxlen: 24
185.124.172.0/22 maxlen: 24
178.239.154.0/23 maxlen: 24
185.26.34.0/23 maxlen: 24
185.124.173.0/24 maxlen: 24
185.124.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b1:7a:7f:e4:df:fe:93:1f:5a:b3:2d:5c:4e:ab:f4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Mar 5 11:14:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdc138570abbdc4cea7cf116953e496462dc6869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:f8:65:23:2b:e0:f5:3e:cc:0f:81:f7:3d:
2d:c9:d1:6d:2b:ca:99:a5:ad:43:00:85:89:f8:4d:
bd:20:19:f8:21:d2:1b:e1:90:d6:e4:58:eb:76:fc:
84:49:5b:26:c8:0f:9c:39:02:c2:03:cb:2e:23:9a:
04:7b:a9:fd:06:3d:df:4d:6b:3e:f6:0c:b5:ef:80:
93:21:1d:c8:09:9a:60:7b:a3:b7:c5:85:f7:8a:5b:
cc:cd:ad:89:46:59:5c:2d:81:22:08:2a:48:c7:b8:
20:6a:81:6c:3e:30:d2:32:09:ff:9e:6a:38:a9:c4:
af:d0:3f:cf:2e:bc:fe:db:66:35:76:3e:0d:3c:d8:
22:8c:66:c0:bf:78:b3:ef:2b:99:68:6a:e2:e8:37:
d2:e4:79:34:bb:f3:3d:24:98:a9:a7:a8:8f:1f:21:
2f:8e:23:79:e4:4d:de:c2:62:a9:81:73:6c:00:d5:
63:7f:2b:0f:c3:5d:89:ed:05:7d:c0:e3:7b:be:eb:
8b:78:1b:26:81:f2:70:73:bc:37:82:0a:18:27:d0:
34:60:1a:d8:1f:69:e1:bb:74:b6:cd:57:2e:63:03:
e3:46:e7:4d:6f:dc:58:4f:a5:46:be:a5:3c:53:88:
bc:a8:5f:a3:55:51:08:2b:18:48:83:20:7d:9e:71:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C1:38:57:0A:BB:DC:4C:EA:7C:F1:16:95:3E:49:64:62:DC:68:69
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/zcE4Vwq73EzqfPEWlT5JZGLcaGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.154.0/23
185.26.34.0/23
185.124.172.0/22
185.215.231.0/24
185.243.48.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:14:f1:5a:1a:29:18:93:f8:98:c1:e8:55:66:89:4c:88:7a:
b2:59:38:41:d3:4d:45:7a:70:32:1c:8b:b9:e4:23:f5:17:4a:
24:22:72:6f:be:b3:de:87:0b:7c:04:52:71:c4:a2:a7:91:27:
c3:fc:96:2f:82:95:0a:a5:ba:74:66:8f:58:38:aa:5d:0c:d2:
60:e7:6e:5e:89:60:ad:d6:ea:aa:f5:48:14:01:da:14:a2:03:
c7:05:5d:52:36:48:23:e8:a1:41:8f:60:b1:0c:bc:b3:07:e1:
9e:a4:ff:d9:dc:ae:cb:3a:4b:18:75:9e:38:85:41:94:f8:32:
52:a7:ba:3b:2f:1c:b5:80:fa:ec:25:a1:50:93:f5:25:88:1a:
07:3c:2a:81:87:b2:49:1b:2c:e4:31:bb:8d:17:06:ef:c5:99:
af:3a:c4:b2:e9:4b:2b:d4:85:b1:c4:9e:d2:26:0e:b2:ca:c5:
11:c9:65:ea:6e:d1:90:76:8a:d4:ff:e8:df:3e:6a:84:41:a4:
4d:10:db:70:80:be:92:03:f6:42:e6:22:16:21:95:5d:ef:d6:
ae:de:74:7f:e2:10:fc:41:73:40:60:69:f1:cf:51:dc:19:27:
6a:b3:2d:03:76:b6:4d:3f:31:31:19:71:d7:54:a6:a3:e6:a1:
fc:88:78:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org