Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ZRsraSxKylAlnqJnpVEsHt77VtE.roa
File: ZRsraSxKylAlnqJnpVEsHt77VtE.roa (raw, json)
Hash identifier: 7WukSNm82SHX/x/KmQccFCpS4K9X171Z4ji9V9zcRh8=
Subject key identifier: 65:1B:2B:69:2C:4A:CA:50:25:9E:A2:67:A5:51:2C:1E:DE:FB:56:D1
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 0185A464243FDD397DB06D0412AA96CCAA7D
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ZRsraSxKylAlnqJnpVEsHt77VtE.roa
Signing time: Thu 12 Jan 2023 05:11:44 +0000
ROA not before: Thu 12 Jan 2023 05:11:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204916
IP address blocks: 84.54.36.0/24 maxlen: 24
194.113.105.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.243.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a4:64:24:3f:dd:39:7d:b0:6d:04:12:aa:96:cc:aa:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 12 05:11:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=651b2b692c4aca50259ea267a5512c1edefb56d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a7:96:23:02:8f:6c:7d:83:28:36:69:75:a1:
14:6f:90:d8:03:2a:77:11:c3:1a:fa:5c:b9:53:15:
72:4d:98:d0:45:5a:1a:7c:4c:f6:7e:8d:c7:ec:54:
f0:76:0a:03:7f:d1:8c:7d:40:b0:6c:14:86:da:f5:
b7:81:20:49:85:07:63:4e:0d:2e:75:23:ec:cd:1e:
f0:8a:02:42:df:cf:a9:c2:83:b0:71:32:cb:23:6f:
21:cf:fe:b5:cc:b9:eb:88:c9:64:ba:96:bc:be:b7:
da:8d:3f:95:c2:03:24:af:0e:75:bc:4e:74:92:c8:
08:b0:df:27:b3:27:12:52:54:a5:f0:17:b8:43:2e:
2c:8e:21:15:28:e5:b1:66:ed:2c:94:b1:de:4c:8c:
6a:8d:22:93:fb:4c:78:c1:29:ac:ea:57:bd:b6:82:
10:ab:63:97:6d:d2:73:59:4f:16:91:b5:81:09:d1:
37:fc:b3:7b:83:16:ef:83:f1:a6:d9:94:bd:f9:c7:
18:68:87:4b:a7:c3:ad:dc:09:10:e2:a5:ba:b2:03:
c9:53:bd:20:5a:59:a4:78:05:1c:8d:3f:ef:01:87:
9e:e0:bb:0b:d8:43:b7:ce:e8:35:b1:80:d1:a8:4d:
21:ed:74:55:ad:3b:24:ba:4b:50:91:73:3f:68:e1:
e0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1B:2B:69:2C:4A:CA:50:25:9E:A2:67:A5:51:2C:1E:DE:FB:56:D1
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ZRsraSxKylAlnqJnpVEsHt77VtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.240.0/22
84.54.36.0/24
194.113.105.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:88:41:bf:f5:46:e2:1e:42:31:ed:61:ef:cd:46:78:11:de:
ea:80:3d:dd:59:de:c2:49:47:43:cd:5f:28:76:69:bd:1b:26:
69:79:e2:36:96:34:2c:bd:f7:49:7b:48:0f:05:e2:79:4e:a6:
bf:e9:1e:b4:b6:f9:20:6f:fc:a7:32:ab:77:62:e4:62:a1:91:
9b:c5:55:6a:e8:ab:65:00:81:ae:d7:27:4d:37:ba:a5:11:da:
7f:f6:8f:13:f0:ad:43:26:b6:ab:96:25:40:21:02:eb:2a:7a:
4e:b3:22:86:ea:00:85:ff:76:14:15:33:ba:c3:bf:e5:b6:bb:
06:ae:2a:60:77:09:13:56:97:b2:5c:66:8e:04:0a:52:09:3a:
e2:42:32:fd:34:b9:b9:67:3f:0b:91:11:dd:3d:39:37:0d:8a:
8e:b0:ba:0c:55:22:70:4f:93:cb:46:a8:86:00:fb:52:20:04:
b4:60:d2:42:5b:96:23:47:ab:1f:d9:da:f0:3b:de:71:a1:02:
19:3a:17:27:04:f2:a9:a0:6f:31:72:25:cb:52:59:c5:de:70:
b6:5f:76:35:53:94:af:30:cd:cb:34:91:c5:98:0b:a5:97:57:
5c:88:b6:ec:e9:e4:72:83:2e:1d:a6:3e:85:39:38:8c:1e:d9:
76:99:ff:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:32 2023 by rpki-client on console-ams.rpki-client.org