Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/cZ91yNuvMqknRZmaqT_6ZFzsZYE.roa
File: cZ91yNuvMqknRZmaqT_6ZFzsZYE.roa (raw, json)
Hash identifier: suw7rVz2yEetvKr8JcLytLwagNt48ngOZBPaDFdazGE=
Subject key identifier: 71:9F:75:C8:DB:AF:32:A9:27:45:99:9A:A9:3F:FA:64:5C:EC:65:81
Certificate issuer: /CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Certificate serial: 018570D54B4EF2B4CF25D49594D9A83CDCD5
Authority key identifier: C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/cZ91yNuvMqknRZmaqT_6ZFzsZYE.roa
Signing time: Mon 02 Jan 2023 04:55:04 +0000
ROA not before: Mon 02 Jan 2023 04:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.36.216.0/22 maxlen: 24
194.247.26.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:4b:4e:f2:b4:cf:25:d4:95:94:d9:a8:3c:dc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Validity
Not Before: Jan 2 04:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=719f75c8dbaf32a92745999aa93ffa645cec6581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0f:1c:ea:13:23:05:41:db:e8:b5:45:8f:ec:
a6:34:0a:41:d2:cb:0e:b9:97:45:29:64:71:1e:43:
95:38:94:b9:44:15:eb:4c:ea:6c:71:38:0f:34:69:
51:4a:89:54:dd:39:d3:77:a9:d7:e6:d6:73:5f:44:
a3:df:58:fc:93:70:80:05:7b:cb:02:4b:e8:e1:b8:
7f:7d:97:2d:b1:e6:f6:18:56:40:b7:3d:c0:f2:a8:
55:dc:f0:06:b8:ef:2d:e1:d3:7b:b7:d8:3b:88:93:
2b:66:4b:d5:6c:17:7f:f5:12:70:b2:68:bb:8b:e2:
54:c4:5f:eb:60:92:b0:6a:9d:90:ae:12:b1:72:aa:
3a:c3:3d:a7:3a:d2:9f:c4:6a:ee:04:5d:62:c2:96:
06:8a:81:0f:88:0c:d7:76:6e:78:fc:cd:bc:6d:41:
86:81:a5:5e:d4:e2:18:4c:0d:7b:27:99:30:d8:f6:
eb:ac:1d:e5:39:54:dd:bf:5e:b2:b6:a7:cf:2b:32:
2c:7c:a1:92:5d:5b:33:ed:05:52:8d:83:97:0a:3f:
65:2c:3e:fa:d2:6d:44:68:0c:c1:0d:bf:b1:27:ab:
f3:d3:c4:49:d6:ac:e1:05:0e:8c:17:e3:5a:65:e8:
71:05:be:5e:ef:98:b4:6b:8f:1d:86:4c:cc:1a:5c:
5e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9F:75:C8:DB:AF:32:A9:27:45:99:9A:A9:3F:FA:64:5C:EC:65:81
X509v3 Authority Key Identifier:
keyid:C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/cZ91yNuvMqknRZmaqT_6ZFzsZYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.216.0/22
194.247.26.0/23
Signature Algorithm: sha256WithRSAEncryption
41:c8:39:aa:f7:01:f2:09:ef:c5:64:75:0e:17:e9:58:fd:df:
52:f3:f5:c7:4b:49:dc:ac:7b:36:0d:63:b3:15:6c:6f:90:7b:
36:fa:10:06:b7:5c:40:b0:5b:f7:00:aa:fa:03:da:90:ea:c2:
89:88:b8:43:ed:33:14:85:5d:53:de:91:23:89:c4:0d:cb:e0:
7b:1a:f3:9f:14:0e:09:30:6c:db:5e:b0:27:76:bc:fa:0e:76:
76:f8:29:98:91:7c:28:49:40:47:87:8e:aa:49:37:89:49:bc:
07:28:da:19:83:cc:a3:b5:7b:9e:44:c9:16:d9:a2:38:fc:fc:
8b:1b:37:4f:f7:f2:07:0c:4f:58:30:70:05:d1:24:c5:d3:1e:
0f:74:a0:19:38:d5:3d:09:7b:a7:51:b4:f5:46:70:0e:f3:ef:
54:03:7d:4d:33:75:68:12:71:5e:c2:fa:15:94:d4:c6:81:9e:
47:d2:46:92:6f:8e:bd:33:96:99:be:2f:26:8d:28:f7:80:b0:
e2:6c:57:74:50:6d:06:4e:83:01:ca:26:a2:5c:b3:ae:20:7b:
09:8f:fc:bd:d9:11:26:92:db:6a:4d:65:1a:93:a5:e4:9f:a0:
45:cf:f6:e1:13:64:11:d6:8b:16:a4:30:61:98:ab:50:68:fc:
4a:77:da:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:10 2024 by rpki-client on console-fra.rpki-client.org