Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/7WZTLmLzY9XB7sh81eTKk862QFI.roa
File: 7WZTLmLzY9XB7sh81eTKk862QFI.roa (raw, json)
Hash identifier: 49Iam6751NiAgmoL2v9K2TqipZlS2wcQiNojvBFdHSc=
Subject key identifier: ED:66:53:2E:62:F3:63:D5:C1:EE:C8:7C:D5:E4:CA:93:CE:B6:40:52
Certificate issuer: /CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
Certificate serial: 01856BDC801ABBE5F0DFE874EA615065152E
Authority key identifier: 65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/7WZTLmLzY9XB7sh81eTKk862QFI.roa
Signing time: Sun 01 Jan 2023 05:44:50 +0000
ROA not before: Sun 01 Jan 2023 05:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59397
IP address blocks: 185.75.130.0/24 maxlen: 24
185.75.129.0/24 maxlen: 24
185.75.131.0/24 maxlen: 24
2a03:4d22::/32 maxlen: 32
2a03:4d25::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:80:1a:bb:e5:f0:df:e8:74:ea:61:50:65:15:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
Validity
Not Before: Jan 1 05:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed66532e62f363d5c1eec87cd5e4ca93ceb64052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:49:e3:b8:8f:f2:7b:8b:06:8b:01:80:83:78:
e4:c0:dc:fc:b5:46:e8:67:9c:61:b5:48:28:57:b8:
67:cb:00:2d:5b:f5:b7:03:3f:2a:5b:d4:9e:7e:96:
ef:17:0a:27:27:13:a4:c4:1c:58:7f:f6:ad:01:1e:
f4:40:69:ed:9a:e2:51:99:a2:b8:09:c7:32:00:2e:
f8:07:bc:a9:20:19:c1:f8:64:9c:0b:51:4d:78:9d:
47:e6:f4:8c:7e:02:52:b7:04:c5:08:7d:12:3e:2b:
9e:e1:d1:b7:f8:66:8e:4f:f6:e6:e6:ce:16:a6:ba:
a8:7e:8d:d9:09:b8:c8:4c:77:a9:75:86:ca:be:4c:
ae:8b:b4:8f:5c:af:48:60:4c:74:e5:66:cb:02:4d:
c7:c5:c3:8e:ef:eb:fa:14:de:dd:ca:25:e4:32:c8:
57:aa:98:d4:8e:28:a3:3a:06:4c:44:6b:a0:15:46:
86:5e:d9:48:6d:f3:fc:eb:52:b7:69:8b:48:a9:41:
1d:fc:02:04:d0:0a:a3:c5:52:f1:23:9c:fa:be:ed:
10:e0:58:b5:04:cb:02:36:e6:58:76:2c:ab:28:d8:
04:12:87:85:7d:f6:77:ce:f7:5b:f9:1a:c5:39:05:
2d:35:88:d6:96:3a:f2:c5:06:01:eb:59:27:d9:77:
4e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:66:53:2E:62:F3:63:D5:C1:EE:C8:7C:D5:E4:CA:93:CE:B6:40:52
X509v3 Authority Key Identifier:
keyid:65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/7WZTLmLzY9XB7sh81eTKk862QFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.129.0-185.75.131.255
IPv6:
2a03:4d22::/32
2a03:4d25::/32
Signature Algorithm: sha256WithRSAEncryption
79:b1:ab:fb:c2:cd:58:52:81:fd:6d:7f:c3:04:7f:fd:18:35:
58:60:6e:6d:91:40:fa:f8:74:70:39:c8:72:0d:77:18:8f:7c:
73:3b:d5:a5:2f:41:2a:9e:eb:4d:16:93:5b:c9:69:0f:bf:38:
24:a7:f5:ef:bf:89:f7:58:a0:41:05:7c:e6:91:3a:0f:0e:33:
a2:5c:9d:a4:d4:ce:45:c8:e0:e2:b1:04:4e:d1:2d:91:cd:39:
e5:76:05:74:b8:e3:6a:73:21:9d:e4:8f:d0:d6:5d:55:be:31:
b9:f9:c7:85:ba:44:2d:1c:84:a8:a3:b8:03:29:5c:2c:dd:1d:
0b:6e:e3:c3:0f:c0:c7:f1:25:88:90:14:98:5e:1c:eb:b6:ee:
7f:34:d6:c3:8b:54:da:e8:6b:e9:60:bc:24:2a:a2:ac:b2:7a:
23:5d:a9:fe:6c:90:6d:d8:79:2a:4b:b7:a8:12:49:85:4f:a4:
ec:43:23:73:4e:e1:b3:03:49:79:b8:ee:7f:ab:bf:f5:42:83:
1b:aa:88:f0:91:fd:17:d8:36:ee:8d:6b:be:60:41:dc:80:66:
bc:50:79:31:6e:a4:be:5b:51:ca:61:3d:29:ea:54:b5:24:61:
2e:9f:b9:59:01:3f:d4:4b:b5:c8:e8:f5:62:38:c6:9b:61:ab:
89:e7:33:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:56 2023 by rpki-client on console-fra.rpki-client.org