Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/ZdH07NrPU1cKnY5CSmYiESIOKsM.roa
File: ZdH07NrPU1cKnY5CSmYiESIOKsM.roa (raw, json)
Hash identifier: UMaZXXUXd/B3jS9nfka10TI97DXrNfCj8L29dH47jV8=
Subject key identifier: 65:D1:F4:EC:DA:CF:53:57:0A:9D:8E:42:4A:66:22:11:22:0E:2A:C3
Certificate issuer: /CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
Certificate serial: 01857355DB4D3D632B2F2702BBC6F3336A22
Authority key identifier: 22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/ZdH07NrPU1cKnY5CSmYiESIOKsM.roa
Signing time: Mon 02 Jan 2023 16:34:44 +0000
ROA not before: Mon 02 Jan 2023 16:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211046
IP address blocks: 91.205.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:55:db:4d:3d:63:2b:2f:27:02:bb:c6:f3:33:6a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
Validity
Not Before: Jan 2 16:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65d1f4ecdacf53570a9d8e424a662211220e2ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:66:9c:af:9c:27:fd:36:57:e4:b3:ae:04:
e8:84:0d:33:2f:f8:3e:75:0e:ef:50:07:86:e3:b1:
e2:ba:d2:05:f7:8a:ef:a6:be:e5:2a:87:d3:70:d7:
6f:09:7a:95:b3:b7:56:72:1e:a1:13:2c:c5:de:32:
97:c1:44:9f:e8:83:85:73:c7:01:a0:a5:a6:5c:dd:
d6:78:f9:d6:bd:19:e1:4c:5c:97:5e:88:4f:20:f7:
40:1f:0e:b3:ac:f0:4b:e3:42:ce:5b:ea:82:e2:e1:
e9:b6:e7:12:82:50:a1:ab:57:d7:57:48:81:a9:de:
ee:0b:96:cb:de:ca:d1:8c:9c:01:c9:95:50:3f:d0:
82:fc:80:d7:bf:78:cb:60:a5:1a:46:86:03:0f:e9:
7e:dc:34:2d:0c:7b:bb:71:68:4b:91:ee:19:e0:dc:
39:66:7e:b8:83:fc:bf:58:40:70:d1:90:2b:7a:76:
d6:a9:53:28:82:7f:c2:08:e0:c0:df:b7:f9:a4:19:
48:b0:33:d4:d0:ea:ea:73:1d:d3:3e:45:8e:d2:1d:
ce:a0:13:8b:6c:e9:27:8d:47:6e:2a:60:1c:cd:b7:
e2:f7:42:37:27:16:a8:bc:a3:6b:4b:c1:fb:54:d2:
0e:11:b5:05:7b:91:00:cf:a2:fe:8d:69:6e:7a:8a:
88:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D1:F4:EC:DA:CF:53:57:0A:9D:8E:42:4A:66:22:11:22:0E:2A:C3
X509v3 Authority Key Identifier:
keyid:22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/ZdH07NrPU1cKnY5CSmYiESIOKsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.222.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:83:b6:66:b6:e3:e1:ce:79:db:be:a2:71:97:2a:13:b0:d5:
b4:a9:bb:aa:c0:9d:a8:16:23:f3:19:1d:e6:e6:1c:c4:68:11:
ed:0e:e8:4c:31:ba:9b:8e:3c:3f:46:e1:ea:2f:e7:38:23:4b:
58:41:5d:50:6e:be:65:c3:51:ea:08:27:26:f5:13:a7:45:ae:
a4:c4:29:3e:5a:0b:20:a8:65:4c:4b:24:c7:3a:dd:54:a2:dc:
52:5b:3d:b9:d8:ff:39:52:28:77:b7:f9:4d:7e:c2:5b:61:82:
68:e5:f8:9d:ca:9a:07:73:70:66:47:6c:4d:b8:22:65:cd:4c:
b8:7f:d1:ae:56:08:c0:50:6b:44:a3:51:8c:74:15:e7:71:36:
a4:37:3c:4a:0c:d5:8c:40:0e:c5:74:88:9d:a4:76:43:f0:c3:
05:f4:4a:3e:34:ec:c5:e3:d8:d5:82:ff:99:fa:6e:0e:2f:3f:
41:58:45:dc:67:86:8b:ef:8d:9f:57:bb:d8:fe:0c:21:5b:5e:
3a:e5:c1:c4:97:b9:bc:26:4b:7f:9d:74:7d:9d:8c:1f:fb:ab:
b7:5c:fc:6d:e1:32:c8:54:79:d8:2d:2b:95:7e:7f:d8:bd:6a:
6a:6a:d0:0a:a7:f3:a1:4b:3b:54:62:41:24:40:be:5c:23:d2:
cb:64:5c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:09 2024 by rpki-client on console-ams.rpki-client.org