Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/1ZbnLhxoXXiukPyfUY2hRr0woQM.roa
File: 1ZbnLhxoXXiukPyfUY2hRr0woQM.roa (raw, json)
Hash identifier: 2ItdkH8986vYjOeO3GuIuAXy+NMaP2B7bZ8T1TCONWc=
Subject key identifier: D5:96:E7:2E:1C:68:5D:78:AE:90:FC:9F:51:8D:A1:46:BD:30:A1:03
Certificate issuer: /CN=ef738909f94d9968436bb4e09a2d47cc7901733c
Certificate serial: 018573B195A833DA3DEEB1D73B588C286E80
Authority key identifier: EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OJCflNmWhDa7Tgmi1HzHkBczw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/1ZbnLhxoXXiukPyfUY2hRr0woQM.roa
Signing time: Mon 02 Jan 2023 18:14:56 +0000
ROA not before: Mon 02 Jan 2023 18:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136258
IP address blocks: 185.237.185.0/24 maxlen: 24
185.255.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:b1:95:a8:33:da:3d:ee:b1:d7:3b:58:8c:28:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef738909f94d9968436bb4e09a2d47cc7901733c
Validity
Not Before: Jan 2 18:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d596e72e1c685d78ae90fc9f518da146bd30a103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:89:04:d3:e5:39:d5:cd:46:d3:9b:c9:79:
b7:3d:99:2b:cd:77:9c:94:ca:4b:51:f8:6b:91:6c:
55:ef:d7:89:e5:bd:4c:56:6e:a8:2b:37:e3:71:e6:
4c:fa:20:94:21:5e:78:93:44:3a:53:8b:ab:4a:1b:
23:b1:9a:4a:13:88:6f:87:c7:e7:a7:16:ce:9c:13:
1e:ad:7c:17:d0:f8:93:41:9c:c8:c4:60:b8:25:f2:
46:d6:a0:b4:3e:29:98:e9:50:6c:84:1a:28:56:79:
52:0b:c0:15:04:ea:30:68:4c:54:e3:25:e3:22:59:
c1:86:77:57:bc:20:7b:94:2e:13:09:bb:a7:99:f3:
8c:d8:1d:03:1e:3e:cf:ca:23:c6:0e:72:95:7f:5e:
ed:35:3f:42:17:a8:86:8b:be:8a:7a:30:67:27:7c:
4e:89:47:bd:17:22:9c:ac:5a:9a:ae:8b:1a:78:00:
c0:51:0e:88:70:8f:d5:ae:ae:4f:be:b4:1b:5e:2a:
54:f2:5e:45:41:fd:b2:2b:ef:3b:19:15:a8:b1:66:
7b:be:47:bf:10:7e:0d:f9:26:da:ed:7a:a4:e0:a1:
ab:bc:9a:87:ac:bb:e9:4f:6d:e9:36:c5:06:e4:10:
9e:57:9f:42:83:47:79:26:ef:cd:34:68:15:e7:47:
80:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:96:E7:2E:1C:68:5D:78:AE:90:FC:9F:51:8D:A1:46:BD:30:A1:03
X509v3 Authority Key Identifier:
keyid:EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OJCflNmWhDa7Tgmi1HzHkBczw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/1ZbnLhxoXXiukPyfUY2hRr0woQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/73OJCflNmWhDa7Tgmi1HzHkBczw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.185.0/24
185.255.123.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:a4:e2:e0:c6:24:57:2e:7f:c0:05:66:a5:08:18:3d:7b:75:
68:d4:87:8b:bf:81:fd:09:89:a3:a5:78:c9:b5:53:b0:d1:82:
9c:25:62:27:4c:e5:78:be:7e:dd:14:55:5f:da:38:ee:24:1c:
06:5d:15:65:8d:29:ff:a1:a7:ac:f4:6c:01:4e:95:d1:c4:e1:
0b:43:d7:d5:f4:24:f7:80:67:94:03:24:b7:fb:8d:e9:7a:6d:
6e:8b:14:64:0f:d2:6a:c1:7e:99:5d:c1:16:2c:89:55:c4:28:
04:68:77:1c:95:ce:0a:7d:40:8d:10:50:7c:e7:dc:c3:d7:f7:
7e:b7:92:b4:f4:a0:72:b9:89:14:d3:f4:7c:6d:46:ac:3e:fb:
a4:de:85:01:8d:c6:a3:37:09:fd:b7:4a:99:10:a4:6d:0e:66:
87:e6:03:a9:d7:dd:95:70:a2:0c:8a:79:41:ec:2c:2e:4d:be:
18:ba:c6:47:87:28:c5:e6:d0:53:63:63:3c:a4:cd:a7:61:df:
b2:54:34:7c:af:05:16:b6:2f:58:fe:4e:1c:5f:a7:bb:58:21:
69:70:b0:8d:69:62:91:ca:ce:5e:45:b8:d5:60:d6:17:11:ab:
76:2e:ea:06:d5:68:41:fa:a1:7d:7e:32:32:1b:b5:0b:74:65:
7c:b7:09:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:42 2024 by rpki-client on console-ams.rpki-client.org