Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/ZbMQoN0EQJ7IgYS2JpCZtUG4Apc.roa
File: ZbMQoN0EQJ7IgYS2JpCZtUG4Apc.roa (raw, json)
Hash identifier: e5JD9fbQex0gTCHQD8881/v7zPRJldGvY3eRGFSNWPQ=
Subject key identifier: 65:B3:10:A0:DD:04:40:9E:C8:81:84:B6:26:90:99:B5:41:B8:02:97
Certificate issuer: /CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4
Certificate serial: 01856B6EA49BDB9A39DFCF18B0B03554368D
Authority key identifier: 12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/ZbMQoN0EQJ7IgYS2JpCZtUG4Apc.roa
Signing time: Sun 01 Jan 2023 03:44:51 +0000
ROA not before: Sun 01 Jan 2023 03:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41828
IP address blocks: 185.53.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:a4:9b:db:9a:39:df:cf:18:b0:b0:35:54:36:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4
Validity
Not Before: Jan 1 03:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65b310a0dd04409ec88184b6269099b541b80297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:ea:79:23:73:fb:12:ef:1e:17:9e:d9:e6:
dc:aa:14:e1:c0:b1:54:d8:26:e7:e1:7f:87:a4:a4:
e8:e4:dc:22:79:66:55:42:f9:fe:f7:9f:12:c5:c7:
ca:d1:d1:11:d8:97:b1:cd:eb:90:52:d3:3d:ae:73:
48:b2:3c:4c:18:5e:c7:65:aa:af:6e:1a:47:7e:5a:
fd:f8:e0:d1:3c:a9:0c:89:06:76:88:81:e3:b0:02:
e7:f2:07:a7:ec:c2:03:ce:9c:d6:18:25:98:b0:ad:
ce:93:8a:4a:31:a3:0c:34:ba:18:e4:c9:79:96:60:
a8:0f:c7:43:cf:35:fd:a5:6f:c9:ee:32:b4:62:4a:
23:9c:96:aa:29:9c:2d:5e:e5:e7:05:32:05:db:b7:
c2:ae:1e:00:89:63:29:35:74:50:7d:3b:d2:c2:bf:
3f:8f:2e:77:79:1d:34:02:0d:95:1e:a9:e3:08:3f:
f7:50:10:db:d4:dc:bc:8a:1b:49:7f:11:69:d5:a4:
29:87:63:3b:2b:4f:c7:f0:44:32:53:10:a9:65:5c:
fb:9a:2c:8e:59:fe:e6:73:d0:45:18:31:e7:d5:e6:
86:cb:fe:d4:55:65:5d:3f:30:e8:9b:40:19:ca:28:
3c:ab:de:bb:16:c4:08:1c:7f:e9:6d:85:0b:a1:80:
cc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B3:10:A0:DD:04:40:9E:C8:81:84:B6:26:90:99:B5:41:B8:02:97
X509v3 Authority Key Identifier:
keyid:12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/ZbMQoN0EQJ7IgYS2JpCZtUG4Apc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.12.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b2:70:af:49:8b:0e:5a:e4:18:8c:4b:29:bd:1d:c4:f8:c1:
67:d9:47:b3:4e:d2:ea:b9:db:35:ac:a2:a3:38:ea:3b:08:78:
35:e2:7b:72:02:7f:f0:da:dc:b2:b0:ef:15:48:74:c6:b6:49:
aa:56:36:11:48:73:c4:6b:c1:67:69:98:82:c3:71:57:e6:a0:
1d:17:3c:78:d7:8b:64:80:6c:05:98:0b:55:d5:97:44:ea:dc:
e5:16:12:1a:36:d9:59:23:ab:3c:ad:47:14:e7:ae:9b:d5:48:
67:de:09:60:85:51:0d:71:cb:3a:44:75:42:08:a9:75:1c:d7:
7b:ad:f5:38:59:74:30:19:ae:35:cf:dd:bf:7a:e6:39:13:d9:
f5:83:f1:0f:e5:e0:99:a4:ab:95:0f:07:85:c5:52:37:f1:28:
ab:74:0b:40:fd:c9:14:ed:ef:ff:6e:e0:12:4e:f7:45:b9:70:
f9:7a:11:4c:71:73:e1:67:ce:05:9b:c7:34:c6:83:be:37:70:
ba:96:d3:56:b0:5e:79:fe:2b:2e:cd:51:4f:e7:40:2c:d1:cf:
a8:23:54:ae:1c:a4:96:ff:22:55:c4:48:85:85:b3:fd:13:60:
80:73:72:2e:63:4f:41:d3:80:79:a5:6e:c8:bb:2b:88:f8:d0:
68:6b:1f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:51 2024 by rpki-client on console-fra.rpki-client.org