Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/ZoEXOahetH5bbGgNW4Lq4_LSuR0.roa
File: ZoEXOahetH5bbGgNW4Lq4_LSuR0.roa (raw, json)
Hash identifier: Sxxjru4qsa97hmawEOM11BfRC1BZHLag3hXJF4SP8rw=
Subject key identifier: 66:81:17:39:A8:5E:B4:7E:5B:6C:68:0D:5B:82:EA:E3:F2:D2:B9:1D
Certificate issuer: /CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Certificate serial: 018BB9389DE57A548D8B57D4067172BE7C07
Authority key identifier: 05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/ZoEXOahetH5bbGgNW4Lq4_LSuR0.roa
Signing time: Fri 10 Nov 2023 12:32:57 +0000
ROA not before: Fri 10 Nov 2023 12:32:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203787
IP address blocks: 185.30.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:38:9d:e5:7a:54:8d:8b:57:d4:06:71:72:be:7c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Validity
Not Before: Nov 10 12:32:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66811739a85eb47e5b6c680d5b82eae3f2d2b91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cb:b6:00:e7:4f:25:d4:4a:05:04:30:d0:de:
97:bc:6c:62:fb:92:46:cc:70:d5:3a:71:2c:c8:f4:
c5:e7:4c:16:1b:f7:16:ee:56:e3:3f:8c:2a:93:f8:
32:94:58:5e:54:a8:de:ce:87:db:6c:2f:de:a3:3d:
34:28:cc:af:b4:87:7c:b2:f5:d6:14:06:f5:15:5d:
1f:37:96:5a:58:ee:4d:ed:df:bb:ca:ca:8d:a9:17:
dd:27:b9:11:76:d3:8a:42:e9:cc:b1:39:2d:c4:08:
19:48:17:07:a7:1f:d1:96:32:82:27:89:1d:75:d7:
d1:af:51:27:16:27:4c:43:97:a9:e1:f5:3c:2a:69:
8f:9a:b8:45:c6:7e:75:d7:50:23:23:2a:2e:03:8e:
7f:12:bb:c1:9f:35:00:55:36:2c:50:c3:58:a7:19:
d3:35:6d:c3:9d:16:80:7a:78:f0:96:1e:2b:ad:22:
bc:f4:fa:07:c6:ea:f0:1d:01:2b:59:38:0f:77:9f:
5b:d6:e9:a8:61:a7:e6:03:5a:30:2b:ac:c9:2a:75:
28:f8:19:d9:67:f0:07:1c:6c:32:27:46:c2:3c:9d:
fd:f9:cc:cf:bb:cc:a7:88:f2:39:97:3e:cd:f3:76:
f6:d4:03:68:b8:b5:fe:6f:50:72:ee:cb:03:48:53:
9e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:81:17:39:A8:5E:B4:7E:5B:6C:68:0D:5B:82:EA:E3:F2:D2:B9:1D
X509v3 Authority Key Identifier:
keyid:05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/ZoEXOahetH5bbGgNW4Lq4_LSuR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.111.0/24
Signature Algorithm: sha256WithRSAEncryption
37:23:21:07:3f:67:fd:ff:a2:7c:45:66:a9:b8:72:1b:30:3f:
c8:ec:01:f2:62:71:f0:d5:00:d9:8c:19:20:6f:f8:ce:d0:26:
de:b9:9a:6d:a0:57:b6:09:e6:c5:13:4b:08:84:bd:01:ca:9c:
2b:0b:ff:b7:a5:4a:74:3f:c2:c0:d3:3d:b4:66:95:a5:49:70:
d1:6f:0b:03:75:e1:f5:92:b4:34:c2:8f:a9:ff:7d:25:91:a5:
a3:73:9a:14:4c:32:61:86:55:79:43:8b:ac:96:80:a5:a7:89:
90:c4:c8:d2:1b:20:01:05:03:3c:bf:95:20:14:95:00:56:85:
74:da:53:6b:0e:c9:6d:a8:74:13:79:d0:e4:1f:86:20:48:89:
6a:d8:40:0d:0f:de:04:ad:13:2b:53:82:84:e5:11:8f:90:77:
d9:32:a9:cc:d4:3a:7e:ac:d0:68:ee:5b:e2:86:14:44:cc:28:
2b:3e:4e:e6:c1:9e:ef:eb:6f:0d:34:06:a7:73:2d:03:a5:4e:
a8:87:24:d3:6b:d6:3c:98:8b:86:ef:07:4a:e4:32:a3:66:00:
91:7f:38:c4:c3:f1:2b:b8:4c:da:44:c9:df:4e:75:39:83:cf:
f9:79:3a:9a:b5:b2:a7:de:bd:68:1c:fe:c2:1b:19:00:32:6e:
b5:b3:c1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 17 15:58:22 2023 by rpki-client on console-fra.rpki-client.org