Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/ZfvOPyPPc3hZCPQPXgNZybg638o.roa
File: ZfvOPyPPc3hZCPQPXgNZybg638o.roa (raw, json)
Hash identifier: Y3fS/TiyLBTGsZPZrDKFWnZ7jKZM2uikCzNRZWUw+0A=
Subject key identifier: 65:FB:CE:3F:23:CF:73:78:59:08:F4:0F:5E:03:59:C9:B8:3A:DF:CA
Certificate issuer: /CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Certificate serial: 01856BC12093C481ABEF332B6EE4C2BFB7D2
Authority key identifier: 29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/ZfvOPyPPc3hZCPQPXgNZybg638o.roa
Signing time: Sun 01 Jan 2023 05:14:56 +0000
ROA not before: Sun 01 Jan 2023 05:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29286
IP address blocks: 185.20.148.0/24 maxlen: 24
91.102.104.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:20:93:c4:81:ab:ef:33:2b:6e:e4:c2:bf:b7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Validity
Not Before: Jan 1 05:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65fbce3f23cf73785908f40f5e0359c9b83adfca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:12:7b:05:13:34:9d:2c:21:83:c2:5e:c5:
b1:92:28:b0:33:f0:01:a6:c5:3b:23:7e:ee:d0:dd:
db:89:16:fe:18:3d:1f:c8:22:bb:30:02:b9:40:8a:
79:26:5b:17:79:f0:46:8f:c1:c2:9d:51:8c:2a:dc:
08:7b:44:a3:ab:34:b3:f1:3b:c5:ea:87:e5:ff:15:
51:80:8e:04:f6:bc:47:fa:60:f3:34:31:cc:40:a3:
4b:18:fe:3d:f3:fd:53:e8:01:ab:e6:94:1f:22:14:
ba:7a:f8:00:a6:4d:fc:2b:92:97:a0:a5:b7:75:fd:
eb:bd:6d:4b:97:c4:55:87:ae:2c:ff:6b:9c:7e:c4:
70:8d:b7:6d:99:04:2b:30:9b:be:72:31:c8:7c:37:
a9:1b:59:b1:2f:71:64:f9:5d:78:f1:34:44:78:cc:
19:ee:5a:2a:f6:e6:7e:19:77:2e:4b:32:0f:d2:db:
fa:a0:ae:ee:f5:d9:a5:2f:c2:2d:99:90:70:01:15:
b3:d2:b0:12:04:fd:c2:4f:4e:77:3f:64:ff:ce:34:
8a:70:0d:a0:47:dc:69:4a:d0:f1:83:8d:aa:0d:f4:
37:38:26:b6:52:7e:3c:d9:64:dc:0f:d6:c8:87:e5:
45:52:fe:97:b4:26:1b:ce:36:5b:be:2a:f3:4f:04:
23:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FB:CE:3F:23:CF:73:78:59:08:F4:0F:5E:03:59:C9:B8:3A:DF:CA
X509v3 Authority Key Identifier:
keyid:29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/ZfvOPyPPc3hZCPQPXgNZybg638o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.104.0/21
185.20.148.0/24
Signature Algorithm: sha256WithRSAEncryption
66:53:bf:75:cf:7d:47:61:0e:36:8c:9a:1d:ec:fe:31:36:64:
f9:e3:7e:16:8b:1b:15:8b:75:45:33:1a:10:d4:8f:5c:9d:84:
96:bc:ee:26:ed:2f:68:11:d7:d1:e5:b4:96:a3:89:5a:65:83:
35:b2:c6:a1:d4:cd:ea:51:a6:86:7b:46:e4:a8:44:7e:78:e5:
f5:dd:81:7c:26:e9:35:72:d4:1f:16:bb:60:ab:61:cc:f5:b1:
aa:74:23:ed:15:72:e2:d0:0e:12:84:79:c8:ac:e1:dc:b1:30:
03:5f:53:53:15:3c:a3:8a:88:20:df:07:ae:5f:11:f8:5a:8e:
c7:e7:26:d3:0f:64:17:a5:86:22:f2:06:2f:07:11:47:b1:4e:
73:79:53:dc:09:fc:8d:23:ad:80:7b:57:99:ff:91:ec:da:ff:
c9:27:4a:3d:44:92:1a:f1:4b:06:88:2d:e3:f1:df:16:29:13:
67:28:d9:80:cb:33:43:a3:8b:ea:85:03:0e:aa:f5:1f:dc:c6:
38:c9:f0:59:fd:ea:e1:d0:ee:a1:03:a0:13:ca:ea:19:69:ca:
29:dc:4c:84:eb:70:48:67:49:77:84:fe:6e:80:1d:ca:87:37:
93:3d:8f:4d:2f:06:d0:da:03:2a:1a:1b:1e:5c:d7:04:e7:64:
d3:a2:35:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:07 2024 by rpki-client on console-fra.rpki-client.org