Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/zJJAfYqOS5zmPlnJP9fbTxD5eIA.roa
File: zJJAfYqOS5zmPlnJP9fbTxD5eIA.roa (raw, json)
Hash identifier: RcT6REZx3ppnKbB2r7agcXygtlyqfK3az/B4qurQjnc=
Subject key identifier: CC:92:40:7D:8A:8E:4B:9C:E6:3E:59:C9:3F:D7:DB:4F:10:F9:78:80
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01856E8B57214CEF8DCC6E177CDD663F1E0E
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/zJJAfYqOS5zmPlnJP9fbTxD5eIA.roa
Signing time: Sun 01 Jan 2023 18:15:03 +0000
ROA not before: Sun 01 Jan 2023 18:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 271993
IP address blocks: 45.8.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:57:21:4c:ef:8d:cc:6e:17:7c:dd:66:3f:1e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 18:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc92407d8a8e4b9ce63e59c93fd7db4f10f97880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e3:28:1d:31:24:62:16:d5:7c:44:f9:0c:00:
40:c6:cb:9c:4c:8b:69:04:9b:fd:7e:1b:65:74:f5:
d1:51:9f:39:9d:c4:83:4e:15:47:67:0f:21:a3:c1:
8e:1a:b1:4f:21:55:54:0f:13:9c:9a:9e:7a:c0:6e:
42:a2:45:27:ce:8e:97:21:80:15:a1:1e:ba:6e:3c:
c3:a1:08:ab:51:0b:a1:c0:23:b0:e0:db:2d:30:de:
02:33:4d:ce:30:b1:d5:3c:9e:fd:63:fd:a0:55:52:
20:2b:44:aa:8c:9a:bd:84:bf:a7:ef:9e:9a:47:97:
ac:69:64:6c:d2:58:87:4d:88:ec:22:27:1f:22:d1:
2c:ba:24:57:7e:82:24:89:e6:77:bd:41:de:bf:98:
a8:23:66:33:dd:ee:78:b2:b3:8f:8c:7c:fd:c2:e2:
38:a9:dc:a0:f3:d5:80:4c:e8:e6:cf:52:51:d6:42:
fd:44:6c:3a:ab:76:1a:3f:6d:d6:cd:85:f5:90:8f:
52:59:6e:d4:97:2e:56:18:27:17:6e:0d:04:46:41:
f8:b1:e5:04:0d:9d:ce:43:a8:49:4f:e1:44:07:2e:
21:23:97:e5:1b:43:56:4a:82:83:f3:7a:bb:85:27:
99:2e:f0:34:4a:e6:c3:8f:16:3e:84:ac:8a:f7:3c:
75:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:92:40:7D:8A:8E:4B:9C:E6:3E:59:C9:3F:D7:DB:4F:10:F9:78:80
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/zJJAfYqOS5zmPlnJP9fbTxD5eIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.207.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:80:2c:3e:e9:28:0d:27:2e:16:ad:fc:7d:c8:c1:92:14:48:
09:9b:a6:73:b5:ef:4f:6d:8f:8e:89:b2:7f:f9:0d:8f:11:4c:
17:59:d4:83:f3:39:6e:bb:91:76:40:8d:a3:53:67:f3:c9:0b:
3e:9b:b8:46:03:be:3a:4d:66:70:06:e1:12:75:b8:74:11:4a:
bf:a5:f4:bb:e3:2c:82:59:19:ce:f3:4d:ba:6b:a2:45:45:44:
89:be:1e:a9:3c:c6:63:44:75:03:95:52:b1:d4:19:8b:e7:63:
f7:e1:6e:30:f8:20:45:d3:3d:20:d3:4a:04:06:de:4f:f1:43:
eb:16:a1:6b:f9:81:20:91:24:46:03:6f:a6:da:85:85:62:f5:
e5:2b:19:1e:5e:c8:02:3f:86:b3:98:b1:7b:3c:8a:a9:73:f2:
94:a0:79:1d:c5:de:fb:9d:95:6b:fa:4c:ac:66:f7:64:cf:71:
0d:bc:11:32:2c:18:91:09:ba:92:9d:8f:4f:ea:c3:52:20:20:
30:74:98:0c:c9:17:26:9d:4d:84:74:6e:a0:15:aa:01:03:2c:
34:5a:4d:4d:2c:8a:dd:cd:6f:e3:5a:f4:c4:22:b8:52:4d:2e:
11:39:20:60:25:93:e0:30:9d:6e:2d:a4:99:60:32:39:6c:8d:
7d:b8:4c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:03 2024 by rpki-client on console-ams.rpki-client.org