Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/zdzlLVZKRjQKZnC3pgLR6T5JFPY.roa
File: zdzlLVZKRjQKZnC3pgLR6T5JFPY.roa (raw, json)
Hash identifier: z9ueAgTb4BMet5bfsuG3TWyB/vNBtQuFq8l6fBp9l3c=
Subject key identifier: CD:DC:E5:2D:56:4A:46:34:0A:66:70:B7:A6:02:D1:E9:3E:49:14:F6
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018A6B1E2E4E865D9BEE13E891559745414D
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/zdzlLVZKRjQKZnC3pgLR6T5JFPY.roa
Signing time: Wed 06 Sep 2023 15:30:54 +0000
ROA not before: Wed 06 Sep 2023 15:30:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47913
IP address blocks: 194.33.36.0/22 maxlen: 24
185.166.160.0/22 maxlen: 24
141.98.132.0/22 maxlen: 24
92.119.40.0/22 maxlen: 24
185.149.20.0/22 maxlen: 24
45.83.116.0/22 maxlen: 24
45.89.100.0/22 maxlen: 24
31.12.92.0/22 maxlen: 24
45.88.148.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6b:1e:2e:4e:86:5d:9b:ee:13:e8:91:55:97:45:41:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 6 15:30:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cddce52d564a46340a6670b7a602d1e93e4914f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:40:b0:5e:1e:e0:f0:79:5f:58:0f:e0:74:35:
eb:0a:87:71:ef:38:4e:34:b0:0b:c1:f8:b1:30:a2:
45:f5:2e:65:39:ec:23:72:0c:14:3c:66:b3:e4:84:
2c:00:c6:1c:13:fd:9c:0b:ab:d1:4b:bf:57:e3:d0:
60:09:74:7c:88:f9:37:60:28:73:3f:fb:de:6d:52:
2b:6e:17:20:3c:7d:c7:05:e3:cb:6d:d2:e4:1c:bf:
f1:af:04:a1:f0:f2:c4:6d:f2:4b:31:ec:b2:16:a6:
09:69:11:fb:39:32:f9:7d:85:44:cb:1b:0c:12:18:
64:d8:0d:cb:7c:1c:e8:7e:42:63:12:eb:6c:51:16:
c5:2c:9f:0f:93:38:49:5f:d5:41:65:13:a1:72:fe:
33:69:53:e9:2e:71:ee:58:ee:5c:9d:9d:38:02:05:
1c:38:bb:c8:3f:bd:f4:af:b0:69:22:c3:e4:a9:00:
33:ff:ea:67:d5:c3:40:47:07:9e:de:05:dc:8e:01:
d9:ce:1f:ad:bc:11:75:99:8e:9e:b4:61:97:f4:01:
b8:a7:ac:8a:4e:7a:2d:80:35:97:52:ce:43:26:4b:
d0:36:01:92:14:fb:d2:b7:4f:12:d9:d2:02:d2:c2:
c6:e5:2a:29:e2:2e:ef:77:f5:2b:1b:1f:b2:26:e7:
1b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DC:E5:2D:56:4A:46:34:0A:66:70:B7:A6:02:D1:E9:3E:49:14:F6
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/zdzlLVZKRjQKZnC3pgLR6T5JFPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.12.92.0/22
45.83.116.0/22
45.88.148.0/22
45.89.100.0/22
92.119.40.0/22
141.98.132.0/22
185.149.20.0/22
185.166.160.0/22
194.33.36.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:42:81:f7:b3:d5:99:fe:3b:bc:24:2b:22:96:42:ae:d6:df:
f7:35:7c:4f:8d:86:b5:7a:55:c1:31:a1:8d:0d:27:56:c9:b6:
9c:a4:6a:6a:ff:40:07:a1:6f:93:05:d6:8a:bb:ca:94:e8:fe:
02:2a:c6:48:47:19:e8:b7:74:f4:2c:4f:6f:cd:7b:c2:e3:35:
cf:e0:7c:6a:9f:9d:0d:6a:78:7c:33:54:e1:6c:eb:a3:18:72:
71:1d:00:a1:24:52:86:dc:c9:48:3c:28:c6:7b:42:33:84:af:
60:f9:d7:e7:d0:b1:2d:33:b5:95:37:f2:fc:9f:a3:68:46:90:
03:04:c9:89:9a:c5:31:0c:44:91:35:69:b5:5e:03:a4:a3:8b:
6d:86:e2:b8:66:9b:bc:2b:c8:88:7e:72:ca:35:3c:3c:d2:3a:
37:6b:8f:ae:29:bd:0d:f7:af:0d:f5:cc:1c:13:b9:4e:af:4c:
38:05:89:04:50:0f:72:19:13:c2:21:50:9c:db:0b:0b:b6:68:
9a:73:08:7c:3a:5e:4b:64:e7:f3:01:dd:af:19:db:13:50:71:
24:cf:c9:60:90:7e:c4:39:e6:45:9a:25:27:6d:a6:82:3e:8d:
df:41:89:6e:34:e0:a5:7a:56:60:cc:07:bb:78:70:9a:37:9c:
48:7d:1d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 9 05:01:14 2023 by rpki-client on console-ams.rpki-client.org