Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/ZLbwdnq5a1oH-Iux1Qn8Lu3gAiQ.roa
File: ZLbwdnq5a1oH-Iux1Qn8Lu3gAiQ.roa (raw, json)
Hash identifier: YehGWgAlAOh7dR8HBkbmVIDod09DmR2+Qxma80xSyl0=
Subject key identifier: 64:B6:F0:76:7A:B9:6B:5A:07:F8:8B:B1:D5:09:FC:2E:ED:E0:02:24
Certificate issuer: /CN=fb751302af7b5cd6bef3717b68367e02b617d2dc
Certificate serial: 01856FF973154490982AA080C9A27FD14376
Authority key identifier: FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/ZLbwdnq5a1oH-Iux1Qn8Lu3gAiQ.roa
Signing time: Mon 02 Jan 2023 00:54:56 +0000
ROA not before: Mon 02 Jan 2023 00:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211067
IP address blocks: 185.213.192.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:73:15:44:90:98:2a:a0:80:c9:a2:7f:d1:43:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb751302af7b5cd6bef3717b68367e02b617d2dc
Validity
Not Before: Jan 2 00:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64b6f0767ab96b5a07f88bb1d509fc2eede00224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c1:84:fb:d7:c2:c3:f1:bd:0a:2e:af:0e:11:
4a:df:85:b2:0f:71:8b:56:3e:d6:b2:8b:db:07:56:
ec:ac:a2:ca:6c:d6:78:f5:c4:29:6a:ce:ac:10:52:
ec:a7:0a:ad:25:92:06:df:82:af:b6:6e:be:3a:31:
3a:70:e9:70:61:ae:42:9d:0a:7a:c6:20:e2:5f:d2:
1e:4e:07:24:ad:cc:30:69:17:87:af:3a:1f:12:54:
33:14:f6:39:1f:af:ee:21:ae:c2:f5:ca:9a:b6:15:
3c:aa:e2:89:bc:fd:30:d0:d1:92:90:84:18:96:71:
9f:b9:2e:13:46:3f:89:fd:92:2f:9c:5c:f4:90:af:
c4:44:03:d8:ef:fc:27:2d:2a:e4:25:96:4e:d9:b3:
da:17:35:a3:4b:c0:24:ad:c8:18:39:a3:2e:80:ae:
b3:61:d2:44:61:4b:90:ef:8b:f3:08:9a:2f:b7:3a:
bb:11:87:60:0c:ce:83:a6:4b:1b:09:3f:48:cf:92:
86:1a:57:44:e8:73:59:7c:b2:d8:15:ed:d6:44:02:
4b:f4:6a:d6:e7:cf:b5:52:07:de:16:a5:44:28:4f:
7a:fe:b4:2c:da:e9:c9:b8:f3:b0:61:d9:87:02:0b:
00:4a:88:06:5f:ae:66:13:26:07:61:f6:03:3e:c8:
43:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B6:F0:76:7A:B9:6B:5A:07:F8:8B:B1:D5:09:FC:2E:ED:E0:02:24
X509v3 Authority Key Identifier:
keyid:FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/ZLbwdnq5a1oH-Iux1Qn8Lu3gAiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.192.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:f9:52:cc:4a:d7:86:7b:51:7b:a9:c0:57:c0:2d:ca:fc:01:
90:61:1e:d2:ff:f9:7d:71:a2:86:6d:32:7d:71:51:13:d0:ca:
91:87:19:c2:e8:44:7e:09:4a:82:ca:c7:ab:9d:e9:a2:01:4e:
ab:74:b3:39:81:d7:d7:32:f8:0f:ce:35:96:a4:8d:8e:46:04:
86:00:7c:f9:2b:f9:cd:15:2e:b7:35:77:f1:4b:0c:28:cb:e2:
51:4f:a4:b0:83:4a:30:57:f4:00:08:91:ff:75:70:1c:b5:1e:
81:7b:86:f0:d5:af:60:51:91:1c:ea:b4:5f:74:cd:de:f8:ea:
7a:25:bf:d9:dd:b7:6d:9d:d3:6b:53:98:c4:9d:28:91:ac:5d:
f2:6f:af:69:fc:69:7f:57:80:62:65:b0:51:8a:e6:e3:f9:8c:
93:42:87:82:b3:ba:55:74:61:cb:af:3c:ba:87:45:ff:0b:e0:
17:6b:94:40:1f:ef:fb:86:55:6d:32:de:ce:b4:fd:b3:20:54:
86:07:6c:37:77:30:88:dd:92:76:0a:24:81:21:c1:df:d8:25:
a6:19:00:e4:2b:a7:13:10:b7:d4:e5:bd:b7:b8:31:86:8a:93:
42:a2:ca:c0:9e:0f:5a:48:bc:b9:6c:f4:ab:c5:95:45:a8:c8:
28:da:03:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:18 2024 by rpki-client on console-fra.rpki-client.org