Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/8ZzcUznu_i8wbQmpsOqY8DN-yCc.roa
File: 8ZzcUznu_i8wbQmpsOqY8DN-yCc.roa (raw, json)
Hash identifier: bd6x8x73GUpkyZwIODur+72Q8W5Yd0X0SOW1I3+jHlA=
Subject key identifier: F1:9C:DC:53:39:EE:FE:2F:30:6D:09:A9:B0:EA:98:F0:33:7E:C8:27
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 0185718C0EF6A2BB831083F8B0059CC7047E
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/8ZzcUznu_i8wbQmpsOqY8DN-yCc.roa
Signing time: Mon 02 Jan 2023 08:14:42 +0000
ROA not before: Mon 02 Jan 2023 08:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210759
IP address blocks: 185.204.97.0/24 maxlen: 24
185.204.96.0/24 maxlen: 24
185.204.98.0/24 maxlen: 24
2a0a:f540::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:0e:f6:a2:bb:83:10:83:f8:b0:05:9c:c7:04:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: Jan 2 08:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f19cdc5339eefe2f306d09a9b0ea98f0337ec827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fd:21:56:2c:b8:f5:86:06:82:86:4c:3c:d7:
1a:36:8d:1f:38:da:26:78:b4:d1:dc:50:4a:69:72:
9c:94:43:5c:c5:d2:48:7d:f8:3e:ec:c3:0c:d6:da:
6a:96:69:6e:87:31:cf:43:a3:fb:83:9e:45:22:84:
94:39:1e:96:b7:83:cf:7c:2a:24:cb:28:82:ce:2c:
48:43:3e:66:92:73:5c:87:54:d1:85:09:d7:a3:03:
3e:80:a5:65:b7:3c:af:68:8a:4b:2f:25:f9:47:10:
44:cb:b5:51:87:16:f8:c8:ef:b7:fc:a9:7d:6a:73:
05:7c:d6:92:21:7f:74:77:c8:8f:f5:37:c2:f2:3e:
7c:d3:12:c6:0e:e8:52:8a:9f:ec:2c:bc:d9:09:5f:
6a:ba:08:a0:ee:85:42:eb:97:b7:fd:27:6b:30:91:
57:b0:d9:98:1b:ef:ed:ab:9e:69:6a:85:13:fb:e7:
14:4f:4e:a8:62:9d:c7:cc:dc:9e:64:02:ee:cd:9f:
5d:a1:68:a2:e5:73:f4:fe:dc:8d:c9:6a:c2:01:10:
fb:b9:e2:27:ad:8d:48:31:90:99:d4:92:e8:84:54:
08:42:44:07:b5:fc:96:4d:0e:8c:1d:00:bc:9f:9f:
55:ef:79:3f:3a:11:bf:32:97:4b:fd:e8:3f:ab:ac:
60:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9C:DC:53:39:EE:FE:2F:30:6D:09:A9:B0:EA:98:F0:33:7E:C8:27
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/8ZzcUznu_i8wbQmpsOqY8DN-yCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.96.0-185.204.98.255
IPv6:
2a0a:f540::/29
Signature Algorithm: sha256WithRSAEncryption
7b:66:d6:e2:5c:37:7d:ed:30:22:d3:15:41:87:76:1d:6d:4f:
ac:b3:5b:89:0e:37:55:7d:56:06:89:64:ab:cb:de:ff:51:86:
7d:2b:51:01:d6:d8:b4:94:b0:65:d8:2e:b5:b8:20:b1:25:7f:
06:7a:e3:15:ec:c4:69:c9:92:07:ce:61:11:f2:7b:c6:64:67:
9e:09:b8:74:a4:55:c8:3a:74:47:f3:05:b2:04:6e:b4:3a:77:
ff:c0:6e:3f:ad:14:d0:9c:92:b1:a0:fb:4f:59:55:c4:1b:5a:
4d:be:62:a2:76:22:09:00:21:00:82:1e:f7:16:6c:50:cb:d0:
d9:a6:c3:72:3a:7f:2c:27:bc:47:e0:13:6b:41:1c:86:c2:ee:
5e:2d:7b:b7:fa:14:40:3d:51:68:de:ff:b1:da:d0:fa:21:a1:
7e:00:5c:7a:9f:3c:82:b5:1b:86:86:1a:db:5f:50:c2:c6:26:
66:f2:7a:cf:8d:98:95:33:90:26:d9:c4:db:f8:75:19:ee:11:
c8:f7:56:72:0e:1a:24:d4:e8:a4:39:35:8d:a5:a8:00:72:68:
90:5f:ee:b9:00:b3:06:06:3f:9a:a2:68:87:6b:82:bc:72:eb:
48:41:94:51:d0:22:b8:80:76:21:ba:2c:d8:91:f6:d1:5b:b9:
9c:ec:bc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:13 2024 by rpki-client on console-fra.rpki-client.org