Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/0KzN67QR7S__bbU6OSqGElklBhg.roa
File: 0KzN67QR7S__bbU6OSqGElklBhg.roa (raw, json)
Hash identifier: rXRkbFpWt2ykJXqQ17fAKvfQy52qcYldKRwN3ogfeJk=
Subject key identifier: D0:AC:CD:EB:B4:11:ED:2F:FF:6D:B5:3A:39:2A:86:12:59:25:06:18
Certificate issuer: /CN=500db1715052253bf523f140b9f5637a11d5e9af
Certificate serial: 01856ED49EF69EC9DD75895555A1C830BF14
Authority key identifier: 50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/0KzN67QR7S__bbU6OSqGElklBhg.roa
Signing time: Sun 01 Jan 2023 19:35:05 +0000
ROA not before: Sun 01 Jan 2023 19:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29326
IP address blocks: 176.67.88.0/21 maxlen: 21
185.103.64.0/22 maxlen: 22
2a00:89c0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:9e:f6:9e:c9:dd:75:89:55:55:a1:c8:30:bf:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500db1715052253bf523f140b9f5637a11d5e9af
Validity
Not Before: Jan 1 19:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0accdebb411ed2fff6db53a392a861259250618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:3c:fb:d6:43:ef:da:88:95:c1:ff:5d:46:
3f:79:aa:0d:ec:d8:e7:ee:be:93:95:c9:f7:7e:30:
78:68:58:47:4b:2b:f6:b1:d6:ee:e5:6a:89:f6:13:
4f:ec:67:20:d4:4e:b0:2e:d9:ed:8b:b1:0d:5b:52:
cd:7a:c8:a1:5e:f0:0f:aa:c5:9a:e9:33:13:f8:4d:
fc:c0:de:f1:98:41:2f:7b:70:a8:15:60:9b:85:f6:
4b:5d:c7:2a:e9:66:c6:2a:7a:b5:4f:a7:0a:1a:39:
f8:b6:c9:81:e6:83:4e:d9:0f:9a:f2:7d:0e:86:be:
d5:a6:62:50:ae:cd:9f:9f:2d:4e:f9:43:55:24:71:
33:6d:77:8d:b3:b8:bc:30:6d:8f:a7:73:ed:e8:46:
d7:42:56:35:6c:ba:32:a2:4e:20:fb:66:e8:b4:83:
41:0b:7f:98:70:88:c4:04:98:99:56:5c:dd:80:cb:
64:58:99:19:a0:3d:88:62:b5:63:5d:8b:cb:02:b9:
ae:4f:f7:8d:da:8a:d0:43:ee:c3:40:43:bd:d3:da:
79:bd:3a:b7:42:71:92:44:1e:04:a6:e2:b5:22:08:
62:b3:bb:49:4f:79:11:cb:77:30:70:e0:32:b0:a2:
be:6e:13:b9:45:2e:a7:3b:c8:64:c4:90:a9:68:37:
29:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AC:CD:EB:B4:11:ED:2F:FF:6D:B5:3A:39:2A:86:12:59:25:06:18
X509v3 Authority Key Identifier:
keyid:50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/0KzN67QR7S__bbU6OSqGElklBhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.67.88.0/21
185.103.64.0/22
IPv6:
2a00:89c0::/32
Signature Algorithm: sha256WithRSAEncryption
87:02:7c:f9:8e:87:9e:22:9e:85:b9:f7:15:c6:f2:a6:eb:83:
6e:4d:91:7f:76:ea:90:02:d6:d4:22:0b:41:5c:b9:b1:03:2a:
a0:ec:c5:a4:52:44:da:5d:64:d0:39:60:ea:bd:cc:98:cb:11:
20:b6:4b:34:f6:c0:54:4e:61:77:a1:69:13:68:c3:7b:7b:35:
36:f9:a0:13:56:7c:0f:d0:36:4d:cd:7c:32:e6:5c:3d:d4:b9:
14:27:fc:9e:83:05:74:30:65:40:0f:b7:98:c1:c2:6f:8c:c3:
fb:e6:91:57:67:fb:98:4b:21:d5:d9:77:c4:4e:88:ff:30:31:
23:83:2f:74:5d:67:6e:5a:1f:c2:e5:1f:9e:f6:d5:c7:d5:37:
38:3d:cb:fb:82:cb:bd:e0:fa:1e:c6:ac:c9:38:75:93:d7:06:
ae:c0:01:fa:d6:6a:2b:41:38:88:6c:e2:4c:c1:3f:f2:f0:e1:
8f:e1:eb:e4:b5:4e:9a:6f:d5:a7:21:aa:ed:c8:77:da:49:3e:
46:d0:11:4a:31:12:3c:b5:69:2b:90:35:2d:b0:45:10:86:f7:
ca:85:b1:78:4d:a9:8a:32:0d:c3:32:78:17:6d:27:19:90:a0:
d7:c2:52:f0:0f:f0:0d:ee:62:af:be:76:d7:1e:87:dc:82:13:
24:af:fe:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:10 2024 by rpki-client on console-fra.rpki-client.org