Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/ZGFBGr4YWf1Wte-VO0V_UecMt6w.roa
File: ZGFBGr4YWf1Wte-VO0V_UecMt6w.roa (raw, json)
Hash identifier: vAkVi8mQTfgwvIvRvxOZhJ24MfUh+f6LVKBnbI7m8Sw=
Subject key identifier: 64:61:41:1A:BE:18:59:FD:56:B5:EF:95:3B:45:7F:51:E7:0C:B7:AC
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 01856D8AC3DA7F42D5A87D12C2FF91E2BC4E
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/ZGFBGr4YWf1Wte-VO0V_UecMt6w.roa
Signing time: Sun 01 Jan 2023 13:34:48 +0000
ROA not before: Sun 01 Jan 2023 13:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198192
IP address blocks: 185.92.237.0/24 maxlen: 24
158.255.236.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:c3:da:7f:42:d5:a8:7d:12:c2:ff:91:e2:bc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Jan 1 13:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6461411abe1859fd56b5ef953b457f51e70cb7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:27:4d:0c:c0:51:ea:8b:ad:36:56:0b:a6:38:
2f:b2:0a:f0:21:68:34:cd:57:e6:24:29:92:1c:e8:
dd:32:c8:0f:15:37:16:bb:02:03:e8:81:0c:e3:47:
3f:27:95:3a:9b:e4:37:26:1f:bc:60:5f:78:17:f7:
df:d1:58:7c:2b:68:0f:2c:dd:50:10:c3:8b:3a:b8:
73:15:9e:f3:04:44:cd:28:14:b2:f5:75:4c:80:2f:
e3:a6:94:6c:45:58:de:12:91:e0:1e:5e:ac:5e:79:
19:20:62:8c:57:74:36:c3:26:be:10:1c:f9:c3:60:
6e:1f:60:a5:7e:fa:ac:5b:5e:2d:4e:45:c1:0c:47:
1d:6a:4f:56:ec:fa:b6:e2:73:1a:f9:ac:ce:94:ef:
a8:95:45:f8:d7:82:b8:fa:40:99:ce:9a:61:a9:ca:
05:86:3d:d0:59:68:d0:2e:85:5f:86:c8:c3:1a:aa:
72:04:65:c1:23:be:ca:69:3e:10:a7:98:30:46:a0:
d6:2b:2b:be:f7:8d:07:ae:6d:d9:aa:20:49:31:10:
32:58:7b:60:9a:e0:aa:cb:98:de:ec:6e:e0:23:9d:
e4:08:57:dd:64:91:6e:a2:b6:5f:75:61:ac:3b:97:
0c:43:61:00:1b:64:6a:b8:eb:f7:0c:b0:dd:dc:dc:
80:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:61:41:1A:BE:18:59:FD:56:B5:EF:95:3B:45:7F:51:E7:0C:B7:AC
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/ZGFBGr4YWf1Wte-VO0V_UecMt6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.255.236.0/23
185.92.237.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:1d:3d:78:f5:17:5a:28:9a:67:08:2d:1f:f2:f2:89:10:e3:
8d:3a:63:e3:8b:8b:46:14:ec:4b:52:8b:f0:e1:d3:a4:a6:d6:
fa:dc:99:7d:91:b6:37:ec:b9:d7:1a:57:3a:2a:ec:48:d1:3f:
96:da:a0:ae:db:68:8f:87:21:60:76:50:4c:68:37:36:25:51:
2b:ce:fb:10:2c:c7:8f:5c:72:9a:a7:fa:31:f7:61:f1:44:d1:
e1:98:da:94:e0:ae:38:31:f6:4a:d0:6f:da:10:6d:90:4e:d3:
b4:9f:f6:49:21:78:7f:89:93:15:54:dd:37:91:e1:07:78:ea:
b6:32:88:3f:21:48:d7:67:4f:b0:f3:e3:4c:56:aa:1d:c7:db:
ab:6f:8d:ef:ca:b4:41:ad:ec:db:52:ee:f3:ce:7e:b7:18:4b:
17:46:c1:0c:5d:d3:21:58:29:21:a2:b7:9a:bd:cb:8a:3e:6d:
78:8a:cb:e0:c8:6f:3c:9c:eb:94:59:3d:e2:c8:0f:f4:3d:80:
88:13:a1:6f:63:6a:ba:27:ce:92:45:52:ce:44:0a:ba:25:78:
64:fa:ae:ad:35:27:03:26:7c:55:2a:f8:45:50:87:7b:e5:44:
95:b6:47:2d:c0:17:b5:2d:7a:0e:5c:fe:73:df:6e:df:40:8e:
61:df:37:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 13 11:14:16 2023 by rpki-client on console-fra.rpki-client.org