Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/zRBeomqgCsjOOJL_A0hVDKCcmpc.roa
File: zRBeomqgCsjOOJL_A0hVDKCcmpc.roa (raw, json)
Hash identifier: fy3YDtOOygS3oMem6qXNd9ENilSe6EzFaABxTME9cIY=
Subject key identifier: CD:10:5E:A2:6A:A0:0A:C8:CE:38:92:FF:03:48:55:0C:A0:9C:9A:97
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018964C13BAE1150904451D4C68B73F72AF1
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/zRBeomqgCsjOOJL_A0hVDKCcmpc.roa
Signing time: Mon 17 Jul 2023 16:48:52 +0000
ROA not before: Mon 17 Jul 2023 16:48:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 193.9.126.0/24 maxlen: 24
45.10.108.0/24 maxlen: 24
77.83.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c1:3b:ae:11:50:90:44:51:d4:c6:8b:73:f7:2a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jul 17 16:48:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd105ea26aa00ac8ce3892ff0348550ca09c9a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:f1:a0:17:93:bf:0f:c4:4d:1c:e7:1e:d4:
9b:e6:eb:e0:87:1c:70:5a:71:ec:1f:77:d0:43:8b:
72:ec:ca:0b:91:50:65:56:de:1e:f0:54:19:34:14:
a1:7b:61:74:68:fc:b7:62:97:86:72:d5:a5:24:07:
15:b1:a7:a3:50:4c:e8:75:0c:89:5d:ef:67:87:0a:
63:b1:9a:59:d9:9a:fe:59:6e:24:03:41:6a:64:c8:
93:84:ef:1f:b3:c9:29:0d:15:76:fb:a5:f7:f4:35:
13:20:7b:61:3e:12:52:d8:fb:ef:85:c5:fb:3f:db:
40:af:df:85:3e:bb:8e:36:5d:1b:81:df:f6:de:9e:
50:3a:9e:b5:13:48:51:7e:a2:f2:3f:61:76:c4:1c:
9e:35:21:b7:64:fc:89:af:65:58:f5:af:0c:35:bf:
67:97:09:fb:8c:a7:b2:6d:ef:a3:9f:66:a0:23:78:
67:ab:ed:59:f6:6c:e0:47:e3:ce:04:57:86:2b:b3:
70:d8:65:35:2a:e8:80:1e:d2:a0:19:f5:8a:a0:f0:
3c:6d:d0:b9:c4:67:26:cf:0a:09:47:53:69:e9:7f:
e3:03:e7:44:a7:df:6c:fa:4c:61:6d:d9:82:d9:5d:
44:22:fb:ff:d6:00:3f:35:a9:d2:26:39:d1:dc:3b:
2c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:10:5E:A2:6A:A0:0A:C8:CE:38:92:FF:03:48:55:0C:A0:9C:9A:97
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/zRBeomqgCsjOOJL_A0hVDKCcmpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.108.0/24
77.83.80.0/24
193.9.126.0/24
Signature Algorithm: sha256WithRSAEncryption
66:49:4f:9d:a0:9e:fd:13:d4:26:65:63:b9:a3:d2:a0:08:94:
93:ae:d0:3b:76:97:e6:f2:9e:7f:06:7c:51:69:14:26:3d:fe:
a3:2a:7b:94:99:07:d4:06:06:12:25:fb:07:a2:9f:65:41:4d:
40:3d:5f:36:cb:6d:57:b6:3f:98:6e:bb:55:90:80:a3:a1:c6:
c9:07:09:d8:b9:19:35:98:ed:b7:4d:04:57:d8:e4:44:fb:70:
16:5b:cf:43:1a:cf:8d:e4:77:57:fe:b7:81:73:fa:81:59:60:
d9:c0:4b:da:29:ca:e6:09:d9:bc:b7:21:1f:fa:11:cf:50:7a:
f5:17:20:a6:b9:1a:ef:e1:b7:7c:61:9c:3b:4c:11:43:2c:17:
3e:40:f3:22:44:c4:6c:01:61:e4:46:de:7e:aa:66:e6:ac:dd:
a3:dc:7d:61:81:af:80:01:ac:c1:40:d5:1a:84:b7:c5:64:e5:
5d:5a:a5:fd:d1:8e:2a:68:40:8c:29:8a:55:d9:2f:72:46:11:
a8:1e:ba:f8:2c:93:23:c4:8c:6a:c1:81:96:bc:b0:ec:a7:45:
bb:8f:5b:e2:07:ba:8d:a3:15:32:20:af:13:c0:61:18:59:29:
61:04:11:23:3a:26:11:3c:45:95:b8:a7:c2:74:f6:04:b2:c8:
16:18:1c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:58 2024 by rpki-client on console-fra.rpki-client.org