Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/zvsbYpDZ2QCi0lsI2G_Z2hVxKGE.roa
File: zvsbYpDZ2QCi0lsI2G_Z2hVxKGE.roa (raw, json)
Hash identifier: EfSlt6W2wcx6g/1kWoR1spDvFn6z9/HNbxe9BctenNE=
Subject key identifier: CE:FB:1B:62:90:D9:D9:00:A2:D2:5B:08:D8:6F:D9:DA:15:71:28:61
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 01903C39B9C73A61AF0FA5CA4B3EA58DA83F
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/zvsbYpDZ2QCi0lsI2G_Z2hVxKGE.roa
Signing time: Fri 21 Jun 2024 19:15:34 +0000
ROA not before: Fri 21 Jun 2024 19:15:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 185.183.244.0/23 maxlen: 24
185.183.246.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jul 2024 17:28:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3c:39:b9:c7:3a:61:af:0f:a5:ca:4b:3e:a5:8d:a8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: Jun 21 19:15:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cefb1b6290d9d900a2d25b08d86fd9da15712861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:70:a4:9d:a5:01:30:77:a5:ab:af:3b:a0:bb:
c4:e7:f0:1b:86:10:3b:d7:c5:b3:9f:39:f8:79:57:
f9:a6:45:63:76:ad:50:d3:5b:e0:f4:58:29:a7:7f:
50:bd:c4:d4:39:a1:74:09:2d:30:6c:97:93:cb:70:
c4:d7:19:3a:d5:dc:8b:9e:40:59:9c:8d:1b:6c:43:
f1:c9:5b:73:2d:fd:27:7f:4b:f0:d6:74:e8:42:d2:
c1:64:ac:48:92:6d:3f:47:4d:d9:06:99:d1:1f:79:
9a:f8:34:28:99:f1:0c:59:f2:ed:13:3e:63:ef:b2:
79:f7:94:bf:a6:ab:d0:70:b0:ce:04:22:88:7c:c0:
21:c2:ad:0e:8a:75:77:b0:24:03:ca:d9:50:72:a9:
97:60:9b:c9:01:90:bc:d7:95:2b:20:9f:01:61:7e:
77:3c:f0:78:dc:18:2f:ce:4f:71:93:ad:43:17:0e:
26:6f:58:6e:2f:07:1d:92:7b:9e:bd:cb:da:a6:8f:
e4:6e:85:16:ef:ca:21:d4:5b:78:a1:7f:c7:98:65:
5c:f7:44:3b:5d:7f:7d:cb:90:3d:e0:99:09:b8:65:
1d:ac:69:1c:cc:0c:9b:22:31:f0:65:bf:86:23:65:
e1:b0:7d:c8:74:43:6a:a9:d2:27:3e:c9:0d:1e:b0:
51:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FB:1B:62:90:D9:D9:00:A2:D2:5B:08:D8:6F:D9:DA:15:71:28:61
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/zvsbYpDZ2QCi0lsI2G_Z2hVxKGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.244.0/22
Signature Algorithm: sha256WithRSAEncryption
56:bc:b5:73:f5:3c:d2:c2:9a:9d:d6:6b:0e:ae:fd:92:47:a6:
29:a4:05:b7:11:96:d4:91:d8:b0:7d:a2:cf:36:4c:72:7a:d4:
47:16:46:b5:04:31:4d:5b:03:4f:39:5d:ea:db:f0:2e:ec:b6:
93:fb:f9:bc:35:2e:23:2a:7d:fd:a2:a0:0e:46:f5:69:d9:b5:
f1:1b:ed:87:62:4b:93:15:8a:6b:a2:6a:5f:8a:d1:5a:0a:42:
11:2a:b7:8b:98:18:f6:ee:d5:1a:55:26:6e:1e:e8:f0:58:32:
84:83:a8:ea:39:b0:ca:43:48:49:7c:30:e8:c3:cc:e6:42:31:
1d:06:41:66:98:76:3b:f8:8a:7b:ec:00:cc:97:49:1a:8d:4e:
2e:27:ec:a4:cf:fb:b2:14:f1:86:d9:89:80:e8:ad:d8:41:ed:
7d:df:15:37:d0:9d:bf:89:90:ce:cb:f6:42:8f:9f:4a:f2:e5:
24:9b:63:c0:1c:0e:dc:6d:59:4a:01:5b:e6:c1:17:37:dc:d3:
88:08:02:6d:af:2f:fc:59:cd:22:84:b9:2d:88:f4:cd:c7:de:
41:5e:c6:51:78:7c:e7:df:0d:c6:9f:23:b9:9b:89:9e:b7:c5:
9a:57:91:44:fd:ba:dc:02:a5:f5:90:61:e0:9c:d9:c3:c6:b9:
af:a1:80:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 21 19:15:35 2024 by rpki-client on console-fra.rpki-client.org