Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/ZLuwDjMihM6ivD9Fc9rQlCrEaT4.roa
File: ZLuwDjMihM6ivD9Fc9rQlCrEaT4.roa (raw, json)
Hash identifier: tJMCFv5tP3DYCBHEnE0Wjj9oXt9r17DCvqeB8S/Y9jQ=
Subject key identifier: 64:BB:B0:0E:33:22:84:CE:A2:BC:3F:45:73:DA:D0:94:2A:C4:69:3E
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 01856F5DE9CB2ECD0ECCB050226649644BB1
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/ZLuwDjMihM6ivD9Fc9rQlCrEaT4.roa
Signing time: Sun 01 Jan 2023 22:05:03 +0000
ROA not before: Sun 01 Jan 2023 22:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31708
IP address blocks: 185.42.220.0/22 maxlen: 22
2a04:92c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 12 Dec 2023 16:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:e9:cb:2e:cd:0e:cc:b0:50:22:66:49:64:4b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jan 1 22:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64bbb00e332284cea2bc3f4573dad0942ac4693e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:56:b9:bf:bc:be:ba:c4:a5:d4:e5:8d:6e:
02:ad:63:1b:70:43:ad:c1:a1:21:01:20:07:6a:59:
bc:9a:b4:59:fa:77:59:ac:a9:8c:39:3d:3a:40:b3:
f2:48:c6:c1:86:f2:5b:ba:f3:10:20:bc:f8:b1:1a:
25:61:a6:53:1e:72:66:08:e6:11:28:bb:28:e0:f7:
70:39:5b:10:e1:4a:ed:11:f5:cf:ae:ca:61:2d:bc:
e3:e3:8c:74:3a:a7:11:f6:e9:d3:91:77:9b:5c:83:
fa:50:e8:35:a1:ba:a9:6b:41:5a:e2:e7:d1:cb:69:
62:d8:4f:e2:41:a8:55:2a:9a:4a:50:56:d4:48:5c:
20:08:bb:b2:7b:02:75:b0:df:a3:f9:3c:b8:b7:8b:
f4:25:bd:02:a9:f7:c5:ff:dc:73:e6:fe:48:cc:0d:
f8:f3:cd:0f:64:66:28:31:83:75:b2:94:2a:b6:8b:
a2:c1:c9:ba:e4:e0:6f:0c:13:c2:5b:14:2e:ba:7f:
c0:c9:f0:09:1c:14:3d:5e:39:81:6e:9a:3e:77:4b:
71:7e:85:ba:6a:9d:13:1b:2a:57:c7:6d:3d:f1:ca:
71:23:cc:3c:be:01:7d:0a:74:c6:80:05:ad:79:e1:
b3:cd:fb:45:52:73:0d:d3:5e:ae:fb:75:97:56:ba:
2e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BB:B0:0E:33:22:84:CE:A2:BC:3F:45:73:DA:D0:94:2A:C4:69:3E
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/ZLuwDjMihM6ivD9Fc9rQlCrEaT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.220.0/22
IPv6:
2a04:92c0::/29
Signature Algorithm: sha256WithRSAEncryption
37:a2:8d:0c:22:ea:c9:ec:bf:2f:a0:33:f9:1c:a3:cf:56:f5:
8f:c8:22:6f:6e:fc:2c:42:0b:38:92:3a:2e:90:76:2f:ca:98:
8f:29:c8:14:b8:72:e0:fb:a4:5e:c4:24:93:75:6e:6d:ab:62:
2e:c3:69:ec:65:c9:a8:78:0b:ca:6b:b8:20:d7:07:70:e7:ca:
7e:f2:80:ff:50:0c:57:ac:7e:12:e9:af:ae:d0:50:be:fa:77:
47:96:ba:12:3d:6b:ac:d3:40:1b:6b:2b:3f:f5:20:3f:af:fa:
c5:93:37:f4:3c:17:83:22:7e:8e:a9:a7:84:6d:be:27:94:61:
73:5d:35:e2:6d:03:03:79:45:e6:46:e1:64:ec:a3:7f:09:35:
e5:fb:a3:2e:0d:e0:dd:18:b2:aa:3e:58:7f:07:4f:d0:0e:7c:
9d:7d:3a:eb:8f:39:33:bb:5b:8e:75:56:bb:27:ec:e1:ee:3c:
3e:6c:82:7d:0c:76:85:4c:97:8e:68:19:ec:7a:c3:7f:c6:d4:
ad:ef:06:23:06:65:fb:d1:75:c6:91:5f:42:5f:c7:09:e7:e0:
ff:fa:24:1e:61:02:46:ed:ee:e6:c5:ac:31:d4:b8:a6:e7:74:
3f:c9:91:a2:df:1c:51:5a:85:2c:e7:11:3c:da:36:62:60:21:
38:04:cc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:56 2024 by rpki-client on console-fra.rpki-client.org