Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ZuyAB927VAKDNsXGTOLDFQaRaHo.roa
File: ZuyAB927VAKDNsXGTOLDFQaRaHo.roa (raw, json)
Hash identifier: QYVjzxpdbsUWP/DMbv70aW7dxoneHe+YdyuX75OqG30=
Subject key identifier: 66:EC:80:07:DD:BB:54:02:83:36:C5:C6:4C:E2:C3:15:06:91:68:7A
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C3801BF1AE0E6C0FD97FEBCC6FEC1
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ZuyAB927VAKDNsXGTOLDFQaRaHo.roa
Signing time: Mon 02 Jan 2023 05:55:04 +0000
ROA not before: Mon 02 Jan 2023 05:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206425
IP address blocks: 185.106.92.0/24 maxlen: 24
194.36.177.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:38:01:bf:1a:e0:e6:c0:fd:97:fe:bc:c6:fe:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66ec8007ddbb54028336c5c64ce2c3150691687a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:76:ec:b3:28:25:b5:19:97:0c:38:bd:1d:
5e:7b:be:b5:85:30:5e:50:99:bc:26:7a:12:c7:47:
07:58:d1:4b:a3:c2:47:2c:4b:2f:58:b3:1a:e9:12:
79:fe:8a:2e:aa:ae:f8:8a:a4:88:66:17:9a:af:4f:
34:75:69:5d:7c:c2:81:8d:3e:d5:df:0c:92:7e:54:
7f:f7:87:e2:f0:4c:2f:ec:8d:ea:b4:f3:51:3b:dd:
6a:d2:58:67:1e:f3:be:ac:9c:5e:82:fd:5d:20:aa:
c0:ca:1f:03:3d:23:3c:a6:bd:20:64:cc:87:a3:1d:
de:11:d2:f1:8c:d0:6d:98:35:b5:e5:4b:3e:c0:2e:
37:f0:e5:90:d2:6b:86:01:ab:73:ef:91:33:d8:ac:
74:8a:51:9c:3d:f9:96:46:2e:7d:85:f0:dd:3b:7a:
03:62:cf:52:fe:e0:a5:d5:58:1e:67:7f:b9:44:fc:
44:27:98:7d:14:9f:7c:f3:44:09:58:e9:33:e7:e4:
fe:8f:b2:8b:03:19:4f:0d:96:6d:e2:e9:0c:d5:2e:
e5:06:0c:bc:0d:5c:b0:86:32:6c:18:9e:82:5a:7f:
2d:58:db:14:fb:e6:df:64:a3:66:29:ea:49:6f:20:
94:77:86:a8:18:3b:22:5a:b9:3e:58:6b:7b:7a:dc:
e3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EC:80:07:DD:BB:54:02:83:36:C5:C6:4C:E2:C3:15:06:91:68:7A
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ZuyAB927VAKDNsXGTOLDFQaRaHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.92.0/24
194.36.177.0/24
Signature Algorithm: sha256WithRSAEncryption
36:14:53:cd:c6:26:0c:ef:36:73:36:28:d4:75:d6:8e:75:60:
79:52:4b:e7:73:3b:6f:f3:46:50:8e:8c:be:72:82:24:c1:ad:
b2:d2:3f:a6:7f:eb:00:4b:d3:0e:9c:bd:b9:55:9d:5d:99:48:
57:22:b8:6d:aa:25:02:8f:6c:14:a1:ba:cf:eb:00:39:3f:e6:
78:8f:61:9a:65:c3:6e:ce:cd:bb:24:93:a9:39:a4:40:42:89:
ba:6e:c1:02:b0:d2:cf:82:75:80:2b:db:21:27:5f:cc:3c:a4:
85:bf:b9:61:fb:56:1d:27:8c:3e:f6:2b:2f:ac:5b:1b:5e:38:
e8:61:c1:67:d8:86:c8:30:ba:e8:db:b1:f4:60:05:8b:d2:78:
d2:db:4b:23:4e:33:a2:1b:f9:9e:67:ee:8d:9f:51:9d:af:d4:
bc:c4:3a:d3:3b:cd:81:f7:df:aa:d6:98:50:e3:af:9c:7d:3d:
56:68:3d:bc:95:bb:f7:a5:93:27:c1:9c:08:93:61:55:8c:bb:
9d:00:ad:4a:3e:51:01:25:a5:fe:2a:a6:aa:30:db:34:51:01:
d0:13:59:8c:5c:5c:28:d6:04:30:e8:74:5c:3a:11:9a:d3:7d:
8f:39:4b:aa:eb:fc:79:15:27:bc:a0:da:ae:85:d3:32:ac:80:
30:02:92:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:37 2023 by rpki-client on console-fra.rpki-client.org