Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/zXqJytQIXpm-_pA7demrYGd4xlQ.roa
File: zXqJytQIXpm-_pA7demrYGd4xlQ.roa (raw, json)
Hash identifier: mjGAnOrib8DN6K0usjnQmXy+9wS0/yVNDNe3/zeOIwk=
Subject key identifier: CD:7A:89:CA:D4:08:5E:99:BE:FE:90:3B:75:E9:AB:60:67:78:C6:54
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C35B8F2D1F497B633245CD4B5251E
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/zXqJytQIXpm-_pA7demrYGd4xlQ.roa
Signing time: Mon 02 Jan 2023 05:55:03 +0000
ROA not before: Mon 02 Jan 2023 05:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205135
IP address blocks: 185.229.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:35:b8:f2:d1:f4:97:b6:33:24:5c:d4:b5:25:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd7a89cad4085e99befe903b75e9ab606778c654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ad:17:f3:da:a3:41:39:93:8e:77:80:d1:a4:
23:8d:3d:6a:1d:b4:88:56:31:2a:10:33:a7:6c:34:
33:83:01:31:e5:99:ba:fa:87:55:b4:77:3b:7b:56:
2b:40:cc:a2:1e:c3:a7:49:e7:4a:97:31:a1:57:8d:
6c:e7:ef:bd:0c:9a:50:bb:5c:bb:0e:ba:46:0e:3d:
ed:76:75:1c:f1:8c:c7:fd:0c:1d:79:3e:1e:47:43:
f7:2a:96:19:02:e6:86:19:bd:9b:ee:ab:6b:36:ad:
25:da:c9:5b:10:b6:82:38:6d:74:77:53:c0:96:05:
e2:67:67:4a:13:70:f5:82:d4:54:cc:0d:dc:c5:83:
09:dc:c5:ed:29:16:6e:69:79:0c:84:44:79:28:8c:
fe:a2:63:b3:52:6e:9c:51:1b:fe:ea:18:84:16:45:
52:62:c7:67:d5:b8:46:cc:03:5b:a8:da:88:01:9d:
46:3f:4b:92:d8:ea:60:2e:1d:50:82:f4:be:b5:70:
ab:77:9d:94:0e:40:c1:8e:40:25:06:3e:c7:d0:f4:
8b:27:7f:fd:e4:e8:4b:8b:f4:f6:52:19:23:b9:6a:
04:2c:b0:11:3f:b0:1b:9c:e8:6b:9a:33:9e:29:8c:
06:df:42:23:c5:f4:e2:ac:26:a2:31:3a:ea:88:0a:
b0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7A:89:CA:D4:08:5E:99:BE:FE:90:3B:75:E9:AB:60:67:78:C6:54
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/zXqJytQIXpm-_pA7demrYGd4xlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.67.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:48:f1:84:c0:0c:43:7a:23:0b:65:fa:36:21:a7:6b:f1:51:
3f:ab:87:0c:e5:38:d6:71:56:66:b5:e3:df:ca:4f:19:54:ff:
37:13:09:16:28:20:54:e6:23:c0:d6:9a:74:23:e1:af:73:93:
53:2c:84:d3:85:19:c2:87:6a:bd:a8:92:87:c8:d3:c5:ca:f9:
62:73:87:da:6f:42:80:51:71:cf:6a:4e:df:cf:22:d5:9d:2d:
3e:18:10:8d:55:71:dc:7b:0c:9f:93:2c:b9:0d:f6:7b:9b:93:
a2:c6:fa:38:29:f6:a5:31:8d:a2:92:a2:67:c6:79:2b:0d:38:
12:f3:26:6a:4a:fe:80:f0:c6:28:20:bb:a0:22:0f:8a:b6:c7:
79:61:09:a0:b1:41:af:4e:2b:ca:df:b5:f1:11:c3:b4:d3:89:
ed:8c:7a:93:42:a9:bc:eb:54:49:5e:6a:13:b6:dd:fe:35:45:
f9:c0:f3:d3:0a:18:d9:05:e8:70:28:95:0c:4c:86:b2:b1:96:
05:3e:95:ed:87:f1:61:99:cd:81:af:82:2d:a1:9d:6e:d2:97:
2e:53:54:ef:93:2d:df:d1:44:88:8e:2c:1e:1b:2c:92:dc:40:
55:e1:bf:7e:b3:2e:d7:01:b6:1b:d8:40:e1:94:0e:e0:3e:80:
b5:45:fd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:24 2024 by rpki-client on console-ams.rpki-client.org