Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/Z-WkM1am-71ekVrg5M22ndeRaew.roa
File: Z-WkM1am-71ekVrg5M22ndeRaew.roa (raw, json)
Hash identifier: /8qN6M7OFn+iWONCWF8drrUFEESBS1E/2nsCUFuUV7o=
Subject key identifier: 67:E5:A4:33:56:A6:FB:BD:5E:91:5A:E0:E4:CD:B6:9D:D7:91:69:EC
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 018ADF83EECFA6FDDBC1597F1F1F39476CEA
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/Z-WkM1am-71ekVrg5M22ndeRaew.roa
Signing time: Fri 29 Sep 2023 05:58:00 +0000
ROA not before: Fri 29 Sep 2023 05:58:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211318
IP address blocks: 185.110.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:df:83:ee:cf:a6:fd:db:c1:59:7f:1f:1f:39:47:6c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Sep 29 05:58:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67e5a43356a6fbbd5e915ae0e4cdb69dd79169ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b4:ca:56:e0:a1:94:4b:ca:56:cb:e1:ed:06:
44:d0:80:5a:41:90:98:c6:23:6a:f6:9d:2d:b8:f3:
04:e8:af:99:48:c9:ee:82:db:42:64:ef:3a:3f:14:
f8:51:dc:40:70:57:27:7c:23:8f:0c:de:0d:2b:da:
fa:20:11:d4:db:42:fe:03:3e:0f:73:07:1e:d6:d4:
f6:6a:9b:7b:c3:16:f2:21:a4:8a:fe:41:72:88:67:
c0:e9:ad:32:b7:9f:23:ad:0c:7b:9a:17:88:07:76:
a5:56:06:38:ec:80:f9:6f:18:63:17:9a:9c:3a:d9:
d7:97:1a:58:eb:d0:50:f8:38:40:72:84:58:09:fb:
89:a8:28:43:6a:be:46:61:a3:cf:2c:5d:73:5c:72:
35:d2:5c:f4:2d:8f:c6:4b:13:6d:57:a6:d4:b6:c9:
5d:8b:bf:81:cd:bb:6b:95:ba:84:b6:68:be:44:7d:
be:89:06:6e:64:d6:23:37:37:39:5b:9b:96:32:68:
78:dd:e6:f9:dc:e2:61:04:fe:02:65:71:ea:55:59:
1b:be:f1:d8:d7:75:ae:01:84:44:0b:a4:c5:6b:18:
e8:39:5b:7e:f1:2d:f7:9c:49:4f:b9:15:1c:50:67:
55:a6:48:f2:65:40:ed:c5:a9:04:68:b0:ec:53:f0:
e9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E5:A4:33:56:A6:FB:BD:5E:91:5A:E0:E4:CD:B6:9D:D7:91:69:EC
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/Z-WkM1am-71ekVrg5M22ndeRaew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.63.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:ab:bf:72:cf:a1:e4:db:9b:15:0a:ac:f3:c3:5a:85:3b:e7:
35:d0:2a:84:41:36:9a:a0:a8:8b:aa:2b:24:cd:cc:98:7f:44:
b8:32:bf:80:60:90:fa:cc:65:d6:99:73:6b:ec:25:66:d6:95:
70:2c:e4:c1:cc:b8:4e:76:2e:88:d4:e4:a0:f8:fb:3c:00:2b:
76:6a:f3:f7:cc:e9:46:8b:c4:48:1d:98:ec:5e:30:f5:60:78:
ba:94:f0:da:c2:e8:00:aa:e6:43:5e:fd:cb:4c:42:4c:27:8b:
13:77:e5:6f:38:56:7e:02:c5:b7:09:d1:61:73:45:94:1d:9f:
66:09:19:af:0a:77:26:9a:a3:8b:16:cc:9e:29:a7:13:5d:5e:
14:12:62:89:f3:7d:30:53:c8:02:30:52:3b:22:9b:8f:e4:e1:
50:a4:37:39:14:04:5f:fe:5f:67:e2:46:a4:6e:81:85:2c:40:
8a:e8:c1:99:7e:fa:2e:18:ab:09:51:ee:25:b8:52:15:60:66:
aa:94:b5:99:77:b8:5f:45:98:b3:7a:8b:b0:53:ba:ae:7a:76:
b3:fa:a3:40:ab:b7:9b:ce:ec:f7:7e:7a:11:0e:93:51:8d:39:
13:bc:d9:fd:3b:76:96:65:0e:9d:40:3b:8c:e6:dd:33:22:e6:
10:ef:ed:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 21 09:00:19 2023 by rpki-client on console-ams.rpki-client.org