Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/ZzKrO-I4dhdb551zrkWCHoU8P8Y.roa
File: ZzKrO-I4dhdb551zrkWCHoU8P8Y.roa (raw, json)
Hash identifier: c/rfs545UEPPjgWdRaQ65/XOn/7Fybeop8jwmGmjN5I=
Subject key identifier: 67:32:AB:3B:E2:38:76:17:5B:E7:9D:73:AE:45:82:1E:85:3C:3F:C6
Certificate issuer: /CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Certificate serial: 0186A4CF3913C4FCFAD88968B6CADA7C536F
Authority key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/ZzKrO-I4dhdb551zrkWCHoU8P8Y.roa
Signing time: Fri 03 Mar 2023 00:11:29 +0000
ROA not before: Fri 03 Mar 2023 00:11:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59455
IP address blocks: 185.23.52.0/22 maxlen: 24
185.33.192.0/22 maxlen: 22
46.17.208.0/21 maxlen: 22
185.148.88.0/22 maxlen: 22
2a04:2340::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a4:cf:39:13:c4:fc:fa:d8:89:68:b6:ca:da:7c:53:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Validity
Not Before: Mar 3 00:11:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6732ab3be23876175be79d73ae45821e853c3fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:36:2b:10:55:1f:62:bb:11:9d:eb:46:5b:d1:
7e:d8:16:f4:c0:67:c5:16:6b:5a:c5:65:eb:e0:6d:
d4:6f:26:40:b6:36:58:7a:48:71:d0:2f:29:43:91:
f6:de:06:d9:02:a9:ee:72:b4:88:3a:fb:c4:37:60:
10:47:cd:09:9e:48:02:ad:71:5c:34:56:11:74:5b:
b8:00:1c:a9:9c:b6:07:8b:19:29:31:12:d7:2f:d7:
8d:ed:cb:c1:5d:8e:f5:7d:9b:df:5d:e9:21:c8:99:
25:fc:a3:16:30:12:89:bb:24:15:ba:a8:32:35:6d:
de:b0:00:b7:ee:23:6f:75:fc:3d:fb:03:94:cf:d2:
c4:2b:6a:70:7f:b9:75:ee:d6:48:73:76:41:70:b0:
f3:1e:33:a0:ff:be:d4:e7:70:33:bb:c8:76:85:ad:
d0:f4:bf:1c:e3:bf:a0:29:69:28:45:89:d9:4e:60:
12:3c:ee:2b:42:77:52:c5:42:b0:64:68:6c:24:a1:
8d:34:73:06:bf:50:72:55:88:da:82:51:a7:0b:b8:
91:e2:fa:6f:8e:5c:24:23:e8:ff:cb:f0:48:08:57:
aa:89:aa:2b:f7:ab:38:1f:6f:c6:3c:9e:b3:3a:33:
a3:51:4d:29:01:a9:38:6a:2d:e4:88:bf:5a:54:a8:
4e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:32:AB:3B:E2:38:76:17:5B:E7:9D:73:AE:45:82:1E:85:3C:3F:C6
X509v3 Authority Key Identifier:
keyid:14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/ZzKrO-I4dhdb551zrkWCHoU8P8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.208.0/21
185.23.52.0/22
185.33.192.0/22
185.148.88.0/22
IPv6:
2a04:2340::/29
Signature Algorithm: sha256WithRSAEncryption
57:33:6b:b0:6a:e5:af:9b:1f:eb:1e:73:e0:1c:5a:5c:a6:ac:
bc:71:ed:7a:2b:bb:f6:9c:3f:d4:44:1f:00:97:6b:fe:ff:c7:
98:b7:18:17:1c:35:5c:9f:1f:da:c0:2e:f0:c0:73:92:74:95:
7c:c2:68:0b:ec:42:82:fd:ab:74:73:0d:4f:de:62:f7:cf:5f:
ca:f8:04:bf:4f:05:2d:e6:06:f7:44:e8:dc:15:12:40:0a:35:
6b:39:e9:5f:99:15:1b:dc:bc:e0:b6:c6:db:a9:77:8c:99:eb:
b6:7b:e5:4b:e1:68:25:21:84:b9:0f:13:63:d8:6f:35:ae:f3:
3f:f5:81:61:27:80:3a:dd:45:d3:dd:27:32:7c:08:ef:50:62:
ad:77:a2:8a:2e:b4:37:3b:3b:80:ce:f1:3d:54:c0:b5:cc:15:
0e:21:c9:54:d7:2f:1c:1f:31:d4:fa:49:99:23:a3:44:1b:de:
74:c4:d2:ce:d2:cb:4a:f2:ad:0c:08:6f:d5:44:c7:11:db:9c:
4e:c1:3a:6d:07:59:68:ee:ae:b9:4e:40:98:5c:ea:d5:3e:93:
f6:19:28:3a:f5:cb:90:97:9d:da:4a:9e:26:01:7d:96:f3:59:
a5:a5:3b:c5:92:cf:47:71:9c:23:07:07:1e:07:98:a6:66:b9:
00:86:cd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:49 2024 by rpki-client on console-ams.rpki-client.org