Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/z3vwynwk6ocO_962g0z21Oqxh7w.roa
File: z3vwynwk6ocO_962g0z21Oqxh7w.roa (raw, json)
Hash identifier: LiuNc3szXt8BAT5+PbTDn6q5A8hqQuy2qOGa6ONjBcg=
Subject key identifier: CF:7B:F0:CA:7C:24:EA:87:0E:FF:DE:B6:83:4C:F6:D4:EA:B1:87:BC
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C53E5AE58BC8A08B19B253E3CD3C472
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/z3vwynwk6ocO_962g0z21Oqxh7w.roa
Signing time: Sun 01 Jan 2023 07:55:15 +0000
ROA not before: Sun 01 Jan 2023 07:55:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 185.185.251.0/24 maxlen: 24
185.119.252.0/24 maxlen: 24
185.122.36.0/24 maxlen: 24
79.143.58.0/24 maxlen: 32
79.143.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:e5:ae:58:bc:8a:08:b1:9b:25:3e:3c:d3:c4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf7bf0ca7c24ea870effdeb6834cf6d4eab187bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fc:84:74:99:6a:a5:38:49:17:fc:c1:65:89:
e5:d7:66:d5:a1:45:51:12:0f:98:b4:ae:79:ef:3a:
d8:1c:2c:f5:b4:a2:89:f0:a9:55:71:20:65:ad:d1:
8f:cc:93:35:be:d1:30:0a:bd:6e:d7:fc:43:e0:6a:
14:07:e7:a8:e5:25:2e:4c:e5:f8:dd:8d:f8:be:ed:
b3:a8:4e:81:53:0f:f2:09:0e:07:c1:68:05:6b:98:
e9:95:64:fe:51:1e:13:df:cf:ea:d9:51:23:0e:b8:
00:74:51:59:6f:31:17:07:11:f8:da:00:39:da:3a:
5f:bb:42:c1:99:db:c8:05:7d:4a:8e:5a:5e:14:e8:
7a:16:31:b3:c6:b1:04:b7:73:a1:2e:d6:bd:11:bd:
ba:3e:ed:13:a8:8c:dc:a7:5c:b1:0d:7d:9b:dd:49:
8a:f2:4b:37:0a:4d:0b:59:68:d6:41:e8:95:cf:80:
65:b8:13:94:b4:f3:33:7f:4b:5c:a1:ce:51:85:d5:
45:80:ee:b2:4c:4f:8d:11:b3:3a:90:32:f3:de:ec:
c1:39:93:2b:e0:75:cf:6b:34:79:e2:f5:3b:5e:7f:
ff:4b:b0:7e:9e:b5:89:73:38:62:f0:3a:90:18:3f:
e1:bd:1a:0f:75:9e:06:4d:53:bc:c0:2c:ce:9f:c5:
45:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7B:F0:CA:7C:24:EA:87:0E:FF:DE:B6:83:4C:F6:D4:EA:B1:87:BC
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/z3vwynwk6ocO_962g0z21Oqxh7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.56.0/24
79.143.58.0/24
185.119.252.0/24
185.122.36.0/24
185.185.251.0/24
Signature Algorithm: sha256WithRSAEncryption
21:d8:d7:9b:56:c5:35:e1:24:6a:29:17:c6:3e:3e:18:45:ca:
7c:64:1d:98:41:9d:0e:53:80:8f:87:ae:d5:3e:86:fb:b6:c8:
0e:5a:bb:11:c0:75:2d:28:f4:43:94:e1:a3:16:0d:79:ea:e4:
da:bc:11:6c:de:bc:8a:3f:b5:a1:98:74:c8:25:02:78:51:3d:
bf:d9:13:b9:9d:b1:e9:c6:69:97:a7:90:17:26:ae:02:4d:af:
e5:26:1e:b0:3c:08:49:cb:fe:1e:af:87:c3:0e:02:3a:11:d9:
67:0a:a1:6a:5a:23:4d:b1:9e:50:c0:b3:ad:83:63:c4:b1:31:
63:00:e8:35:94:21:3b:c5:fe:97:b6:eb:33:2f:86:d8:eb:e9:
53:e3:b4:18:38:1f:2a:79:d3:45:32:b0:03:3c:98:a2:d6:21:
00:ba:28:40:77:79:a3:d6:07:f2:d1:cb:eb:4f:83:ff:8d:73:
a3:15:82:ff:f9:f6:9f:0d:10:c8:f5:f5:04:7b:92:62:6d:c8:
8e:25:1b:75:75:79:29:42:bc:3a:ab:77:7f:60:77:69:47:96:
15:12:80:63:88:2f:c2:4c:cb:6b:0c:d9:73:51:ce:ea:5e:f3:
e2:1c:32:c6:0d:37:56:b3:ed:6c:43:68:aa:af:ec:f3:47:19:
c9:65:37:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org