Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/caf5ea-626e-455a-8708-f5ca8fa7270d/1/ZJO9PzDklD-T1hrKRBaV3ydJyzQ.roa
File: ZJO9PzDklD-T1hrKRBaV3ydJyzQ.roa (raw, json)
Hash identifier: TR6ACB3hM5CBk87ZvXGBngAht/74kXVbPfvAZfy8vgM=
Subject key identifier: 64:93:BD:3F:30:E4:94:3F:93:D6:1A:CA:44:16:95:DF:27:49:CB:34
Certificate issuer: /CN=b9f1d5b06f5701555ff5888154dd141b48896117
Certificate serial: 01857246DAE410B185694B78C8005151D8C8
Authority key identifier: B9:F1:D5:B0:6F:57:01:55:5F:F5:88:81:54:DD:14:1B:48:89:61:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufHVsG9XAVVf9YiBVN0UG0iJYRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/caf5ea-626e-455a-8708-f5ca8fa7270d/1/ZJO9PzDklD-T1hrKRBaV3ydJyzQ.roa
Signing time: Mon 02 Jan 2023 11:38:44 +0000
ROA not before: Mon 02 Jan 2023 11:38:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 176.114.84.0/22 maxlen: 22
176.114.92.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:da:e4:10:b1:85:69:4b:78:c8:00:51:51:d8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f1d5b06f5701555ff5888154dd141b48896117
Validity
Not Before: Jan 2 11:38:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6493bd3f30e4943f93d61aca441695df2749cb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0a:f2:3f:2a:74:a0:62:2d:f6:4b:f4:88:b2:
c0:99:2a:1a:d8:2b:c0:06:70:fe:89:bb:34:98:be:
d7:91:98:1e:3a:a6:d7:35:37:82:0b:2d:9c:67:53:
ae:1c:31:d3:2c:46:a5:0d:10:5e:79:46:9a:8e:10:
c1:8a:c6:ea:e5:ba:8d:f6:99:20:3e:42:7a:5f:63:
2b:2a:04:2b:13:75:fe:f2:e9:74:ee:99:8a:68:66:
f8:ae:f3:17:56:98:eb:6a:c7:5d:f6:1f:e5:dc:95:
01:5b:0c:cd:fb:9f:1a:97:b1:b1:7b:21:f5:d1:1b:
d1:77:8e:c7:b9:70:b5:52:c4:93:22:c0:93:ff:db:
06:9d:5e:21:64:77:36:10:96:d7:88:35:c1:7f:6a:
1a:f8:31:ce:f9:c2:65:7a:e0:37:c3:10:f6:0a:51:
a5:66:91:35:b2:42:22:69:16:06:08:dc:76:97:8a:
17:ba:b2:7c:87:38:9e:10:d5:2b:99:bc:89:7b:f8:
c7:e6:e9:af:66:d2:cc:d1:b4:f4:1d:7a:05:39:ca:
09:13:33:d2:de:f4:89:09:9f:1e:7a:72:5b:92:54:
7d:31:dd:bc:81:ad:a7:9a:b8:8a:61:84:9c:77:38:
d4:a1:01:e2:f3:53:68:e7:7d:03:2c:c0:df:8e:0e:
c8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:93:BD:3F:30:E4:94:3F:93:D6:1A:CA:44:16:95:DF:27:49:CB:34
X509v3 Authority Key Identifier:
keyid:B9:F1:D5:B0:6F:57:01:55:5F:F5:88:81:54:DD:14:1B:48:89:61:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufHVsG9XAVVf9YiBVN0UG0iJYRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/caf5ea-626e-455a-8708-f5ca8fa7270d/1/ZJO9PzDklD-T1hrKRBaV3ydJyzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/caf5ea-626e-455a-8708-f5ca8fa7270d/1/ufHVsG9XAVVf9YiBVN0UG0iJYRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.114.84.0/22
176.114.92.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:68:5f:35:7e:8b:e6:c8:2b:45:4c:58:8c:15:d9:01:a4:7d:
f4:d7:39:07:05:8e:74:48:01:24:c1:77:93:4d:c1:ec:58:ef:
b9:a3:74:9c:14:25:02:0d:9a:d9:9d:97:80:f2:51:a1:01:44:
4d:ab:b9:cf:01:1e:b2:a6:5a:fb:a3:f7:f8:d9:24:6b:f3:18:
e7:d2:4e:99:50:f8:8d:9b:06:79:81:8b:31:3a:9c:88:44:12:
cc:ae:cc:1b:2e:f1:92:9a:58:86:3a:64:b3:17:7b:fa:74:9b:
c6:94:0b:07:a8:dd:2c:3e:52:00:a3:d3:e3:7e:1b:a6:ae:d0:
55:69:53:f6:42:2b:5d:be:f4:4b:31:41:7b:c5:e0:d7:56:74:
1f:43:dd:39:c2:5d:c1:76:b6:5f:85:57:14:a9:06:24:b8:53:
98:0f:30:af:03:48:db:e0:c6:81:12:c4:d6:06:99:b1:96:10:
4b:fe:d2:9f:8f:ca:e0:7b:25:81:6a:7a:02:03:1d:6b:99:01:
15:f5:f8:af:28:8d:89:8f:bb:1e:ce:6b:64:04:03:b9:bf:a6:
1d:a8:ef:58:72:1e:ef:06:76:76:80:fd:d1:48:12:66:6e:5e:
99:f5:d2:8a:4b:8d:84:9e:4f:0d:53:eb:56:ac:7b:f6:86:84:
7a:49:6d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:23 2023 by rpki-client on console-fra.rpki-client.org