Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/zgsZTvzWHotbWaKr8edm_6kiRIA.roa
File: zgsZTvzWHotbWaKr8edm_6kiRIA.roa (raw, json)
Hash identifier: YzBN1qrzu/AzCuxoiuf09jVkYLG1to5iGjZYP4qUdYE=
Subject key identifier: CE:0B:19:4E:FC:D6:1E:8B:5B:59:A2:AB:F1:E7:66:FF:A9:22:44:80
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 01856FE6F2542B3E0343456CB222E404493B
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/zgsZTvzWHotbWaKr8edm_6kiRIA.roa
Signing time: Mon 02 Jan 2023 00:34:44 +0000
ROA not before: Mon 02 Jan 2023 00:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.133.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e6:f2:54:2b:3e:03:43:45:6c:b2:22:e4:04:49:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Jan 2 00:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce0b194efcd61e8b5b59a2abf1e766ffa9224480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9b:58:6c:d8:15:99:23:5b:8f:99:d6:4e:08:
a8:28:16:1f:9a:e7:ad:7f:6b:dc:75:62:ab:45:97:
2f:70:49:23:64:3c:7f:0c:92:9b:0f:a7:e7:c9:0e:
80:c4:b7:20:08:7a:fc:bc:50:38:2d:03:fc:8d:8d:
45:1e:4d:d2:75:4e:c3:3a:99:9f:af:6c:e3:87:aa:
ad:47:10:3d:10:40:53:44:3f:36:46:9f:2b:d2:24:
d8:cd:0f:29:5d:06:b8:c4:49:bd:42:5a:20:da:50:
bc:e7:d1:3f:29:08:fc:b9:97:b6:e7:13:55:f6:49:
e7:f2:8f:e3:10:55:e4:7b:0a:e3:20:3f:7b:31:38:
cf:14:fb:15:5a:1b:30:ca:eb:d3:61:62:89:ed:38:
50:05:58:03:df:b4:9f:d0:17:20:2f:b9:c1:14:e1:
92:e5:9b:41:88:be:1b:ce:1f:92:60:f8:39:f7:b2:
87:6d:15:7b:3c:76:95:61:f7:7b:8f:39:cd:cc:85:
c2:0f:a0:e1:ba:ac:53:82:6a:ce:8a:a5:5b:69:e5:
c0:3e:f5:f7:dd:b7:71:aa:7d:0a:74:c4:fb:e1:c8:
cc:bf:66:22:bc:64:87:e3:8a:e1:90:c1:cd:b6:a8:
4e:8d:56:55:89:4b:cd:c8:9f:71:1f:ea:14:07:13:
c9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0B:19:4E:FC:D6:1E:8B:5B:59:A2:AB:F1:E7:66:FF:A9:22:44:80
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/zgsZTvzWHotbWaKr8edm_6kiRIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.70.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:d4:f5:61:18:5f:53:86:b1:60:b6:a2:c1:b4:f7:84:d3:7a:
94:55:19:dc:9c:19:ad:41:e3:48:fb:a4:bb:fb:13:4a:de:7c:
c7:64:60:90:2f:11:e2:25:ff:ab:e1:4b:e6:b3:f6:f2:e4:8c:
80:5e:8a:3f:80:d8:bc:81:04:b0:7e:ad:94:9c:62:c8:4f:3b:
6a:3d:51:c7:bd:a5:70:d1:fe:53:61:d6:93:1d:ea:0a:e3:a3:
3c:26:62:d2:f9:e9:58:23:46:5f:40:99:4a:e0:56:ce:e8:57:
0a:bd:34:ce:61:16:dc:9c:ca:ce:85:e0:67:15:00:fd:7d:2c:
99:d7:58:71:2d:1b:fd:e5:ae:09:0a:88:e9:8a:74:8a:a6:f2:
cf:e1:45:10:97:77:63:d7:29:5c:b3:be:35:e0:55:d4:cc:36:
98:7d:6e:59:ad:fa:83:4a:ff:e6:e3:c0:0c:b1:a6:72:c6:c0:
65:44:30:49:83:87:07:37:f3:39:71:8f:15:9f:75:fa:68:c0:
ca:a3:5e:96:a9:67:96:fa:af:25:cf:57:37:9e:50:20:7f:b9:
94:85:53:7e:57:ad:1d:80:8b:ad:02:5c:e6:7e:34:57:dc:a9:
23:a1:df:e6:dd:e7:74:d9:d9:89:2e:6d:4d:c4:5d:a9:05:05:
38:41:b4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:25 2024 by rpki-client on console-fra.rpki-client.org