Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/ZBDVdeWEpHAEJ-GrPuqaWTOngyw.roa
File: ZBDVdeWEpHAEJ-GrPuqaWTOngyw.roa (raw, json)
Hash identifier: b2MUrueq3dr52fcku6SOoqsW2kqkio7BnHhjEENwASg=
Subject key identifier: 64:10:D5:75:E5:84:A4:70:04:27:E1:AB:3E:EA:9A:59:33:A7:83:2C
Certificate issuer: /CN=02c2c187d98b4603804ed1165adb4509b630a83a
Certificate serial: 01856F42E157AB1D479205133DAC093DE070
Authority key identifier: 02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/ZBDVdeWEpHAEJ-GrPuqaWTOngyw.roa
Signing time: Sun 01 Jan 2023 21:35:32 +0000
ROA not before: Sun 01 Jan 2023 21:35:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45047
IP address blocks: 93.188.217.0/24 maxlen: 24
93.188.216.0/21 maxlen: 21
2a12:9dc0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:e1:57:ab:1d:47:92:05:13:3d:ac:09:3d:e0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c2c187d98b4603804ed1165adb4509b630a83a
Validity
Not Before: Jan 1 21:35:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6410d575e584a4700427e1ab3eea9a5933a7832c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a3:8d:e9:6a:48:d2:f1:48:dc:68:f4:6e:c4:
ae:16:61:3e:44:8e:e6:7b:ca:d1:83:83:e8:8d:43:
05:54:c5:5e:b5:3d:7c:11:3c:e0:a3:ba:89:4c:3d:
2f:4e:aa:f2:98:21:af:8b:46:59:7b:48:72:c5:9d:
2b:30:fe:80:e7:cb:1c:fb:c7:eb:37:57:3b:5d:0e:
94:50:a9:7e:0f:99:b6:f2:35:57:68:96:57:86:48:
43:42:62:a4:c9:72:44:7e:e1:54:46:45:b8:fc:c4:
ac:52:c0:93:e5:ec:c2:d0:5d:f5:51:74:a6:8f:0c:
12:75:1c:9d:d1:f4:07:e0:b1:1f:8e:2c:52:2e:3e:
3c:8a:70:1f:c0:ed:1f:1d:39:76:55:7a:f7:42:76:
ad:99:72:4d:2f:94:c4:12:79:e5:ce:64:bf:d6:27:
76:de:80:05:d5:d6:48:bd:b8:43:14:79:11:41:75:
ea:65:a9:19:a9:00:da:75:53:eb:b0:f0:95:49:16:
2a:67:b7:d3:38:a3:da:27:de:df:c5:51:c3:2c:46:
98:9f:b2:39:7e:6b:6e:77:c7:d6:83:19:c8:a5:5e:
20:37:77:7b:a8:1c:89:50:74:67:71:51:54:b6:95:
be:7c:77:d3:aa:6d:ed:a7:72:f1:65:e3:27:a6:10:
c0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:10:D5:75:E5:84:A4:70:04:27:E1:AB:3E:EA:9A:59:33:A7:83:2C
X509v3 Authority Key Identifier:
keyid:02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/ZBDVdeWEpHAEJ-GrPuqaWTOngyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.216.0/21
IPv6:
2a12:9dc0::/29
Signature Algorithm: sha256WithRSAEncryption
93:da:72:48:94:f6:ff:0a:5e:dd:a0:6d:ba:fc:ab:fe:f4:93:
f1:c3:07:4c:85:0f:fe:06:9b:5b:ef:af:41:b1:a7:fc:3d:59:
78:70:7e:b2:bb:c6:e2:73:ec:79:6f:db:8f:6b:97:f7:6d:31:
af:bc:70:c2:f3:79:05:8e:98:73:37:2f:89:76:49:5c:ab:74:
69:ca:c6:1d:18:c7:fb:89:9b:c7:28:61:6d:83:c1:3d:b2:8c:
46:4f:a3:e0:12:35:ed:9b:8c:d7:ac:83:8e:dd:fe:9e:95:b5:
b7:52:3b:33:41:c0:67:1c:74:ac:77:3b:8d:a6:c0:ad:2f:f7:
0a:0f:da:cc:4a:f9:d7:07:e8:9a:7f:6c:ca:38:c0:35:9b:fe:
65:17:9c:fd:3a:fa:6c:11:d4:f3:7c:e6:bc:14:3d:51:a9:ac:
25:79:d3:d9:ce:b1:3f:cd:f9:6f:12:41:77:cc:6b:96:ac:8c:
10:82:55:6c:50:bf:a7:b1:7c:39:6f:85:59:24:96:ab:cb:7c:
35:bc:f2:31:2f:f3:91:60:a7:55:56:63:d1:2b:15:e8:7a:99:
2d:b6:4b:35:23:c9:2d:f6:e6:c6:96:25:89:46:a7:b1:58:7d:
cf:58:7c:70:85:f2:4c:a8:53:f0:2c:86:19:f5:08:3a:8e:35:
86:86:6b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:51 2024 by rpki-client on console-ams.rpki-client.org