Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/RZgQn7SZQRNVm3sl0foZYEWuKbs.roa
File: RZgQn7SZQRNVm3sl0foZYEWuKbs.roa (raw, json)
Hash identifier: OLpOciaQXyhwyhnfLdX8zaL9C1EzbBM80HZUze0isHU=
Subject key identifier: 45:98:10:9F:B4:99:41:13:55:9B:7B:25:D1:FA:19:60:45:AE:29:BB
Certificate issuer: /CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Certificate serial: 0188FC503E0937ACCDEA1FF61362B8C2337B
Authority key identifier: 11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/RZgQn7SZQRNVm3sl0foZYEWuKbs.roa
Signing time: Tue 27 Jun 2023 10:04:57 +0000
ROA not before: Tue 27 Jun 2023 10:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.232.206.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:50:3e:09:37:ac:cd:ea:1f:f6:13:62:b8:c2:33:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Validity
Not Before: Jun 27 10:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4598109fb4994113559b7b25d1fa196045ae29bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bb:26:6a:cd:8d:ed:e3:7f:72:e1:6e:54:d3:
de:58:3b:fd:59:fb:de:22:dd:b8:ef:a7:b2:90:7e:
84:0b:a2:8a:ae:12:cc:75:19:b4:af:48:5a:62:78:
53:f2:19:cd:a0:ea:39:cd:36:87:c4:83:62:6a:59:
42:d0:03:5f:9d:30:0c:df:d1:c0:38:94:5c:12:d2:
39:93:4c:14:79:02:5b:ac:57:7c:6d:f0:55:09:bf:
12:9d:49:a1:05:40:bd:87:54:a2:3d:22:5e:a3:8a:
ad:e5:9d:9f:0b:19:9f:04:0d:49:a2:fc:08:53:bf:
0b:a3:f6:9f:9e:9b:5e:2e:f5:5c:93:47:2e:ad:44:
e2:ff:1b:f0:41:7b:a2:28:7b:61:4b:ff:14:37:07:
cd:f3:a8:8f:4a:d2:b9:70:2c:f5:e9:b1:c2:91:60:
f3:9b:8c:e1:c2:77:f0:4d:98:63:2b:57:8c:29:fa:
e3:24:b0:a3:bc:19:75:61:2d:09:5e:56:86:a4:d4:
ec:1a:ab:fa:bd:26:5b:47:ae:e5:03:2a:bf:66:79:
af:95:0a:9f:da:73:3f:3a:00:18:da:39:40:68:52:
96:d2:4c:5b:df:da:8b:ec:73:90:9b:75:44:90:ab:
34:e3:50:3a:96:db:ba:5d:9a:c4:48:fc:bd:bf:41:
63:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:98:10:9F:B4:99:41:13:55:9B:7B:25:D1:FA:19:60:45:AE:29:BB
X509v3 Authority Key Identifier:
keyid:11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/RZgQn7SZQRNVm3sl0foZYEWuKbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.206.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:fb:07:45:41:e9:bb:9b:23:09:c1:6c:ce:63:5c:93:c3:78:
14:b2:22:fa:6e:75:9f:48:cd:dc:81:e0:33:0a:59:31:5a:2c:
f4:46:77:55:84:5c:e7:fa:a5:83:4e:e0:37:5c:2b:63:c5:0c:
50:7d:8a:9f:ad:37:87:9b:f5:c7:c5:4c:63:0c:09:47:61:81:
2b:23:19:79:87:b6:bd:c8:db:fb:1d:78:d5:2f:df:d1:2e:2c:
db:66:b6:e1:93:90:9a:88:89:c1:45:43:bd:79:b0:fc:7e:04:
09:19:e6:0d:b8:81:77:aa:59:7d:10:b5:a6:7f:22:4d:4d:f9:
fa:bc:54:bf:f4:3b:ea:ac:3a:e8:88:46:1f:69:08:ad:a1:b5:
fc:b2:67:a0:93:de:38:0f:89:d0:cc:48:51:d4:ef:37:74:23:
f9:b8:be:20:e3:9f:6d:48:c2:12:fe:3b:f9:f3:4d:64:96:0a:
7f:5b:5d:bb:be:d7:ca:7b:d3:f7:8f:e4:a8:41:c0:e5:4c:80:
7c:57:cd:d3:7b:cf:a4:05:37:24:d5:c5:2b:c6:b8:4f:80:d9:
32:a7:c8:17:32:d2:bf:99:36:8c:84:a2:51:ab:35:31:0a:6d:
09:76:e3:01:cf:41:64:68:d9:b4:71:34:2e:2f:86:b2:58:ad:
f9:9e:9a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:25 2023 by rpki-client on console-ams.rpki-client.org