Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/ZMYRic4swaUb0U8m6RO4CVjBpzw.roa
File: ZMYRic4swaUb0U8m6RO4CVjBpzw.roa (raw, json)
Hash identifier: PMCu/D2w81Dcq/e4hQfcbAHEQw+dhtrZ8bHF41w3rVQ=
Subject key identifier: 64:C6:11:89:CE:2C:C1:A5:1B:D1:4F:26:E9:13:B8:09:58:C1:A7:3C
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 01857082B333192DF6CDC77CE38ABDA1BB50
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/ZMYRic4swaUb0U8m6RO4CVjBpzw.roa
Signing time: Mon 02 Jan 2023 03:24:51 +0000
ROA not before: Mon 02 Jan 2023 03:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207412
IP address blocks: 62.81.242.0/24 maxlen: 24
5.40.77.0/24 maxlen: 24
5.40.224.0/24 maxlen: 24
62.175.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:b3:33:19:2d:f6:cd:c7:7c:e3:8a:bd:a1:bb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 2 03:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64c61189ce2cc1a51bd14f26e913b80958c1a73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a8:5a:47:51:82:9d:bd:e8:0f:dc:3d:37:a2:
ff:f9:e7:a7:7d:f3:34:e4:b5:f4:92:5d:ef:3d:01:
a1:38:0f:1f:51:04:ec:0e:3f:e9:4e:9c:03:eb:ea:
a5:a6:58:34:f3:01:a1:5e:3d:d1:88:03:4d:ca:ff:
af:86:c0:ee:7e:a5:c8:41:e7:b9:f9:71:2c:45:62:
79:b4:22:86:06:1e:c8:3e:32:28:83:90:5e:97:24:
05:d1:be:9b:3c:f0:50:28:53:d1:7e:63:28:51:8b:
af:b0:50:5f:6d:64:fc:13:a1:9e:87:c0:e7:df:35:
1e:68:b6:af:b3:58:45:8b:88:13:bc:2b:57:be:ce:
71:4c:b7:9a:ae:86:4b:9f:db:fa:12:6e:67:8b:e2:
8b:b7:e5:ad:7d:51:e0:fa:56:03:6f:36:f4:60:cc:
f9:24:4e:db:f2:a2:fa:01:06:2f:51:cc:94:85:64:
e7:c9:5c:f0:00:42:06:c3:96:64:95:5a:67:b9:19:
22:c6:ed:a9:71:5a:b0:7d:19:83:c8:92:dd:65:9c:
3f:fd:e0:bc:1a:85:8d:70:fe:92:e5:75:c3:f8:8a:
ca:61:cd:d3:1c:0c:92:9c:43:bd:57:7a:7a:c2:38:
8f:41:ef:bc:65:93:dc:7d:73:bf:5c:1e:d7:dd:89:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C6:11:89:CE:2C:C1:A5:1B:D1:4F:26:E9:13:B8:09:58:C1:A7:3C
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/ZMYRic4swaUb0U8m6RO4CVjBpzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.40.77.0/24
5.40.224.0/24
62.81.242.0/24
62.175.180.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:cd:d8:28:b2:ae:d6:d6:01:8d:a1:94:c5:09:92:1b:ca:8b:
42:d0:1b:8f:92:6c:b2:98:c1:0a:08:73:a4:e8:70:e1:c1:1d:
76:65:c7:90:98:19:e7:89:7b:83:1f:9c:aa:c6:7d:7b:b5:fb:
f1:bc:98:1f:41:e9:fa:e2:92:fa:84:a3:19:63:0e:0c:64:11:
5a:9d:31:dc:fd:a0:fb:cf:62:57:98:f4:56:5c:47:b1:04:9b:
86:01:5c:59:94:3f:c0:d8:2e:94:92:7b:32:03:31:47:b4:9f:
45:9f:56:af:e2:e8:9b:bd:e1:fa:43:c1:9a:7d:c6:04:70:82:
a1:61:e8:73:b9:eb:e8:96:80:20:be:df:4b:08:6c:0c:ba:cf:
f4:25:fc:36:e6:0b:03:68:86:d3:0b:c2:11:c8:12:9e:21:c8:
31:17:11:ce:88:96:97:e3:4f:ba:43:8b:56:15:31:38:db:c2:
1b:15:f6:f8:9c:cc:7e:52:af:02:2c:73:66:17:86:d3:ce:ab:
25:0a:87:f5:a0:fa:91:6d:b7:87:05:06:70:75:06:cc:2b:a4:
ec:26:77:13:51:40:64:d8:eb:24:b3:22:e8:6b:0a:6d:b1:df:
ac:38:d3:c0:63:4d:4a:55:d9:36:ba:7f:39:12:27:3c:5a:2f:
66:c3:9e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:28:02 2024 by rpki-client on console-fra.rpki-client.org