Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/zmckrMeR38xbfA2FvDfG4skvN88.roa
File: zmckrMeR38xbfA2FvDfG4skvN88.roa (raw, json)
Hash identifier: s5WuRsKZKNTprz6E2tYGn3yjDMcxkFIsBWfoNMyYx74=
Subject key identifier: CE:67:24:AC:C7:91:DF:CC:5B:7C:0D:85:BC:37:C6:E2:C9:2F:37:CF
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 01872F370B8DD66B41CE516EDABE6911EDA4
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/zmckrMeR38xbfA2FvDfG4skvN88.roa
Signing time: Wed 29 Mar 2023 21:12:29 +0000
ROA not before: Wed 29 Mar 2023 21:12:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 188.240.83.0/24 maxlen: 24
5.35.192.0/21 maxlen: 24
89.37.128.0/24 maxlen: 24
176.223.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2f:37:0b:8d:d6:6b:41:ce:51:6e:da:be:69:11:ed:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Mar 29 21:12:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce6724acc791dfcc5b7c0d85bc37c6e2c92f37cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4f:9d:2c:d8:80:65:c1:db:c4:8e:45:55:56:
ea:70:b2:d7:4b:38:c1:b4:1b:c2:d3:d9:80:3f:40:
30:91:92:51:38:f3:d9:b9:5e:97:a1:80:fa:bd:2f:
32:4f:a8:3b:f3:2a:e0:21:f0:34:83:fa:1b:da:06:
15:22:22:78:1f:bc:b2:ae:07:dd:1c:3c:48:68:5c:
94:cd:29:fa:d1:69:98:de:76:67:10:24:4e:22:d4:
ef:76:0e:d1:82:d5:e7:86:08:7f:ff:a1:b7:4e:48:
44:74:46:b2:f5:24:8b:3d:65:5f:28:eb:2f:24:f2:
08:28:2b:6e:76:79:c0:4d:c6:47:de:e4:14:e9:e0:
d2:b9:e5:cd:cd:fc:cb:1a:84:ab:ad:3c:9e:25:1f:
1c:64:f1:0f:92:51:42:d0:ba:31:c3:41:1d:fb:dd:
3d:4c:cf:0c:59:a5:8f:df:1d:b6:52:e1:3b:8a:d8:
62:0c:cc:42:81:5d:be:ae:83:19:19:e6:80:cd:8a:
6d:2d:4c:b4:8f:41:10:92:de:31:f3:57:3b:97:8b:
72:ab:3b:65:ef:81:4c:0e:b8:bd:ce:2c:c8:cd:59:
14:a4:25:3a:98:fb:7e:83:e5:1c:71:ad:f9:55:c0:
25:79:c9:d6:c1:1d:11:94:cd:8b:3e:9a:5d:c3:b3:
aa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:67:24:AC:C7:91:DF:CC:5B:7C:0D:85:BC:37:C6:E2:C9:2F:37:CF
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/zmckrMeR38xbfA2FvDfG4skvN88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
89.37.128.0/24
176.223.190.0/24
188.240.83.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:4e:40:31:b4:82:da:d2:39:18:b6:5d:af:b4:50:44:e8:bc:
7f:f5:d4:80:c9:43:09:03:2d:bb:b8:90:5c:f9:51:e9:47:ff:
34:00:72:75:a3:13:68:e6:f4:d5:0c:4c:a1:62:66:0b:d9:8f:
bd:e8:29:c2:4b:7a:a9:62:aa:cc:da:a8:93:02:80:70:4d:aa:
85:a2:4c:14:b6:3f:b7:56:56:30:41:9a:02:cd:88:db:ad:cd:
5d:78:a6:16:e5:c1:f6:ea:4f:a5:21:07:14:dc:f2:e7:1c:be:
f3:05:46:3f:a2:9f:58:bb:c3:c1:3c:f3:1d:9f:79:01:52:0d:
15:88:5d:a7:c4:99:06:b7:dd:9a:f0:c5:c3:9f:62:47:eb:dc:
e8:ce:ae:23:64:12:b5:c4:cd:d3:b2:22:d8:66:dc:57:7c:08:
ec:42:6d:a4:27:a8:0b:ad:36:14:4f:72:5e:bc:e3:a8:b0:61:
e2:cd:d9:80:54:ac:0c:7c:f4:56:03:e7:12:7c:16:3e:bd:c3:
fa:bf:d6:6c:31:12:8a:3d:e1:af:7e:7e:b6:01:09:0a:b2:80:
e3:5b:39:00:5e:fa:2f:11:34:53:6b:98:5d:48:02:44:6b:cf:
30:52:6c:35:86:28:d7:7c:00:24:89:da:86:f4:d8:29:b8:9f:
e6:0a:df:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:05 2023 by rpki-client on console-fra.rpki-client.org