Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/zmmIpnwBGB71rxFDVmikb9JRTJw.roa
File: zmmIpnwBGB71rxFDVmikb9JRTJw.roa (raw, json)
Hash identifier: ZOJjJC8zW6La4JzEJNdjU5OgvF6VYisbELpp41jLIb0=
Subject key identifier: CE:69:88:A6:7C:01:18:1E:F5:AF:11:43:56:68:A4:6F:D2:51:4C:9C
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018630777C22812973FC0E082C8FEA694CA0
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/zmmIpnwBGB71rxFDVmikb9JRTJw.roa
Signing time: Wed 08 Feb 2023 09:59:42 +0000
ROA not before: Wed 08 Feb 2023 09:59:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 185.64.100.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:30:77:7c:22:81:29:73:fc:0e:08:2c:8f:ea:69:4c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Feb 8 09:59:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce6988a67c01181ef5af11435668a46fd2514c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:22:02:9a:e7:c8:91:d9:80:ef:57:6b:31:
b4:a9:9a:4b:a6:9c:fa:e1:58:e5:fc:14:1b:52:a4:
b4:c2:ea:d4:2b:3a:24:5d:05:9a:01:65:79:58:59:
67:9d:82:7f:0d:8a:15:54:4d:bd:4d:84:e3:6c:ce:
d4:57:6e:7f:45:72:d5:e0:18:85:79:b3:47:d0:f0:
7b:b6:01:df:eb:2b:a7:2b:c5:4e:a2:44:b6:c3:61:
9a:7a:1b:0b:48:de:d4:98:e9:7d:74:9c:2d:60:81:
ed:73:30:d8:92:04:e0:59:85:a5:47:a4:80:27:76:
b3:be:67:7a:b3:d7:7c:2e:84:f7:6d:c0:43:10:01:
21:9e:f9:b8:58:7e:bd:31:2d:69:36:29:2d:bb:03:
0d:47:69:f7:e4:8a:2a:ec:91:96:8c:eb:35:c0:6b:
0c:b4:e4:d1:83:76:a1:a8:80:43:4a:22:be:68:fc:
d8:98:19:e6:f6:d1:3b:13:2a:21:76:ea:f1:a1:01:
ce:c5:0e:1c:31:a0:23:83:62:05:7c:cd:1f:e3:6e:
24:99:bd:8a:73:cb:96:98:e3:3e:83:01:91:94:ba:
2b:3a:8b:b9:84:68:90:72:75:a6:04:42:07:e5:80:
24:c9:81:2f:0b:37:58:fc:d6:fc:4c:99:96:fa:0c:
85:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:69:88:A6:7C:01:18:1E:F5:AF:11:43:56:68:A4:6F:D2:51:4C:9C
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/zmmIpnwBGB71rxFDVmikb9JRTJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.100.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:77:a1:69:65:5c:4d:9c:1f:53:94:4a:9d:c2:10:ae:21:2d:
89:d0:57:bc:de:50:06:e1:c0:20:e9:ae:94:e0:77:4a:4c:3b:
fa:1c:00:9b:9c:6e:00:94:f5:f0:c2:f1:39:92:37:d7:c1:3c:
1f:6f:f1:5b:d7:f7:e8:63:ff:81:3d:55:a8:44:1f:18:06:2b:
ce:90:db:90:4c:77:9b:9d:29:40:9a:aa:c2:38:bf:94:5a:af:
c5:f1:94:28:88:f4:a4:5c:3f:dc:70:83:e9:5e:98:91:83:57:
e2:a7:2a:d7:81:82:a4:6f:cc:19:e8:b3:32:13:c1:de:e8:c9:
a3:8f:0b:9e:ff:1a:4e:eb:78:e2:37:44:12:1f:c0:91:46:35:
1c:ce:5d:54:ff:ab:7e:dd:79:e2:f8:02:19:7f:ec:97:6c:65:
e4:a1:d7:3c:f8:b6:6c:a6:bf:bf:6b:2d:20:e9:31:5a:f1:25:
44:df:94:5e:e4:b0:15:3f:0d:a1:3b:3e:f6:2d:9f:94:d9:4d:
e6:ab:a9:86:03:5a:4f:9f:40:96:e9:14:53:11:71:55:a2:28:
cb:97:83:ff:2d:ff:85:20:44:6b:bb:cb:1c:a4:73:12:30:57:
3c:c8:4b:c0:b1:92:3c:81:01:e3:8a:b6:55:ad:23:34:af:cf:
f0:09:9a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org