Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/ZJp_b6vKPvXZmBbUxPnEYrNLqDY.roa
File: ZJp_b6vKPvXZmBbUxPnEYrNLqDY.roa (raw, json)
Hash identifier: JDGSG+5dn+JnBvFEsUm1RXdK6jD5NX0tEBN8J+rMH8k=
Subject key identifier: 64:9A:7F:6F:AB:CA:3E:F5:D9:98:16:D4:C4:F9:C4:62:B3:4B:A8:36
Certificate issuer: /CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Certificate serial: 01857246A32E2B182DA5299C839DF6E15ADB
Authority key identifier: AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/ZJp_b6vKPvXZmBbUxPnEYrNLqDY.roa
Signing time: Mon 02 Jan 2023 11:38:29 +0000
ROA not before: Mon 02 Jan 2023 11:38:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207876
IP address blocks: 192.109.210.0/24 maxlen: 24
192.109.219.0/24 maxlen: 24
192.109.217.0/24 maxlen: 24
192.109.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:a3:2e:2b:18:2d:a5:29:9c:83:9d:f6:e1:5a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Validity
Not Before: Jan 2 11:38:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=649a7f6fabca3ef5d99816d4c4f9c462b34ba836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6c:d5:9a:c9:2f:de:ab:04:52:59:ca:e3:bc:
78:69:b9:6b:4e:00:3b:1c:67:f7:01:71:2f:da:79:
5b:16:eb:a6:a3:31:8d:6f:7b:76:79:95:00:85:3c:
0a:a7:65:7a:5e:a5:8f:c1:70:0a:f3:9f:37:65:0d:
f7:85:43:b4:7b:36:96:b4:46:20:0a:ec:60:6c:3e:
ca:1f:f4:de:6d:47:12:5c:56:44:1d:f1:10:d9:80:
7d:81:c1:ad:06:4c:08:92:a5:d1:a4:4a:74:d8:9e:
de:44:ce:d3:9d:8a:d2:f1:64:74:d5:ae:59:73:91:
bb:d7:35:0c:fd:53:40:a2:94:44:47:9f:fc:a5:a5:
fc:cf:4a:01:45:32:a6:b5:ac:9a:e9:0a:2a:0e:52:
47:e0:c2:4b:48:6a:aa:86:c3:63:00:fe:64:18:49:
34:5d:3a:05:74:71:9b:ed:b2:9d:3d:29:87:e0:b0:
cc:b5:c8:42:03:5a:b5:d7:4e:cb:ea:2f:04:eb:61:
e7:26:5d:01:e3:48:a0:d9:81:d9:51:ab:d0:42:6c:
c6:93:3f:c7:dd:a8:fc:3b:d2:b4:30:65:a4:25:92:
f2:6e:f8:dd:57:5c:1b:84:7f:e8:d2:c8:3b:21:3f:
25:5e:24:3e:5f:4c:7b:09:65:e8:52:54:12:fd:61:
06:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9A:7F:6F:AB:CA:3E:F5:D9:98:16:D4:C4:F9:C4:62:B3:4B:A8:36
X509v3 Authority Key Identifier:
keyid:AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/ZJp_b6vKPvXZmBbUxPnEYrNLqDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.210.0/24
192.109.217.0/24
192.109.219.0-192.109.220.255
Signature Algorithm: sha256WithRSAEncryption
79:2e:20:e2:5e:5e:b3:e4:05:bf:78:45:c4:d1:89:55:9e:f6:
34:5d:cb:8c:25:a2:53:e0:be:00:d7:e0:5d:2d:2d:fd:f6:a4:
e7:c1:8b:b4:e6:db:8a:49:b7:84:07:7c:8e:47:7c:22:7d:c7:
c8:cc:c1:97:99:ff:fe:50:0a:3d:97:62:85:d5:4f:a8:73:4c:
dd:7b:ee:94:da:22:33:1a:6a:8b:8a:81:b9:2f:5f:57:f5:de:
62:a5:a4:05:ea:90:10:c2:62:6c:55:14:54:d8:d5:d8:46:39:
99:07:46:06:e7:0f:97:d1:e1:d6:5c:4a:32:ae:97:43:15:8f:
18:7e:fd:15:02:6a:37:83:2f:3f:84:9c:a2:a4:ac:9a:8b:1f:
35:7b:9a:6b:33:d6:35:2c:9a:f5:bd:de:26:46:31:c1:bf:e8:
fa:06:ae:36:15:d1:f7:e4:86:66:fc:ab:49:65:6a:b7:06:f6:
72:ec:a3:64:84:27:8b:e2:a0:63:04:1d:51:06:88:d0:0b:b7:
78:d1:9c:40:92:a8:2f:c6:06:30:17:2e:7e:b1:11:33:13:e1:
19:74:e1:e1:24:e6:31:c7:8d:67:48:52:66:8b:d5:06:10:1e:
8a:1a:c4:40:f6:4a:83:cf:1b:b7:2a:f9:85:07:b4:30:9e:0c:
26:cd:99:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:30 2024 by rpki-client on console.sobornost.net