Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/ZJPRw-5SO3nbFaA9paJ3gmHJPL4.roa
File: ZJPRw-5SO3nbFaA9paJ3gmHJPL4.roa (raw, json)
Hash identifier: vrHAXZ1lJpDGN5gokEHOkpE9wDg9cZ48KpvlkiBdGOI=
Subject key identifier: 64:93:D1:C3:EE:52:3B:79:DB:15:A0:3D:A5:A2:77:82:61:C9:3C:BE
Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial: 018BF282D273A491E03D28E9A32250A07F90
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/ZJPRw-5SO3nbFaA9paJ3gmHJPL4.roa
Signing time: Tue 21 Nov 2023 15:32:21 +0000
ROA not before: Tue 21 Nov 2023 15:32:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6461
IP address blocks: 185.83.150.0/23 maxlen: 24
185.83.148.0/23 maxlen: 24
94.26.97.0/24 maxlen: 24
185.75.80.0/22 maxlen: 24
185.94.78.0/23 maxlen: 24
185.94.76.0/23 maxlen: 24
45.94.10.0/24 maxlen: 24
185.49.216.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f2:82:d2:73:a4:91:e0:3d:28:e9:a3:22:50:a0:7f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Validity
Not Before: Nov 21 15:32:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6493d1c3ee523b79db15a03da5a2778261c93cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:d3:20:c9:59:94:3b:a3:c8:6f:d7:b4:13:
c7:d4:58:49:c5:7f:79:c0:f3:3d:39:96:5c:de:d8:
d3:a9:38:63:ad:c6:9b:35:a7:73:33:d0:02:ca:c3:
a1:4c:90:b0:cf:e6:21:a1:d1:ec:5e:5b:d3:d3:d1:
28:6b:07:a4:f6:be:53:7a:e2:4c:d4:54:6d:2a:97:
ce:ab:97:a1:5a:14:ab:69:83:7f:d2:31:8e:33:33:
f6:59:0a:af:70:ac:58:89:42:39:00:96:09:d0:94:
2e:a3:b5:5b:3d:de:22:bf:13:9c:a5:a9:42:54:6a:
7a:96:f9:12:22:5c:93:72:b5:21:d9:80:78:1b:f6:
b4:03:88:e9:cd:b9:46:cd:5a:28:f5:af:4b:d4:d6:
5a:65:3a:31:3b:1b:72:46:0f:bc:4a:4f:f8:03:29:
3d:52:ff:0f:ea:71:86:cc:95:9c:1f:96:10:35:c0:
42:7a:ef:23:e2:5e:aa:bb:32:43:ef:e4:93:8a:57:
3e:97:9f:fe:ed:50:50:f5:02:ca:17:36:10:da:c7:
7c:39:ce:38:7e:93:99:49:aa:ac:1c:26:b6:51:02:
10:05:a6:f5:56:bd:6c:ae:32:1b:b0:7c:16:15:93:
4b:fb:54:ce:af:ef:b3:b5:fc:db:8f:be:dd:89:19:
d2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:93:D1:C3:EE:52:3B:79:DB:15:A0:3D:A5:A2:77:82:61:C9:3C:BE
X509v3 Authority Key Identifier:
keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/ZJPRw-5SO3nbFaA9paJ3gmHJPL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.10.0/24
94.26.97.0/24
185.49.216.0/22
185.75.80.0/22
185.83.148.0/22
185.94.76.0/22
Signature Algorithm: sha256WithRSAEncryption
40:46:0a:52:8e:46:a7:7c:25:62:9a:f5:cb:9e:e6:d4:8f:95:
13:37:42:e6:6a:19:77:a1:d8:16:2c:77:d6:1f:6c:fa:c2:1e:
2a:ce:bb:8c:5b:9e:1f:45:83:b8:9f:d1:88:23:28:cc:5a:ab:
81:e4:7a:21:98:44:a9:93:06:10:9a:57:cd:bd:6d:4d:88:d2:
94:26:6f:33:8b:b3:f0:25:f9:8d:5c:12:91:77:fa:a4:cc:cf:
85:61:a4:ec:0a:46:51:25:0e:45:2a:05:c0:c1:1c:6b:50:13:
09:f7:ef:e1:01:d8:ab:bc:e9:3e:34:e9:fc:33:2d:77:5a:d6:
24:f9:88:80:e7:a3:ba:20:22:be:50:ea:72:26:88:61:2f:88:
d0:c3:14:d3:fd:14:d0:03:0e:36:44:9c:b0:ac:60:75:e4:f5:
eb:83:67:4c:7e:65:f9:79:9d:2d:f9:55:fe:f8:bf:76:2a:75:
27:56:90:d1:09:61:85:94:86:b2:35:ef:3b:4c:0a:ed:1e:9e:
50:57:5e:39:2a:a0:a1:ab:ba:dd:3d:b8:ec:c5:90:db:6b:b0:
ea:c9:8d:8e:4d:f0:20:a0:00:67:7e:cd:7e:7f:9e:23:8f:fc:
8e:b0:b3:4c:86:36:a0:93:e0:59:f4:d5:7f:c3:14:b1:a2:10:
65:f9:87:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:13 2023 by rpki-client on console.sobornost.net