Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/zfZIldd6aC8IW76JBqmkznfwwoI.roa
File: zfZIldd6aC8IW76JBqmkznfwwoI.roa (raw, json)
Hash identifier: Dsfk9NXsqYG0SvyfTO9J7w+Z3A/vmLyUGbwS5mR1Os0=
Subject key identifier: CD:F6:48:95:D7:7A:68:2F:08:5B:BE:89:06:A9:A4:CE:77:F0:C2:82
Certificate issuer: /CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Certificate serial: 018571D7C4FAD4DAC4CF3774D510E9E442E5
Authority key identifier: 48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/zfZIldd6aC8IW76JBqmkznfwwoI.roa
Signing time: Mon 02 Jan 2023 09:37:24 +0000
ROA not before: Mon 02 Jan 2023 09:37:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 185.85.208.0/22 maxlen: 24
2a0d:9c80::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:c4:fa:d4:da:c4:cf:37:74:d5:10:e9:e4:42:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Validity
Not Before: Jan 2 09:37:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdf64895d77a682f085bbe8906a9a4ce77f0c282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:34:9a:92:62:50:f2:5d:00:b8:43:23:b2:64:
e2:6d:ec:f1:1e:8d:20:7d:10:7e:34:77:73:6b:1f:
8e:c3:82:5a:b3:b7:45:13:8e:01:31:11:f5:f7:bc:
89:23:33:74:c5:bb:fb:28:ff:15:7b:86:b9:80:ed:
f4:a2:81:83:61:49:4f:4e:65:90:0c:65:cc:7d:e9:
f4:2d:47:78:4e:e3:b8:5f:ce:da:34:c0:62:59:4f:
86:c1:8d:2e:67:38:08:bf:6e:4a:2c:05:f6:1b:f2:
4d:0a:82:49:e5:ca:68:83:99:02:07:9e:62:cc:02:
e0:e6:fa:df:03:f6:b4:58:41:28:d4:9d:8f:82:51:
9e:6e:86:8d:69:c8:90:8f:bd:2e:32:dc:4a:a6:15:
60:12:95:c3:86:3a:8b:79:64:a9:16:72:29:37:2a:
75:5c:e9:1b:6d:c8:99:a1:15:94:7b:b2:30:4d:f2:
7f:be:9b:b4:22:ea:64:48:f6:e0:48:68:b8:32:b3:
ac:d6:b5:a8:b1:14:e3:33:13:a9:40:2b:d9:dd:3f:
9e:2b:22:a3:d5:ca:a5:08:b3:61:8a:00:0b:63:3e:
95:7d:c4:e7:e5:7d:b2:a0:e0:91:b3:89:cc:38:6e:
7b:ac:8a:bb:ac:96:a9:ab:1c:cb:0b:8f:31:cf:de:
68:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F6:48:95:D7:7A:68:2F:08:5B:BE:89:06:A9:A4:CE:77:F0:C2:82
X509v3 Authority Key Identifier:
keyid:48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/zfZIldd6aC8IW76JBqmkznfwwoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.208.0/22
IPv6:
2a0d:9c80::/29
Signature Algorithm: sha256WithRSAEncryption
66:c1:b3:94:1e:d6:59:a3:70:c2:ff:e9:16:19:ba:7c:90:e1:
df:e7:61:5e:db:64:ba:8b:80:1b:7c:1a:03:be:56:90:67:4f:
d2:9c:09:60:75:82:09:e3:41:f2:a4:ac:96:37:b7:bd:96:03:
a3:fc:ff:33:f6:c6:d2:e6:cb:87:23:b2:9a:16:17:99:8a:6f:
49:11:90:b3:9f:33:19:82:5f:41:dc:38:5c:7b:b6:e4:64:07:
f4:7a:bb:64:9e:3f:04:17:44:9e:78:27:94:33:9f:4e:0f:87:
b5:95:4f:c9:1c:ac:6f:22:41:e7:9e:12:4d:de:9a:ec:e6:3d:
75:17:8c:d6:de:71:0f:41:e3:53:04:e3:0d:7f:31:aa:b3:94:
b6:57:95:f8:62:6b:1a:45:f3:f5:ff:9f:95:68:2c:ea:5a:e5:
0c:64:3a:fe:e0:a1:92:41:70:61:fe:8a:1b:22:61:81:b3:10:
58:d1:ab:65:e9:2b:dc:da:14:90:ec:a4:30:4c:a8:29:f6:24:
d7:5a:d4:60:e5:06:80:21:de:04:ad:9d:88:cc:16:95:69:e4:
2d:69:fd:34:9d:2a:80:9b:a8:1b:f3:a4:e9:fb:1a:42:9c:fd:
ea:33:ce:01:e5:06:cb:1f:53:36:a2:61:e3:09:72:6a:98:30:
22:73:9b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:44 2024 by rpki-client on console.sobornost.net