Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/zzmXXx-D2meaUDts0krtDAc6mx8.roa
File: zzmXXx-D2meaUDts0krtDAc6mx8.roa (raw, json)
Hash identifier: SbMZGAaCirbhm9e4UcMxGPk2pEUWvrDxI4QXTwISFFs=
Subject key identifier: CF:39:97:5F:1F:83:DA:67:9A:50:3B:6C:D2:4A:ED:0C:07:3A:9B:1F
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 018570B98B95C678E4B0780DD231DB58C3EC
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/zzmXXx-D2meaUDts0krtDAc6mx8.roa
Signing time: Mon 02 Jan 2023 04:24:46 +0000
ROA not before: Mon 02 Jan 2023 04:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28742
IP address blocks: 194.21.56.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b9:8b:95:c6:78:e4:b0:78:0d:d2:31:db:58:c3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Jan 2 04:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf39975f1f83da679a503b6cd24aed0c073a9b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:32:ca:00:ad:03:26:da:e6:81:aa:25:f2:17:
68:77:b0:de:52:7a:70:3b:a6:15:7f:c2:a3:78:41:
bf:ac:0d:5a:15:43:b4:bc:09:f4:85:f2:bc:ce:d7:
7f:6c:62:b4:cb:77:69:2a:99:2e:81:f8:c0:26:08:
42:80:18:83:37:fd:9f:e5:c5:50:b8:42:02:4a:2a:
da:d5:78:a7:43:37:ac:9e:95:20:98:27:97:f2:fe:
2b:88:37:d5:a7:68:05:7d:d0:f0:b1:92:65:8d:62:
48:ce:26:a0:0a:46:0f:1e:53:c5:8c:b5:a0:06:00:
d1:a0:a6:39:24:ec:72:89:44:8c:8d:34:df:79:e4:
a7:53:69:1c:6c:68:32:bf:ea:f3:c4:10:fd:24:d1:
35:53:eb:87:1b:b2:3d:89:82:1d:fd:c0:16:37:38:
f9:70:52:63:cf:36:4e:cc:83:dc:84:40:22:5a:89:
cc:d9:ce:89:9e:af:d5:f2:c1:c4:00:1f:05:dd:51:
a7:87:ea:48:c0:cc:0e:4b:a1:7d:49:33:2d:61:fd:
e3:19:47:08:13:46:3a:af:6c:35:21:e8:ab:88:55:
2c:95:63:67:5e:3f:c4:ba:a9:8e:95:b4:d1:67:76:
49:3a:14:4a:68:97:ef:3c:53:c0:ee:93:af:ef:c6:
57:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:39:97:5F:1F:83:DA:67:9A:50:3B:6C:D2:4A:ED:0C:07:3A:9B:1F
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/zzmXXx-D2meaUDts0krtDAc6mx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.21.56.0/23
Signature Algorithm: sha256WithRSAEncryption
78:13:3c:98:53:c6:66:4b:13:fa:58:30:07:d1:9d:8a:f1:cd:
03:08:60:e8:09:6d:99:6a:ec:14:3e:60:87:58:b5:52:0d:5b:
5f:96:40:c6:96:99:ac:46:65:a6:4e:20:c3:cd:e8:40:fe:1b:
a2:e0:9f:65:25:b6:b9:39:3c:43:1f:92:82:a2:fc:d8:a7:97:
6b:11:90:62:0a:3c:0c:09:8e:65:8a:b2:86:d9:cf:a3:38:a0:
12:12:bd:fc:21:67:ab:d1:77:ed:fc:8c:4b:67:19:92:89:2c:
10:38:c5:36:d6:85:1e:b3:0a:76:8d:6a:79:74:cf:97:08:fc:
a6:4b:f0:ac:55:c1:64:a2:84:8c:75:3d:5e:74:6a:a0:5c:e5:
94:8f:df:04:22:f9:7d:2b:fd:5b:6b:f5:72:ca:74:e6:f9:bd:
b1:3e:b7:1d:12:94:f4:df:63:73:d6:20:19:c0:02:fd:d8:ef:
59:70:48:27:e8:a4:0c:5f:cd:9e:31:c1:1a:3d:be:42:79:f7:
b0:af:f4:c6:33:f8:4c:b2:d9:43:52:c0:28:09:6d:c9:80:6c:
e7:55:b3:32:5a:df:87:f9:8d:10:0e:b3:b5:bf:22:1b:09:16:
54:0c:b0:1a:c8:fa:8d:49:4b:8c:10:fa:7b:21:bb:56:61:1f:
ed:9f:46:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:50 2024 by rpki-client on console.sobornost.net