Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/ZC5ycCsxhX8v4Y604J45ZZbKWEI.roa
File: ZC5ycCsxhX8v4Y604J45ZZbKWEI.roa (raw, json)
Hash identifier: Mjj35G5THse1CEMJplO3Ib4BERmyAouBLpZzxwcd3ow=
Subject key identifier: 64:2E:72:70:2B:31:85:7F:2F:E1:8E:B4:E0:9E:39:65:96:CA:58:42
Certificate issuer: /CN=ed64691c31892cc991ad4e9a9671147759e417ab
Certificate serial: 0189266DB1EC360C5CA8AECE172508D58AEB
Authority key identifier: ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/ZC5ycCsxhX8v4Y604J45ZZbKWEI.roa
Signing time: Wed 05 Jul 2023 14:21:10 +0000
ROA not before: Wed 05 Jul 2023 14:21:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8218
IP address blocks: 185.75.241.0/24 maxlen: 24
2a05:5504:6::/48 maxlen: 48
2a05:5504:11::/48 maxlen: 48
2a05:5504:1::/48 maxlen: 48
2a05:5504:7::/48 maxlen: 48
2a05:5504:2::/48 maxlen: 48
2a05:5504:8::/48 maxlen: 48
2a05:5504:3::/48 maxlen: 48
2a05:5504:9::/48 maxlen: 48
2a05:5504:4::/48 maxlen: 48
2a05:5504:5::/48 maxlen: 48
2a05:5504::/32 maxlen: 32
2a05:5504:10::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:26:6d:b1:ec:36:0c:5c:a8:ae:ce:17:25:08:d5:8a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed64691c31892cc991ad4e9a9671147759e417ab
Validity
Not Before: Jul 5 14:21:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=642e72702b31857f2fe18eb4e09e396596ca5842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5a:95:42:53:41:35:36:59:86:29:9d:2f:b2:
40:0f:d6:bd:46:3f:b9:43:53:bd:78:e1:a9:bd:18:
55:ca:25:32:57:4b:4c:34:f1:96:5d:e0:b9:0f:e3:
70:81:a9:2b:14:59:97:35:68:e7:82:4e:50:01:ed:
83:eb:7f:e0:a3:f2:da:67:46:9e:93:09:c0:3f:67:
70:6c:52:83:b8:9f:32:ad:33:8f:30:6d:a4:26:1c:
a1:a2:66:09:60:01:2e:c4:7f:40:c8:14:89:fb:1d:
17:bd:ce:c6:d6:bf:ce:ed:0a:34:24:6f:b9:ff:37:
ce:c0:f5:9e:ce:52:45:1d:43:91:10:a5:8b:76:f1:
5d:cf:91:05:06:89:9e:a4:c3:bc:6c:7e:b3:38:e7:
f2:b0:5f:a2:d4:e6:60:55:93:c9:d0:c0:81:95:a4:
a4:ea:fe:d0:c9:36:17:ff:03:8e:25:fc:29:67:78:
02:65:90:70:bd:17:1c:33:ba:9f:cd:f1:c0:94:44:
af:b2:04:2e:f5:4f:5e:55:c4:49:98:6d:cf:4c:a9:
5d:3b:97:92:dc:0a:24:38:f2:1b:9d:8e:f7:31:c8:
bd:ce:59:4e:a6:f1:88:cb:77:4c:38:2f:89:e0:85:
dc:bf:0a:98:f3:c9:79:01:b6:b4:33:33:d6:ef:9d:
eb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2E:72:70:2B:31:85:7F:2F:E1:8E:B4:E0:9E:39:65:96:CA:58:42
X509v3 Authority Key Identifier:
keyid:ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/ZC5ycCsxhX8v4Y604J45ZZbKWEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.241.0/24
IPv6:
2a05:5504::/32
Signature Algorithm: sha256WithRSAEncryption
a2:37:49:e0:87:27:98:45:55:bb:ee:de:68:09:30:97:88:af:
4d:53:a3:44:60:b5:ce:2d:8e:df:e2:7c:2e:16:fa:6c:f3:c7:
7a:22:f1:7b:17:18:c8:ec:07:0d:80:3d:49:0c:d0:cd:97:af:
19:6f:99:02:06:ab:c0:c2:b7:69:17:5b:b9:07:8a:e0:99:74:
cf:6b:ba:32:4d:e2:a3:46:79:41:ca:aa:ab:fe:8a:41:e2:a1:
bb:51:f3:1e:3a:5b:db:56:4d:52:bd:1e:36:92:db:0f:05:de:
ab:8f:f4:71:c4:68:77:0f:95:10:05:ca:15:b3:08:39:e8:40:
59:23:19:94:c0:90:99:cc:bf:af:6c:d7:7a:95:ad:35:14:ce:
fc:a5:d5:d2:e8:68:96:27:fd:7c:7a:1e:f2:70:e1:22:c6:e1:
65:19:45:35:36:fb:9e:21:f1:2d:90:71:8a:e8:d9:9a:62:b8:
89:68:f4:03:26:19:02:33:23:db:87:23:36:6f:07:db:c5:53:
f6:00:87:94:9b:81:e5:f4:80:5d:9f:65:3a:a3:7e:92:7e:6c:
38:e7:87:18:58:81:86:e3:2c:f9:e2:5f:2a:6a:61:22:a0:42:
6e:cf:fb:c8:35:7c:89:74:14:91:6d:33:d0:29:a5:6b:dd:ad:
fd:df:df:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:44 2023 by rpki-client on console.sobornost.net