Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/RdbWzBZ_V4_CB63i-GXO0i9psdw.roa
File: RdbWzBZ_V4_CB63i-GXO0i9psdw.roa (raw, json)
Hash identifier: san9/U0NvXL+RKCNCp97dWwLnBGSZ1aPSaAuCBZy25c=
Subject key identifier: 45:D6:D6:CC:16:7F:57:8F:C2:07:AD:E2:F8:65:CE:D2:2F:69:B1:DC
Certificate issuer: /CN=64347465bc925c8e756ddfaa609eda02cc52d031
Certificate serial: 018C54241790E4C97C14780C9624E839A588
Authority key identifier: 64:34:74:65:BC:92:5C:8E:75:6D:DF:AA:60:9E:DA:02:CC:52:D0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/RdbWzBZ_V4_CB63i-GXO0i9psdw.roa
Signing time: Sun 10 Dec 2023 14:31:40 +0000
ROA not before: Sun 10 Dec 2023 14:31:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42314
IP address blocks: 85.114.105.0/24 maxlen: 24
85.114.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:54:24:17:90:e4:c9:7c:14:78:0c:96:24:e8:39:a5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64347465bc925c8e756ddfaa609eda02cc52d031
Validity
Not Before: Dec 10 14:31:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45d6d6cc167f578fc207ade2f865ced22f69b1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d4:65:a8:ba:26:cd:62:68:2e:fb:07:63:75:
f7:65:87:58:65:dd:e6:68:14:4e:58:2b:16:ac:c7:
fb:94:a4:b5:13:4c:3c:41:b6:0a:b9:bd:12:5d:19:
d0:be:af:96:6d:d3:30:ee:40:4f:1f:45:41:ef:76:
6e:60:b5:56:d8:f5:f8:8a:bc:c9:96:54:86:14:c2:
47:11:f5:bb:37:f0:5f:76:c9:17:b5:b6:b1:22:ec:
c2:12:13:c5:9b:ad:b7:43:9d:a9:6f:47:33:1a:5e:
07:1c:79:9b:a9:15:cf:b0:49:30:06:0f:4d:bb:06:
2b:fb:b3:9d:ea:44:92:14:93:9d:55:8f:0d:15:a9:
ec:ff:9e:cb:60:8d:f9:c9:dd:66:f7:d4:bb:c1:a0:
e1:f0:0f:55:f4:b7:2c:19:c0:23:09:1a:31:0e:05:
27:07:2d:eb:3c:56:19:83:cd:78:65:d1:23:44:3e:
02:db:1e:7f:ab:88:71:20:39:ba:45:80:14:00:9c:
98:44:c9:27:15:54:2b:29:40:95:34:2e:21:8c:65:
bb:99:db:66:09:8b:eb:38:76:e4:5e:e8:4c:32:92:
18:2a:ee:28:5a:13:15:58:6b:d6:1d:44:82:d1:3d:
17:3c:04:8b:0a:af:4a:be:4c:3e:0a:99:fe:15:2f:
a3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D6:D6:CC:16:7F:57:8F:C2:07:AD:E2:F8:65:CE:D2:2F:69:B1:DC
X509v3 Authority Key Identifier:
keyid:64:34:74:65:BC:92:5C:8E:75:6D:DF:AA:60:9E:DA:02:CC:52:D0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/RdbWzBZ_V4_CB63i-GXO0i9psdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.114.105.0-85.114.106.255
Signature Algorithm: sha256WithRSAEncryption
3a:e7:97:63:19:5d:79:6b:ad:4e:65:10:09:01:cd:69:00:54:
99:5a:a3:d8:45:10:ac:7e:fa:60:7a:5e:6b:0c:3e:4a:7b:4d:
31:51:cd:f7:15:83:a7:d2:09:ee:d2:1f:6f:49:22:af:2f:dd:
43:d4:49:c2:ec:0d:73:ea:a3:0d:f5:b0:fc:78:42:77:41:cb:
ef:29:c8:c2:1a:e4:17:d0:4c:6e:c5:2c:09:4e:8a:e1:b9:ce:
9f:ed:8c:6a:c4:d0:3f:eb:54:bb:23:9c:ae:1f:47:4b:07:d8:
e3:e1:16:8a:c1:ee:c8:e0:10:c4:15:0b:e7:86:c2:58:11:36:
c0:57:e8:15:25:9b:3e:71:e1:d5:e2:cc:0e:bb:d8:ab:ed:9e:
f8:b8:b5:f8:31:60:08:0e:38:17:cf:74:ce:f2:85:0e:1e:95:
0b:62:d6:36:22:0a:d3:91:1c:5f:ba:b9:dd:d0:1b:1d:3a:f6:
8d:17:4e:41:58:16:b4:97:6d:93:f5:6c:b7:f1:5e:43:5b:47:
a8:69:2a:59:d8:85:2a:59:da:ca:b2:14:24:04:15:46:60:14:
31:6a:eb:0c:7f:c2:e3:ca:42:d3:7a:f9:d4:09:48:9d:e3:be:
d1:57:f9:33:17:a7:75:c4:d9:4b:2b:4d:b2:64:4f:81:78:c5:
cc:50:ee:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:04 2024 by rpki-client on console.sobornost.net