Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/op1kzcniRZBviUlfzbGIhbxS9Q4.roa
File: op1kzcniRZBviUlfzbGIhbxS9Q4.roa (raw, json)
Hash identifier: WhAvQZUytZlWKojTgaKnzvK2OqRF3tK+cHXSUOPY1vw=
Subject key identifier: A2:9D:64:CD:C9:E2:45:90:6F:89:49:5F:CD:B1:88:85:BC:52:F5:0E
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 01856C0A4C4C789D44A50ECDDB96ED53D36A
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/op1kzcniRZBviUlfzbGIhbxS9Q4.roa
Signing time: Sun 01 Jan 2023 06:34:52 +0000
ROA not before: Sun 01 Jan 2023 06:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42533
IP address blocks: 185.175.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:4c:4c:78:9d:44:a5:0e:cd:db:96:ed:53:d3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Jan 1 06:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a29d64cdc9e245906f89495fcdb18885bc52f50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6c:e2:48:ea:74:cf:9a:ff:3f:a0:49:b7:94:
96:b9:3a:51:45:4a:54:77:6a:71:76:9d:c0:f1:c7:
23:de:01:b7:64:7d:ce:45:7f:7b:b8:d4:12:10:b8:
cf:c8:07:50:b1:f1:50:57:89:93:55:73:f2:29:d9:
94:29:e9:07:b6:7e:67:4c:cb:1c:19:21:94:18:79:
84:d5:4b:2d:b1:31:40:d0:55:b1:a3:de:aa:35:cb:
71:b4:12:08:cc:3d:84:42:e8:41:15:35:e5:05:35:
b0:92:1f:82:7c:8c:ee:a3:4a:79:31:69:7f:f0:e3:
a6:6f:e5:4d:8e:c7:10:71:99:6d:50:e5:95:30:9d:
74:c7:80:38:1a:a8:88:d9:27:56:f4:9f:b5:47:8f:
d5:5a:8a:4c:41:e8:2d:57:8d:ad:a2:db:56:77:d0:
34:d9:93:99:fe:84:bc:91:14:70:6a:00:b9:cf:16:
95:87:0a:95:3b:46:9c:27:1f:83:7e:1b:b6:7f:87:
67:8c:6d:aa:53:f6:6e:53:07:b8:bd:ee:fd:f0:2b:
6d:47:45:ca:e7:87:7e:16:e8:6c:8b:88:8a:7f:a6:
bc:21:0f:f3:7b:0b:39:9a:a4:fc:16:7b:5c:5e:44:
4c:8e:8f:a8:5b:be:c6:60:a2:b9:57:c4:ea:99:32:
a5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9D:64:CD:C9:E2:45:90:6F:89:49:5F:CD:B1:88:85:BC:52:F5:0E
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/op1kzcniRZBviUlfzbGIhbxS9Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.93.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ac:7e:69:94:ea:52:9a:be:fe:86:54:56:9d:4b:a6:0e:c9:
23:aa:43:a8:03:13:df:a6:20:94:8c:a6:b6:e9:a6:bc:44:da:
c1:4e:65:31:1e:40:7a:6f:58:2a:37:bc:66:75:c8:80:3c:2c:
f4:33:51:5f:ed:f6:4f:2a:b6:9d:15:23:44:ec:c2:8e:f3:76:
ad:70:d5:fb:a8:17:72:fa:e8:ff:e7:da:8e:aa:30:77:2c:51:
03:07:c1:fb:42:9e:19:0c:c1:5a:bf:fd:01:f2:0d:35:01:16:
74:f0:67:4a:48:12:37:f2:c9:7b:89:9f:96:d6:ed:b7:53:52:
e4:b8:d0:6b:c4:d9:ec:db:07:fb:8d:06:11:35:8c:56:6d:66:
69:65:e3:b2:c1:f5:bb:3f:ed:fd:d9:b8:0b:dd:4a:82:10:9f:
33:fd:47:c7:38:15:83:cd:a8:dd:e6:35:6f:ff:fb:82:0a:3d:
10:cd:94:f6:0f:ba:19:79:b9:b0:fc:13:90:2b:88:a7:9e:41:
b8:e5:4e:d9:2c:7a:71:9b:e3:02:c8:97:a6:96:6c:10:97:c4:
65:fc:ed:1d:5f:0e:8a:19:16:bb:5b:db:83:61:90:ac:68:49:
48:39:26:a4:e8:98:66:f2:fd:60:99:97:db:a9:51:0c:e6:a3:
dc:a5:e6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:52 2024 by rpki-client on console.sobornost.net