Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/ZmIWgcE92DTpmHzvz76ImJmE_Ok.roa
File: ZmIWgcE92DTpmHzvz76ImJmE_Ok.roa (raw, json)
Hash identifier: N1e7eTIe78NytZHcONbdTlspz3bfgiLZQYQJR/l7WYo=
Subject key identifier: 66:62:16:81:C1:3D:D8:34:E9:98:7C:EF:CF:BE:88:98:99:84:FC:E9
Certificate issuer: /CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Certificate serial: 0185706760AC6B3B7D30A6A48F2A5027E367
Authority key identifier: CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/ZmIWgcE92DTpmHzvz76ImJmE_Ok.roa
Signing time: Mon 02 Jan 2023 02:55:01 +0000
ROA not before: Mon 02 Jan 2023 02:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48544
IP address blocks: 185.86.200.0/23 maxlen: 24
185.86.203.0/24 maxlen: 24
185.86.202.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:60:ac:6b:3b:7d:30:a6:a4:8f:2a:50:27:e3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Validity
Not Before: Jan 2 02:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66621681c13dd834e9987cefcfbe88989984fce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:48:b2:32:5a:37:e0:13:2e:58:63:22:74:ee:
98:d3:46:ac:1a:f7:6d:49:d6:af:b7:17:53:ac:6b:
95:ad:71:26:72:af:33:88:14:8e:78:ac:8e:14:cd:
d0:3f:2d:62:b6:51:15:10:18:80:8d:e8:af:ef:c2:
90:8d:b3:1b:91:64:a7:ee:5d:45:86:9f:bc:32:a8:
39:b6:af:29:7a:42:c3:0d:a3:e1:70:a0:4a:bf:24:
6f:77:bc:b5:5d:fb:74:ba:aa:82:df:85:67:aa:48:
b3:51:6f:ad:61:e2:85:a9:c2:23:17:d0:35:3a:f1:
fd:63:c0:ab:a5:5b:58:86:17:12:8a:ae:5a:c1:38:
0c:39:fb:dc:a6:f3:d5:0b:cf:a9:24:5d:f7:01:dd:
c8:09:d3:e1:85:17:24:19:be:b8:c9:24:5b:c2:69:
1c:96:76:ed:49:a3:21:38:8b:41:a4:a6:50:88:dc:
9e:10:c3:fc:ab:95:88:b2:28:88:fb:7e:4d:21:13:
49:80:f8:98:21:8d:c2:29:e7:cb:71:2e:2c:1d:d8:
68:dc:6a:c4:dc:34:24:ad:4e:54:b8:02:81:8a:0c:
16:11:64:06:cf:8d:e7:cc:91:65:07:e0:cc:ea:d9:
0f:2f:a2:d7:f6:6a:3d:df:74:5e:3a:90:50:71:1b:
ba:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:62:16:81:C1:3D:D8:34:E9:98:7C:EF:CF:BE:88:98:99:84:FC:E9
X509v3 Authority Key Identifier:
keyid:CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/ZmIWgcE92DTpmHzvz76ImJmE_Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.200.0/22
Signature Algorithm: sha256WithRSAEncryption
94:5e:10:94:98:af:26:af:89:d9:98:df:83:1a:db:a8:89:60:
ab:e4:42:36:d7:59:1d:ba:ba:bf:c6:38:86:b3:18:3b:d5:f8:
17:94:63:c8:a4:da:81:d3:eb:89:1f:38:4c:19:6c:df:ea:e3:
bb:56:d2:f8:77:48:fe:b6:8e:96:39:16:18:26:95:c2:c2:ef:
a4:84:34:92:4b:a5:4b:b4:e6:9e:e1:b1:b6:17:a8:23:05:9a:
4a:d6:a1:da:41:8f:64:ff:9d:d5:03:1e:b7:1c:e1:4e:36:b4:
7a:1d:a7:37:41:31:0c:77:b1:99:a9:06:a0:63:bc:4a:c1:3a:
a0:ec:6a:0d:e3:ea:f1:08:54:79:e4:75:0a:3d:ed:6e:9a:c4:
a7:5d:09:1d:fd:80:d5:8c:08:b6:69:63:3a:c7:e9:2f:79:c1:
e2:9e:ef:82:a5:e7:a7:d8:93:63:af:8b:4e:d1:7b:a8:88:45:
48:5c:e8:3b:51:e4:b0:58:30:60:18:d3:62:52:82:b9:48:a9:
f1:44:81:46:34:6d:b4:25:62:32:25:0f:ad:18:cf:67:79:40:
63:58:b5:86:14:bf:80:41:25:7b:22:6f:49:a6:c1:2f:41:6d:
e6:74:71:02:fe:51:32:4a:56:2d:f3:bc:7a:61:f7:80:3a:a6:
65:6e:c3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 16:36:37 2024 by rpki-client on console.sobornost.net