Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/ZIAXPlxm-z5NJx1fBqFaav0EA88.roa
File: ZIAXPlxm-z5NJx1fBqFaav0EA88.roa (raw, json)
Hash identifier: +hhJmRL3dAZxKtTBvHjcq5Jqks8XRKStZhwmt3YeyPo=
Subject key identifier: 64:80:17:3E:5C:66:FB:3E:4D:27:1D:5F:06:A1:5A:6A:FD:04:03:CF
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 01885BDE70E36E12151E3D7EE6228B51F501
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/ZIAXPlxm-z5NJx1fBqFaav0EA88.roa
Signing time: Sat 27 May 2023 06:21:24 +0000
ROA not before: Sat 27 May 2023 06:21:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15935
IP address blocks: 185.188.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5b:de:70:e3:6e:12:15:1e:3d:7e:e6:22:8b:51:f5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: May 27 06:21:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6480173e5c66fb3e4d271d5f06a15a6afd0403cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:86:55:38:9f:a4:2c:2b:4e:97:3f:ed:87:d9:
5c:30:89:34:f3:d8:2b:0c:bc:d9:82:1c:4a:10:18:
10:dc:c6:e2:41:59:03:0e:f3:d6:fe:0c:5d:56:f7:
12:5b:92:26:5f:90:c2:65:a7:6e:a9:51:d3:ca:18:
42:d6:4e:de:ec:4e:27:6f:5b:2f:2a:aa:7b:1b:02:
ac:8e:8b:be:23:9a:e1:78:8d:77:19:f4:1e:b3:5e:
c5:d1:86:f3:2a:11:cd:71:6c:6d:92:1e:c7:7f:f5:
e1:12:af:41:eb:83:1e:9f:a5:c8:90:f8:2a:31:5f:
3b:59:1c:dd:a5:9b:69:10:49:1d:b3:ee:32:08:63:
64:68:46:a6:88:b2:35:50:2d:a1:f2:11:ba:45:7d:
24:95:33:b2:90:ec:dd:42:78:c6:84:7a:9c:54:88:
4d:29:10:73:57:c2:09:94:c0:ac:f9:35:22:f6:96:
ff:61:c9:3e:68:26:9f:75:79:7d:d4:d7:b2:5d:38:
e6:25:87:4a:84:2c:76:60:6e:53:5f:72:93:aa:7a:
22:5b:a0:db:61:81:bf:cc:a1:04:2e:3f:eb:33:b2:
53:fd:c9:07:89:ee:79:67:8b:76:f8:9a:6b:30:c0:
74:b7:b7:46:d0:4f:e4:b1:0f:83:86:b5:57:dc:7f:
62:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:80:17:3E:5C:66:FB:3E:4D:27:1D:5F:06:A1:5A:6A:FD:04:03:CF
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/ZIAXPlxm-z5NJx1fBqFaav0EA88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.102.0/24
Signature Algorithm: sha256WithRSAEncryption
01:84:5e:97:df:a0:29:5f:96:11:a9:ea:d9:a3:40:8a:37:6c:
03:cf:0d:47:78:ea:52:e4:3e:4b:7d:39:de:9f:0f:07:6d:8e:
66:9d:a2:0d:be:af:9e:da:54:31:cc:8a:99:49:1a:1c:23:fe:
cc:01:00:56:18:02:f2:c3:c3:b9:b6:d2:4b:a2:cc:46:c4:49:
57:df:3a:a1:b7:98:33:23:ef:7c:0d:0c:77:88:b5:8c:aa:ff:
d6:4e:a9:d9:70:6c:c1:08:a3:03:52:fe:c2:6c:8e:ef:16:c9:
0b:1a:28:40:64:34:d9:e7:cd:cf:40:e7:7d:90:56:87:c4:35:
b2:c5:e9:e4:08:19:c0:8e:88:97:13:df:ea:e8:77:c5:f1:e0:
89:d2:6f:e5:d5:a4:ab:aa:0b:36:2f:8c:af:74:1e:f9:46:f9:
bc:f4:a6:67:7a:30:96:a1:d8:68:bd:52:e9:0b:3b:f5:02:ee:
fa:7b:3b:4b:07:84:23:24:d4:b0:6e:58:3e:65:65:30:5c:18:
e6:63:ad:f0:94:66:d2:be:4f:1b:54:9d:e7:f7:c6:ac:d6:08:
91:0a:74:2d:7e:9d:66:92:ed:95:a1:d7:8c:d6:bb:59:30:af:
b4:21:3c:96:77:2b:ce:6c:e6:6d:35:cf:c4:72:48:56:a7:f7:
f9:fd:8e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:11 2024 by rpki-client on console.sobornost.net