Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/ZrVIeQhR_NelnyUy6TZmQHGHrXg.roa
File: ZrVIeQhR_NelnyUy6TZmQHGHrXg.roa (raw, json)
Hash identifier: QbfGrrTwB4Lg3SiNw3rGIXjDt/A771MUOM2bp1bQiLg=
Subject key identifier: 66:B5:48:79:08:51:FC:D7:A5:9F:25:32:E9:36:66:40:71:87:AD:78
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 01857079674D383E62C841C851EF30248F02
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/ZrVIeQhR_NelnyUy6TZmQHGHrXg.roa
Signing time: Mon 02 Jan 2023 03:14:42 +0000
ROA not before: Mon 02 Jan 2023 03:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48918
IP address blocks: 185.250.110.0/24 maxlen: 24
185.250.108.0/24 maxlen: 24
2a0c:c40::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:67:4d:38:3e:62:c8:41:c8:51:ef:30:24:8f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Jan 2 03:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66b548790851fcd7a59f2532e93666407187ad78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:bc:33:b8:24:e7:37:3f:b1:7d:6f:e0:7a:09:
d6:ff:92:d1:05:24:d3:08:e6:0f:9d:33:4a:4e:d9:
5d:5a:fa:42:86:95:c0:1e:b1:9f:1c:aa:46:11:33:
1c:98:5a:26:c8:64:e7:b0:92:ec:da:d7:a7:40:97:
cf:06:34:5b:cf:d9:8f:3e:f2:da:9a:12:d1:f3:d5:
1c:c5:b6:c0:76:c1:ce:46:ca:8d:86:99:5b:07:dc:
28:39:f7:29:f5:b6:c6:77:aa:10:3c:3e:0b:65:79:
17:6a:55:fe:ea:71:bc:63:e3:97:65:bd:1d:13:70:
b1:c4:02:34:cc:18:60:50:bc:d2:74:67:12:0f:a8:
92:10:b1:f4:28:61:df:57:f2:af:b3:76:b2:d6:a2:
57:aa:4c:ef:e2:26:46:93:63:d7:01:88:fe:50:10:
9d:69:78:52:a2:e7:8d:18:64:f9:31:72:13:bd:29:
1f:c2:34:c9:97:96:15:d1:73:d9:87:67:af:a1:b2:
78:dd:89:e2:5b:29:6e:16:71:6e:cd:7c:f5:c2:f4:
23:59:17:6c:67:ce:20:06:d7:e8:79:8a:8f:44:93:
a7:1f:0b:05:7c:10:c8:be:3e:d5:7a:82:bc:1a:98:
5e:6f:32:c5:c5:f1:90:6a:aa:17:cf:f5:8a:98:fe:
30:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B5:48:79:08:51:FC:D7:A5:9F:25:32:E9:36:66:40:71:87:AD:78
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/ZrVIeQhR_NelnyUy6TZmQHGHrXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.108.0/24
185.250.110.0/24
IPv6:
2a0c:c40::/32
Signature Algorithm: sha256WithRSAEncryption
3f:fd:5c:3e:d6:77:50:ea:47:e1:02:ff:f1:d1:2c:8e:9b:f9:
d6:b9:1c:73:02:16:a2:6b:8f:8d:16:29:87:5c:9c:1a:5d:fd:
c7:c0:1d:b1:db:d3:8e:9f:f9:44:de:40:64:67:4f:84:13:44:
19:c8:28:a6:6b:68:bf:ef:c7:ea:48:41:b8:3e:39:d2:ad:e6:
01:5b:50:2f:1a:15:d7:40:83:e6:d9:7f:66:97:de:89:04:f0:
ff:ec:c7:99:6e:12:ab:98:78:80:cb:3f:59:99:b7:7b:85:62:
19:a3:81:e7:fd:db:b0:cc:2b:9d:07:bd:7f:22:21:c2:b8:8b:
d9:52:07:6c:81:37:a0:55:44:18:c3:4c:d1:37:0e:45:ea:f0:
f3:07:a9:23:6b:83:59:6a:76:b8:0a:e8:b7:33:df:6f:60:45:
5e:d1:42:e6:46:a7:a3:b2:12:e7:35:76:40:d6:ea:50:98:59:
3e:b9:f1:6c:59:6a:46:92:96:8d:05:ea:3a:20:f1:12:d4:e0:
cd:83:5c:f5:fa:be:55:90:5e:84:00:a2:e5:b4:68:e1:7c:54:
8d:ed:57:2e:b7:ed:00:69:a7:6c:a7:c1:bf:f0:48:8e:e3:e4:
2e:15:b9:36:3d:af:5c:e9:ac:b6:8a:f8:e8:8e:06:21:9a:f9:
c2:0e:03:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:43 2024 by rpki-client on console.sobornost.net