Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/CZZga75v2hfmjfZXVsSkEIMlVPk.roa
File: CZZga75v2hfmjfZXVsSkEIMlVPk.roa (raw, json)
Hash identifier: x4IbEax1SA2Yd1YN85yjSQlKDbpMdOuRVtCPl1qira8=
Subject key identifier: 09:96:60:6B:BE:6F:DA:17:E6:8D:F6:57:56:C4:A4:10:83:25:54:F9
Certificate issuer: /CN=a898496b8d1dd825b487038fb87ca199b13b93df
Certificate serial: 01857082928C1EFB1A70DA5E5FC6975CCEFA
Authority key identifier: A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/CZZga75v2hfmjfZXVsSkEIMlVPk.roa
Signing time: Mon 02 Jan 2023 03:24:43 +0000
ROA not before: Mon 02 Jan 2023 03:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48866
IP address blocks: 195.191.40.0/24 maxlen: 24
195.191.41.0/24 maxlen: 24
193.218.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:92:8c:1e:fb:1a:70:da:5e:5f:c6:97:5c:ce:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a898496b8d1dd825b487038fb87ca199b13b93df
Validity
Not Before: Jan 2 03:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0996606bbe6fda17e68df65756c4a410832554f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e2:9b:3d:4e:28:3d:70:49:32:9d:f6:64:62:
10:bf:17:70:f1:71:47:46:a2:ba:d5:26:13:fc:00:
ee:77:8a:50:eb:8e:44:75:bf:73:fd:e8:39:81:8d:
55:58:bc:bc:bc:43:5b:2b:ec:6e:47:7f:90:45:5c:
19:2a:e1:cc:df:0a:54:14:c5:be:9d:0e:ac:87:41:
6c:d1:f0:81:f7:51:89:d3:c4:31:2d:4e:9a:36:d4:
82:a1:ab:e0:fd:16:4a:0e:b8:b4:d3:a8:d4:19:bf:
57:e8:38:9e:5f:2a:44:aa:48:7c:45:2f:b6:b3:29:
d4:4f:32:80:f0:09:23:50:eb:c8:aa:27:f6:0e:79:
63:4e:cf:09:ba:f1:51:c9:50:66:da:c4:04:82:41:
75:cd:d1:c8:0f:f8:03:cd:4c:ba:3c:59:4c:6a:62:
10:9f:68:e4:a5:c3:97:00:8f:53:1d:85:49:42:61:
c2:fd:7b:20:62:ba:d8:93:3e:ff:b5:08:ea:c7:b5:
14:9f:7c:72:08:a5:44:4a:45:89:1c:58:f3:2b:e6:
d9:e8:28:42:3b:fc:86:6f:65:03:22:d1:ac:58:1e:
63:1b:62:50:92:19:26:f7:4d:54:b0:7c:3a:00:6f:
1b:1e:2d:6f:9e:f8:af:1d:b6:ab:be:f5:b4:ac:b6:
24:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:96:60:6B:BE:6F:DA:17:E6:8D:F6:57:56:C4:A4:10:83:25:54:F9
X509v3 Authority Key Identifier:
keyid:A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/CZZga75v2hfmjfZXVsSkEIMlVPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.186.0/24
195.191.40.0/23
Signature Algorithm: sha256WithRSAEncryption
76:b6:25:ce:9b:cf:bb:9d:a8:02:b7:92:2a:fa:26:6a:b1:32:
fb:50:2b:45:8e:6b:d9:cf:4e:a6:48:ce:87:50:cf:18:37:5e:
3f:fe:fe:41:0d:56:49:4a:a7:dc:8c:dc:d8:62:5c:d5:97:29:
a0:a1:b8:36:b1:08:a4:16:96:b5:53:54:1a:82:a9:e0:a3:4d:
07:fa:83:de:45:00:19:d3:bb:f6:7b:ff:63:14:88:e4:43:ca:
b6:d2:65:9f:5e:ad:52:c2:78:0f:6d:75:c1:1f:8d:65:f9:9f:
06:2e:6d:96:a4:84:24:04:85:9f:9e:42:1c:2a:5a:3b:c2:08:
15:f2:7d:48:13:cd:0f:c3:89:b3:da:2f:22:a2:51:c2:9e:f0:
65:dd:12:ab:cd:3b:b6:0b:97:20:d2:31:4b:25:e6:53:f4:9e:
11:39:74:91:4b:39:08:3f:28:5c:75:40:7f:46:c1:fc:13:7e:
bc:32:c6:cf:20:36:e7:4a:68:39:78:1f:48:95:ea:96:3b:82:
9e:dc:7d:53:c8:14:d2:42:f5:df:4c:dc:ae:83:c3:43:f0:26:
a7:64:55:61:5f:9e:5b:e5:fc:44:fc:cd:a4:b4:33:4b:b9:6e:
77:4d:85:0d:c4:72:74:31:af:11:61:dc:25:47:ed:98:d2:13:
7a:0e:9f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:56 2024 by rpki-client on console.sobornost.net