Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/zPVSegK_FoJEf4WGEug_srekNxI.roa
File: zPVSegK_FoJEf4WGEug_srekNxI.roa (raw, json)
Hash identifier: ZXTlSk6gCtxkSljNLBndk9k6lJpVECOnD4415/72+jc=
Subject key identifier: CC:F5:52:7A:02:BF:16:82:44:7F:85:86:12:E8:3F:B2:B7:A4:37:12
Certificate issuer: /CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
Certificate serial: 01856DD4220CA050808A8E9C284A45A52A87
Authority key identifier: FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/zPVSegK_FoJEf4WGEug_srekNxI.roa
Signing time: Sun 01 Jan 2023 14:54:56 +0000
ROA not before: Sun 01 Jan 2023 14:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203602
IP address blocks: 185.255.244.0/22 maxlen: 22
2a0c:61c0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:22:0c:a0:50:80:8a:8e:9c:28:4a:45:a5:2a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
Validity
Not Before: Jan 1 14:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccf5527a02bf1682447f858612e83fb2b7a43712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6a:0b:72:32:1e:48:83:b1:e5:2e:6e:d6:19:
c3:77:6d:b5:76:d3:72:ed:21:14:73:35:35:cd:88:
f8:cd:e4:89:4d:73:9f:ba:79:fd:84:e4:48:e7:3e:
fe:d3:b6:8b:71:24:87:65:36:05:52:62:0c:f7:02:
09:e9:5f:4c:ed:5e:1f:12:08:f4:80:8f:4b:e8:4d:
16:d1:8c:78:7f:8f:4a:87:65:0b:dd:53:9a:8c:02:
6c:86:00:33:bb:54:b7:13:03:44:d2:c5:d3:8a:65:
45:a4:61:f7:4f:9b:70:19:29:00:05:88:fc:51:0e:
49:60:34:db:e1:a3:db:82:10:06:a4:47:f1:5e:1e:
bb:3f:4e:04:8b:e9:68:2d:54:9a:e0:86:25:50:36:
12:1c:aa:d3:f2:5c:b9:3b:35:a6:4a:05:72:eb:d5:
c1:16:50:ad:0b:80:00:ba:7d:b5:2c:ca:74:d1:69:
e1:bf:8f:4d:28:de:22:60:5a:aa:7e:78:43:fc:df:
a1:fd:d6:23:d7:74:ba:0d:2b:2c:dd:f2:39:5c:f4:
98:c6:63:e0:b0:45:53:38:43:9c:25:bd:05:47:38:
3b:5b:8b:98:d5:89:89:14:f4:9c:6a:af:98:2a:e8:
a4:52:39:b0:61:40:09:9f:46:7b:4e:24:35:83:b1:
07:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F5:52:7A:02:BF:16:82:44:7F:85:86:12:E8:3F:B2:B7:A4:37:12
X509v3 Authority Key Identifier:
keyid:FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/zPVSegK_FoJEf4WGEug_srekNxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.244.0/22
IPv6:
2a0c:61c0::/32
Signature Algorithm: sha256WithRSAEncryption
0f:1e:62:fd:53:71:c4:4d:a1:9a:c6:32:e7:5d:da:7f:43:b0:
29:8a:2a:5c:3b:82:b2:a8:92:ed:ea:c2:a4:f4:67:13:3e:a6:
c4:d7:e9:23:a0:30:1b:24:37:9b:34:58:89:7b:27:d7:74:49:
e9:d2:83:09:93:f3:6a:55:27:2e:13:2f:06:33:09:19:9e:60:
6b:bf:b3:03:8e:09:22:d4:b7:2f:4a:de:ee:e1:fd:89:a4:97:
c6:bb:5c:e3:69:36:ea:ec:76:09:06:81:d5:1a:fb:dc:f4:23:
63:d2:94:a4:42:ec:08:cd:29:73:f2:51:9a:3e:b9:e1:6a:5f:
57:3a:06:65:b2:c5:eb:43:2d:79:41:0b:02:3e:ac:c5:c4:30:
e8:c2:b3:0b:dd:04:5b:5f:de:97:83:24:05:d6:65:72:6d:a5:
56:76:a7:3f:23:c5:fe:be:96:94:df:28:83:41:af:8e:3c:a2:
bf:17:bd:d4:77:1a:e4:67:2c:83:68:1f:4f:06:b4:c6:31:32:
34:93:80:c3:82:70:95:a3:8c:91:3c:a5:3e:10:b4:b0:f3:88:
8b:da:1a:d4:b9:b4:c6:59:ba:05:4b:66:25:59:1b:b0:57:8f:
e0:19:78:7b:d0:b2:6d:c1:b0:da:f7:b9:4b:6c:bb:dc:59:1b:
b0:fa:94:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:13 2024 by rpki-client on console.sobornost.net