Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Z0ftKZ_oNjCwzuAtc4g5QF7sYkU.roa
File: Z0ftKZ_oNjCwzuAtc4g5QF7sYkU.roa (raw, json)
Hash identifier: jDMdw7GKQeylvER5rmXuEQKaXEMUBPWVcKgV7uDfh50=
Subject key identifier: 67:47:ED:29:9F:E8:36:30:B0:CE:E0:2D:73:88:39:40:5E:EC:62:45
Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial: 018920049237994E171AFE86D19FB18FAE7E
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Z0ftKZ_oNjCwzuAtc4g5QF7sYkU.roa
Signing time: Tue 04 Jul 2023 08:28:37 +0000
ROA not before: Tue 04 Jul 2023 08:28:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 185.206.57.0/24 maxlen: 24
185.206.56.0/24 maxlen: 24
178.159.65.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:20:04:92:37:99:4e:17:1a:fe:86:d1:9f:b1:8f:ae:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Validity
Not Before: Jul 4 08:28:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6747ed299fe83630b0cee02d738839405eec6245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7f:2d:ae:15:23:70:a3:0a:ab:59:81:3f:ab:
aa:b9:77:fe:af:4c:03:d9:50:b8:22:12:8f:6c:ce:
02:9d:f5:2f:54:15:ec:25:b9:68:5d:4f:3e:ae:76:
9b:b0:f9:5d:4c:c9:94:04:fa:17:5b:19:e3:00:a6:
27:59:37:2f:01:de:e0:7b:21:bb:37:ec:e9:1a:15:
80:5c:23:c0:16:8f:96:f8:86:a6:d0:fd:5d:2d:89:
45:5d:08:b5:ca:e0:9f:d7:c1:d9:c0:b9:5f:8c:81:
61:d9:53:dc:f2:17:bf:33:6f:22:f6:0b:ce:4d:cc:
54:7d:41:ec:53:f7:2e:ac:77:a1:3f:35:67:d5:37:
d2:4f:89:a8:8e:32:54:70:c6:2e:35:87:26:d3:38:
c1:e9:05:28:81:70:f1:a5:20:82:4f:36:a0:77:26:
0d:e8:01:85:a1:ee:05:70:6c:72:7f:9b:7d:19:1f:
ee:2c:d2:93:da:e2:f2:aa:99:b3:3f:be:55:00:64:
22:67:53:1f:ca:ae:17:9b:77:47:98:20:f3:69:45:
d9:6e:33:97:6d:28:18:c8:eb:26:41:83:4d:6f:9e:
a4:fe:8a:10:1c:0d:fc:1a:8f:fd:48:c2:fd:80:a0:
20:24:0c:9d:77:34:c2:9f:97:27:af:9d:39:8f:24:
8a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:47:ED:29:9F:E8:36:30:B0:CE:E0:2D:73:88:39:40:5E:EC:62:45
X509v3 Authority Key Identifier:
keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Z0ftKZ_oNjCwzuAtc4g5QF7sYkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.159.65.0/24
185.206.56.0/23
Signature Algorithm: sha256WithRSAEncryption
81:9f:f9:9d:82:f4:1a:e1:cc:9d:c9:65:08:4f:d9:83:54:b1:
aa:77:d2:d1:ce:8f:d9:3b:f9:c2:22:29:b2:5f:7c:90:67:24:
9f:1f:74:07:cd:58:7c:01:dd:d7:98:8a:99:79:77:b1:ef:b5:
cd:67:a7:cf:c4:81:d0:8d:99:ba:0a:21:b1:9c:7f:b9:91:03:
6b:41:ca:4a:eb:4a:70:4a:29:b7:b1:4d:57:4e:0f:f5:c9:0a:
3e:6d:7f:26:c5:ee:3f:fa:77:ef:24:cb:bc:79:44:a5:7a:97:
4a:b9:30:9d:cb:f8:0e:b8:40:be:6c:c1:59:17:1c:58:c3:40:
e8:ab:47:7e:df:24:a1:34:fd:fa:3e:2e:b8:e0:35:5a:7a:fe:
48:74:4f:5c:c8:c2:96:a1:31:f1:bb:db:0f:c1:f4:74:72:54:
f5:92:26:14:91:19:cf:85:3a:5d:0c:cc:54:03:f3:91:c6:b4:
8d:27:7f:21:e0:04:5f:42:9c:b6:47:1c:0b:1d:62:e6:28:b2:
73:bd:c9:ca:55:b5:1e:40:37:4c:a5:a3:61:09:6d:1c:de:29:
fd:66:d4:a1:58:4c:05:4c:f9:ce:c6:bd:92:a6:43:66:79:16:
af:d2:0a:8d:12:c2:dc:01:8c:b0:bf:f8:8f:5a:57:2b:78:d2:
f4:93:24:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:06 2023 by rpki-client on console.sobornost.net