Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/0rzK-TEsqeo1GXqXL2sYBoj_h3A.roa
File: 0rzK-TEsqeo1GXqXL2sYBoj_h3A.roa (raw, json)
Hash identifier: jVv951giIsFXlF5kpOOz2XoyxxbARogKLwgzkLkgVHo=
Subject key identifier: D2:BC:CA:F9:31:2C:A9:EA:35:19:7A:97:2F:6B:18:06:88:FF:87:70
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 018C691E0C5118A20DC8B5DA9B55BF8C6EA5
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/0rzK-TEsqeo1GXqXL2sYBoj_h3A.roa
Signing time: Thu 14 Dec 2023 16:17:06 +0000
ROA not before: Thu 14 Dec 2023 16:17:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206524
IP address blocks: 185.248.76.0/24 maxlen: 24
185.248.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:69:1e:0c:51:18:a2:0d:c8:b5:da:9b:55:bf:8c:6e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: Dec 14 16:17:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2bccaf9312ca9ea35197a972f6b180688ff8770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:07:06:f7:f3:b3:0c:eb:89:e3:e7:0e:09:2b:
88:9a:2f:f3:a5:c0:43:e3:de:6d:23:65:89:7c:54:
58:52:e4:1f:3d:a2:37:52:46:6a:c1:cd:18:71:ae:
e1:27:5f:bd:ce:92:6c:9b:a4:46:48:13:71:b1:1e:
83:a4:93:ae:e6:36:21:b5:0e:5f:e1:bf:16:1e:af:
67:31:e9:88:ff:4c:e2:6a:c7:87:f0:ce:a0:52:93:
de:1c:f0:73:9f:68:d6:63:5f:30:bb:b6:fc:36:e1:
ac:da:cd:5f:a2:77:c9:46:d4:05:16:2d:65:cf:54:
a1:bb:11:06:6a:2b:8d:8f:88:b7:3f:db:58:95:da:
44:62:9b:e8:4a:55:1c:92:1e:91:f5:02:d0:c3:90:
bd:90:24:dd:fa:e5:e8:76:fe:d1:54:94:c0:53:59:
ea:50:e0:09:70:c4:c4:8d:f7:a1:c9:df:f0:74:f7:
64:13:35:a9:35:17:d4:6d:58:bf:81:d9:f1:62:c8:
9c:35:90:fb:d0:f9:5f:71:2f:ca:33:48:0e:a6:67:
f0:c1:21:c4:86:00:a2:de:4a:61:bb:ad:d2:40:4b:
c9:9c:ab:47:c5:0f:5d:d9:7c:a3:b1:97:d7:0b:e7:
c8:13:27:8b:ba:d1:b5:20:fe:24:6c:d0:01:c2:96:
55:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BC:CA:F9:31:2C:A9:EA:35:19:7A:97:2F:6B:18:06:88:FF:87:70
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/0rzK-TEsqeo1GXqXL2sYBoj_h3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.76.0/23
Signature Algorithm: sha256WithRSAEncryption
d3:9a:1b:99:be:96:8c:61:02:9a:e8:8b:c3:6c:a2:a0:2c:82:
ea:bf:2d:1e:be:70:4d:b1:4a:67:ab:c8:09:a3:56:2f:f1:35:
69:9a:17:b9:34:c9:d0:d4:29:02:99:2e:2b:30:a6:94:73:81:
80:54:3a:2e:e7:80:7f:37:68:81:91:bd:ee:a0:dc:9c:63:3a:
9d:8e:5e:ea:8b:90:15:d1:a7:a9:98:d2:34:c5:70:3b:b0:8d:
b9:08:db:0b:a3:50:e0:8e:ef:8c:8c:ea:dc:48:5c:57:0d:0c:
90:4b:9b:66:6d:6a:6f:86:09:14:90:58:a0:b3:17:4c:16:97:
76:76:e5:6a:fe:92:66:9b:6b:8b:c5:89:27:b9:4a:bf:f3:75:
b4:48:36:98:59:39:9e:49:0d:48:25:2a:f9:8e:ca:bd:76:10:
7e:61:54:4e:ed:d9:ef:56:7b:ad:7e:29:0e:44:a7:7b:f0:e1:
34:89:63:1d:7a:e7:6d:b9:b6:a9:4d:19:65:e2:be:eb:7f:6b:
5e:ea:b1:36:87:49:ef:df:02:1f:4e:33:3b:23:f9:fe:1a:1e:
aa:87:bd:40:34:83:09:ba:cb:3d:06:9b:f2:2b:f3:5f:62:e9:
9e:2d:a6:10:87:93:ce:5f:5e:51:d3:f3:b5:b3:91:9b:7c:ca:
0e:17:28:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:11:15 2024 by rpki-client on console.sobornost.net