Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/ZWGj6NKToh9fdhj4-iVc_emmUjo.roa
File: ZWGj6NKToh9fdhj4-iVc_emmUjo.roa (raw, json)
Hash identifier: w/47unLW0MD2zM3TGnhXisdpM0NVsgZb//4ctKQLfwU=
Subject key identifier: 65:61:A3:E8:D2:93:A2:1F:5F:76:18:F8:FA:25:5C:FD:E9:A6:52:3A
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 018AE277E744152F97E81B105939E2B66045
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/ZWGj6NKToh9fdhj4-iVc_emmUjo.roa
Signing time: Fri 29 Sep 2023 19:43:43 +0000
ROA not before: Fri 29 Sep 2023 19:43:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205320
IP address blocks: 85.239.144.0/24 maxlen: 24
85.239.146.0/24 maxlen: 24
85.239.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Dec 2023 13:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e2:77:e7:44:15:2f:97:e8:1b:10:59:39:e2:b6:60:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Sep 29 19:43:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6561a3e8d293a21f5f7618f8fa255cfde9a6523a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:e2:3f:8b:0c:93:30:00:59:07:d5:8e:51:
a2:8d:93:0d:b6:64:38:42:a8:63:76:ee:59:f9:01:
b6:3e:e8:7e:73:e4:e6:3f:26:db:8d:2a:7e:e0:2e:
d3:39:da:6e:d0:9b:c0:71:7a:04:ec:1e:d9:d4:0d:
46:05:3d:bf:e7:be:60:23:4f:bb:23:8a:49:cf:5f:
35:9b:3f:d8:fd:dd:73:c1:7c:b1:90:a5:45:ac:f0:
b3:c2:bf:0e:bf:00:e6:89:b2:e9:fc:e9:c2:06:3b:
c9:a7:b4:4d:28:3b:9f:63:43:9f:30:4f:5b:11:5d:
25:e2:a6:e1:af:23:28:dc:69:34:0c:3b:b2:7c:71:
f1:3c:3e:7d:bd:9c:95:b5:e9:28:a8:27:67:62:3c:
2c:95:c2:59:d7:ea:58:9a:87:06:36:85:e3:81:3b:
f2:a9:f9:9d:f1:a0:a4:b5:19:19:60:4f:a3:86:1b:
4b:3c:fe:e7:ad:e4:57:50:d1:35:72:80:57:17:00:
9a:9a:6a:85:d2:49:c7:0a:27:89:bf:46:6f:82:7a:
45:a9:d8:a4:00:52:da:2e:4b:70:5b:61:0f:4d:89:
62:b6:0f:7c:ed:e5:ab:4a:81:53:6a:c7:23:b0:ac:
ce:e0:f1:29:af:1d:e7:b5:76:5b:cf:43:f9:0b:72:
c3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:61:A3:E8:D2:93:A2:1F:5F:76:18:F8:FA:25:5C:FD:E9:A6:52:3A
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/ZWGj6NKToh9fdhj4-iVc_emmUjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.144.0/24
85.239.146.0/23
Signature Algorithm: sha256WithRSAEncryption
11:27:1b:79:ff:6c:9e:38:43:d4:6f:38:7e:be:b8:72:84:78:
6c:97:03:66:1c:7f:35:99:3d:55:73:18:17:15:04:ab:ed:bc:
1e:07:d9:ae:21:2a:70:98:36:74:c6:27:13:4d:c7:47:5f:50:
2c:52:95:61:03:a9:03:1b:23:40:ee:b4:94:48:7a:6f:fd:98:
a5:97:cf:46:10:69:20:33:50:9c:86:82:e0:b7:2e:bb:59:3d:
11:7e:80:d4:6e:91:dd:96:6d:9c:d0:a0:c2:bf:68:d1:d7:42:
74:36:94:f9:84:52:b9:10:f0:0c:9a:9d:1c:30:7b:d2:67:0c:
dc:75:2f:c1:c7:84:fc:8d:29:fd:95:6d:9b:d7:73:e0:9d:30:
0c:49:51:12:19:1a:9d:e8:17:d6:90:1f:ad:83:8e:52:0b:95:
6c:c2:33:39:2c:a6:3f:b9:56:fc:3f:de:f4:98:9c:ba:b2:0a:
a2:c2:4f:1c:c7:a1:87:be:fc:df:86:ca:9c:c4:4e:d4:02:60:
75:19:6c:34:36:7c:e7:51:39:8c:25:cd:50:86:ad:63:e6:d0:
25:e0:75:98:2a:49:55:cd:da:9f:c9:4e:9d:f7:01:1e:0c:64:
86:79:a8:91:55:c9:bb:27:a6:07:1b:32:ca:32:cb:37:cb:61:
a8:c9:7f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:53 2024 by rpki-client on console-fra.rpki-client.org