Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/zrNLqSRPuQm2Jmiq8zB2K77wxdQ.roa
File: zrNLqSRPuQm2Jmiq8zB2K77wxdQ.roa (raw, json)
Hash identifier: DcSSktgr8yJQmNaX3R0NFHaqZ+Damo1oXY8MBd3m4j8=
Subject key identifier: CE:B3:4B:A9:24:4F:B9:09:B6:26:68:AA:F3:30:76:2B:BE:F0:C5:D4
Certificate issuer: /CN=35d2929f1652f958812d099a233f33ad3445bbfb
Certificate serial: 01856FF061B5E783EAB7C79D29EC0B21CC25
Authority key identifier: 35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/zrNLqSRPuQm2Jmiq8zB2K77wxdQ.roa
Signing time: Mon 02 Jan 2023 00:45:02 +0000
ROA not before: Mon 02 Jan 2023 00:45:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206807
IP address blocks: 194.116.220.0/24 maxlen: 24
93.114.249.0/24 maxlen: 24
2a10:22c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:61:b5:e7:83:ea:b7:c7:9d:29:ec:0b:21:cc:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d2929f1652f958812d099a233f33ad3445bbfb
Validity
Not Before: Jan 2 00:45:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ceb34ba9244fb909b62668aaf330762bbef0c5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:25:ff:7b:fc:8a:68:41:b6:8a:a6:84:a3:55:
4a:e8:f2:23:a1:05:3a:ac:63:77:ce:4e:00:1d:a2:
14:11:67:7e:ff:6c:be:25:68:b3:34:32:f4:f7:35:
07:cc:48:50:3c:25:e0:96:2c:b1:9c:35:33:e3:3f:
90:3c:43:ee:f3:47:66:cc:78:82:f1:69:e8:f2:e4:
a5:5a:5e:45:99:10:52:b6:39:ee:ff:c9:09:7b:74:
08:8d:ff:4f:c6:aa:5f:4a:70:eb:f7:85:45:fc:46:
2c:2a:65:ec:4f:e7:7b:84:63:68:ef:17:54:90:26:
d5:c4:c3:a6:e7:c7:c2:3a:a8:5a:2c:b5:6f:63:15:
d2:42:f5:f2:0c:ee:e5:7c:6a:97:1f:f3:e5:30:33:
81:43:10:e5:34:83:d5:c4:96:b3:7f:29:c7:9d:0c:
26:a3:a2:62:35:5e:73:e3:be:03:e5:18:86:c9:1b:
b7:e6:a9:99:2e:7f:fd:86:05:ed:f0:30:b6:d9:c4:
6f:6c:4c:2d:e6:9d:69:c2:ba:d7:8f:1d:4b:7d:df:
aa:98:bf:22:ac:8d:4e:17:e2:ee:70:d6:f4:b8:0f:
48:f3:f8:65:cc:40:4c:cb:8f:0d:8a:cf:9f:2b:09:
d9:79:3b:ae:c8:0e:2f:54:ae:6d:aa:d4:4a:c1:d0:
c1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B3:4B:A9:24:4F:B9:09:B6:26:68:AA:F3:30:76:2B:BE:F0:C5:D4
X509v3 Authority Key Identifier:
keyid:35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/zrNLqSRPuQm2Jmiq8zB2K77wxdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.249.0/24
194.116.220.0/24
IPv6:
2a10:22c0::/29
Signature Algorithm: sha256WithRSAEncryption
43:f3:3b:81:0c:cb:fb:74:35:8f:27:99:5d:ba:54:96:d5:ad:
c2:16:e3:b4:34:aa:a0:4f:fc:7d:33:95:78:34:18:43:8a:a4:
8a:7c:b1:d5:ae:71:c6:0c:ee:65:28:2d:a6:9b:09:8c:ca:10:
8d:9d:e4:12:51:66:2c:d3:64:75:fe:d6:5c:d5:38:ed:a1:63:
01:59:1b:7f:dd:f6:af:3b:d3:de:b7:20:2f:15:f1:bb:e9:df:
c4:85:e1:0b:77:6c:f7:26:e7:18:30:1d:10:52:9f:b3:1a:1a:
f8:dc:7b:e9:f8:1c:8d:95:f1:9d:c5:74:7a:ca:09:ea:d6:ba:
92:8f:0b:3f:41:95:13:29:57:c9:f6:75:74:fb:01:b3:3f:87:
48:5f:d5:4c:93:0e:75:36:f4:71:62:07:2f:b2:ec:cb:b4:4e:
16:e7:db:fb:e9:99:ad:07:f5:d8:b0:32:48:66:40:35:01:17:
2f:e4:d7:c9:ea:01:8c:37:6c:2c:b1:51:07:81:31:4a:df:60:
0c:36:4b:bd:fe:75:97:82:50:f6:54:e3:22:4c:f0:0e:67:e7:
fc:c7:d2:e0:0f:ff:3a:54:e3:98:3b:c7:a7:32:b3:8b:f8:67:
4d:df:00:27:cc:78:b6:5b:fc:44:0e:1f:63:a4:e5:2f:d7:a7:
b7:3e:44:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:41 2024 by rpki-client on console-ams.rpki-client.org