Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/ZPZcnU7gEdwKHVounYGGAEOoDmI.roa
File: ZPZcnU7gEdwKHVounYGGAEOoDmI.roa (raw, json)
Hash identifier: eiGxYgVEN4uoYMl7iHoLo1pHTTl0wB+DD9UhuvypebE=
Subject key identifier: 64:F6:5C:9D:4E:E0:11:DC:0A:1D:5A:2E:9D:81:86:00:43:A8:0E:62
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 018CC5DCBE7A14C62096573BD224B64CEAAC
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/ZPZcnU7gEdwKHVounYGGAEOoDmI.roa
Signing time: Mon 01 Jan 2024 16:30:27 +0000
ROA not before: Mon 01 Jan 2024 16:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48108
IP address blocks: 185.120.56.0/24 maxlen: 24
185.120.57.0/24 maxlen: 24
185.120.58.0/24 maxlen: 24
185.120.59.0/24 maxlen: 24
212.22.64.0/24 maxlen: 24
212.22.77.0/24 maxlen: 24
212.22.75.0/24 maxlen: 24
185.255.179.0/24 maxlen: 24
185.255.178.0/24 maxlen: 24
2a06:c3c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 May 2024 05:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:be:7a:14:c6:20:96:57:3b:d2:24:b6:4c:ea:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 16:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64f65c9d4ee011dc0a1d5a2e9d81860043a80e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:eb:26:c1:dd:f2:40:b4:70:04:43:30:2a:55:
34:7a:41:a2:86:3a:a9:36:da:9c:76:8e:aa:c0:c7:
e9:d6:47:e2:85:a4:66:a7:6a:a0:2f:79:06:90:4f:
f6:3d:62:89:da:d6:69:2a:28:6f:64:e5:2b:f3:f9:
e3:23:43:99:df:97:e5:28:5b:39:53:ce:3b:c7:f2:
3f:27:b7:ad:1a:81:08:9e:c1:26:74:80:35:16:e6:
e1:92:60:45:4e:b0:b8:ae:1b:09:fc:7a:77:c9:a0:
35:ec:0a:06:7b:c7:03:62:3c:9b:d8:8d:1d:d0:39:
5b:cd:d2:ec:72:38:eb:d5:5e:4a:16:4e:56:66:9a:
1d:97:88:2d:8f:07:93:71:f5:51:17:5e:d9:c1:68:
01:c8:26:c5:ae:54:55:eb:66:c1:89:c3:11:48:ee:
6a:8e:8d:73:12:96:27:ae:68:fa:2d:ea:b9:1f:24:
de:78:ad:de:4c:35:42:bf:c2:77:2f:0f:7b:e6:ac:
19:2a:41:14:ab:84:8b:89:c8:4b:5b:cc:74:f5:21:
31:82:e3:ef:93:1e:89:5e:78:0f:64:61:80:06:8d:
a1:44:6c:ba:e7:4d:7d:97:c2:40:1d:de:df:b2:9b:
d9:3f:1d:8c:7e:d7:2e:33:02:4d:86:a9:d1:ec:23:
d2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F6:5C:9D:4E:E0:11:DC:0A:1D:5A:2E:9D:81:86:00:43:A8:0E:62
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/ZPZcnU7gEdwKHVounYGGAEOoDmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.56.0/22
185.255.178.0/23
212.22.64.0/24
212.22.75.0/24
212.22.77.0/24
IPv6:
2a06:c3c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
8c:05:f4:71:cc:64:a2:e8:f7:20:fc:61:57:b3:b1:45:7d:1d:
9c:82:05:53:a3:a7:ad:9e:5a:ea:f4:03:ed:89:9d:67:4f:0a:
eb:c7:0f:4e:10:70:35:89:26:66:d1:51:d8:89:7c:05:fa:49:
74:eb:a4:4c:41:c2:03:91:10:6a:a3:ab:2f:8a:a4:66:d5:ad:
04:a5:3f:8f:9e:5c:95:a6:ed:0e:88:24:20:e8:c3:a6:1f:cc:
35:86:ca:17:6d:d9:30:70:f6:22:ac:87:70:0e:58:c8:91:3d:
18:2c:ea:8f:15:ee:ea:e8:de:f0:3f:1b:10:bb:15:af:2f:52:
ce:8b:b7:76:b7:72:01:f1:7b:02:92:5c:4d:38:4b:0f:3b:98:
33:79:db:7a:c7:5f:04:9f:09:08:6c:e4:ca:0f:91:d5:10:cf:
b0:82:91:17:1d:50:91:41:e9:89:6b:76:e7:84:a8:ec:98:c4:
c3:ea:91:ec:41:10:b3:6d:e2:ca:da:49:53:d5:95:30:cc:fa:
f4:9d:ae:b4:60:69:73:a3:91:e7:d9:28:41:77:7e:87:ba:d5:
13:6e:d5:f5:56:4b:b0:80:00:8c:ad:6f:f3:e2:15:96:fe:2f:
00:e5:be:91:a7:7b:a3:d0:68:42:38:05:ec:c9:5e:d9:94:cb:
0f:c2:c2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:10:48 2024 by rpki-client on console-fra.rpki-client.org