Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/zfw877tZAlmBi-aF-U5w8V947ug.roa
File: zfw877tZAlmBi-aF-U5w8V947ug.roa (raw, json)
Hash identifier: 1lzEx+PQ6gVtveuMsf/DyWMXKM0JPlNScEP2of/iC5Y=
Subject key identifier: CD:FC:3C:EF:BB:59:02:59:81:8B:E6:85:F9:4E:70:F1:5F:78:EE:E8
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019053CDCC638112E5D9F68E24150D8BF4C9
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/zfw877tZAlmBi-aF-U5w8V947ug.roa
Signing time: Wed 26 Jun 2024 09:08:34 +0000
ROA not before: Wed 26 Jun 2024 09:08:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60024
IP address blocks: 37.123.192.0/21 maxlen: 24
82.115.30.0/23 maxlen: 24
185.148.12.0/22 maxlen: 24
185.212.60.0/22 maxlen: 24
185.218.4.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 20:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:53:cd:cc:63:81:12:e5:d9:f6:8e:24:15:0d:8b:f4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 26 09:08:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdfc3cefbb590259818be685f94e70f15f78eee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:85:aa:be:b1:a7:b6:cd:3c:06:73:c9:3c:
d6:3e:0a:c3:82:29:42:ad:d9:37:37:2e:aa:6e:ba:
5d:21:ed:46:e7:ae:f6:b0:0c:45:ae:ef:cd:9f:44:
cb:0f:73:b8:5b:c8:5c:99:ce:32:d7:9f:e8:a6:00:
ad:c2:55:41:07:91:07:ad:ea:bd:15:cf:72:12:0f:
e4:f0:e6:a3:b3:4e:6f:c2:6a:95:b6:a3:13:a3:39:
5e:39:1d:6f:1b:5d:25:03:73:c8:02:90:1c:66:ff:
c6:50:49:d8:49:a5:65:76:e0:8f:bc:ce:53:88:7b:
7f:84:ce:e9:a1:f5:46:0b:cb:80:62:ee:2f:fd:46:
42:e6:b9:4a:79:71:4f:1c:6b:7c:07:ad:43:58:55:
87:34:50:e2:7c:e2:6d:b1:d7:a3:cc:38:9b:19:37:
8b:20:e0:14:b8:4e:b9:40:32:05:c0:ad:09:43:23:
2f:9a:93:2b:8c:bc:cf:73:12:b8:e2:22:8e:f2:4d:
b1:b9:91:58:2d:e7:3f:f5:51:57:df:0d:46:e1:3f:
1b:60:72:98:07:d4:d0:ad:f9:1e:57:4f:e7:d6:fb:
c1:c9:08:cc:05:d4:8b:a8:f5:8a:e0:d0:64:a2:22:
30:f7:63:2a:c6:da:55:bc:96:d9:72:d2:8b:8d:5a:
fc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FC:3C:EF:BB:59:02:59:81:8B:E6:85:F9:4E:70:F1:5F:78:EE:E8
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/zfw877tZAlmBi-aF-U5w8V947ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.192.0/21
82.115.30.0/23
185.148.12.0/22
185.212.60.0/22
185.218.4.0/22
Signature Algorithm: sha256WithRSAEncryption
62:f4:b7:c2:60:cb:6e:28:a3:3a:72:85:62:8c:a3:ee:4b:15:
74:a1:5f:91:55:8b:bb:dc:e9:bb:d1:4a:84:26:ab:1b:1c:28:
80:81:03:07:38:ef:40:d4:34:15:4c:45:43:b8:1b:b9:7d:71:
20:62:4c:f7:94:f4:c9:b0:03:c9:f4:94:da:ad:05:c2:44:80:
b8:54:fa:98:98:a5:25:f1:17:56:5c:07:1d:63:e2:f9:e4:f2:
e5:30:f6:8a:30:20:64:9c:1b:ba:15:b5:64:53:7c:b6:60:c0:
19:b0:bc:6e:be:a8:e6:0d:6c:a3:c0:0f:4c:0c:1e:53:74:d8:
51:92:8b:51:ac:1b:57:bd:ec:53:f5:d6:8f:b4:c9:0e:a6:1f:
4c:9e:5d:92:9b:45:ea:ff:cd:d8:60:60:f2:fa:8b:46:0d:e5:
0c:1d:5b:1c:ce:b0:2f:63:c9:24:6d:d5:c9:26:81:a8:c8:4f:
2f:87:d4:d7:dd:73:5d:0b:4f:fa:c7:52:64:87:71:ef:09:8c:
bf:5e:a2:ad:da:62:9a:2c:cf:bd:27:2f:fd:d6:f2:0a:48:f3:
c6:c4:27:20:34:9a:77:91:08:b1:c7:2d:21:f0:0d:a6:c2:45:
71:af:0d:c8:f2:5b:e5:ae:4a:27:e6:81:32:b0:fc:f5:24:a4:
92:41:62:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 00:27:29 2024 by rpki-client on console-fra.rpki-client.org