Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/zYvMFs71nj72OTF54tQ02i78duk.roa
File: zYvMFs71nj72OTF54tQ02i78duk.roa (raw, json)
Hash identifier: xPIm4zcz2xdHn2muqzVFhMfP9QiWbVLb5L3/SzgagYs=
Subject key identifier: CD:8B:CC:16:CE:F5:9E:3E:F6:39:31:79:E2:D4:34:DA:2E:FC:76:E9
Certificate issuer: /CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Certificate serial: 018DFA0ACD91B17201DA0B437E4C554F7D39
Authority key identifier: 36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/zYvMFs71nj72OTF54tQ02i78duk.roa
Signing time: Fri 01 Mar 2024 12:43:48 +0000
ROA not before: Fri 01 Mar 2024 12:43:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206924
IP address blocks: 91.198.241.0/24 maxlen: 24
185.230.223.0/24 maxlen: 24
2a0c:2f05:3512::/48 maxlen: 48
2a0c:2f07:d::/48 maxlen: 48
2a0c:2f07:f::/48 maxlen: 48
2a0c:2f07:29::/48 maxlen: 48
2a0c:2f07:384::/48 maxlen: 48
2a0c:2f07:666::/48 maxlen: 48
2a0c:2f07:ac1::/48 maxlen: 48
2a0c:2f07:4663::/48 maxlen: 48
2a0c:2f07:4896::/48 maxlen: 48
2a0c:2f07:9459::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 01 Mar 2024 15:17:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fa:0a:cd:91:b1:72:01:da:0b:43:7e:4c:55:4f:7d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Validity
Not Before: Mar 1 12:43:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd8bcc16cef59e3ef6393179e2d434da2efc76e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d9:15:2f:97:42:8c:56:52:d1:63:d0:f0:8a:
e4:18:9d:70:c7:c5:91:9a:84:b2:b6:cf:9b:e4:d7:
c8:e1:70:10:63:2e:ea:b2:59:87:e6:fd:90:09:57:
a2:2a:b4:da:88:08:65:dd:fb:d6:ce:d9:70:13:07:
e8:67:d8:40:d7:c3:43:df:22:3a:49:c2:2b:3c:df:
96:41:b8:67:5a:cf:15:a6:3b:a5:8a:ba:48:8f:19:
d7:f2:2e:cb:4f:cd:98:47:a2:cb:cc:a5:b0:6a:ab:
d8:24:5b:7a:05:7b:a7:8e:2d:38:55:a3:7f:6c:75:
aa:f2:a7:6b:0c:c5:cc:d1:d7:6f:f8:e8:e7:7e:c6:
1e:e1:f7:ba:27:01:d2:28:57:7b:8f:cc:29:8a:a7:
4b:9b:74:c4:9f:ed:e2:9b:b8:7e:a0:14:51:f0:8b:
8f:00:1c:b5:65:60:d0:05:19:a3:83:7f:2b:05:f7:
d3:b7:45:1a:11:53:a1:f6:a7:d0:eb:d0:6f:0e:7e:
9f:b5:a1:f0:a6:7f:70:fa:7f:34:7f:a9:86:09:72:
f1:50:7a:2b:ef:0e:26:0f:64:cc:dc:48:4e:73:58:
3d:8c:a1:5d:38:56:f7:fe:24:90:83:f2:ae:ce:b0:
94:ef:21:d2:60:b4:02:10:88:8a:08:b4:d1:ef:3b:
b2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8B:CC:16:CE:F5:9E:3E:F6:39:31:79:E2:D4:34:DA:2E:FC:76:E9
X509v3 Authority Key Identifier:
keyid:36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/zYvMFs71nj72OTF54tQ02i78duk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.241.0/24
185.230.223.0/24
IPv6:
2a0c:2f05:3512::/48
2a0c:2f07:d::/48
2a0c:2f07:f::/48
2a0c:2f07:29::/48
2a0c:2f07:384::/48
2a0c:2f07:666::/48
2a0c:2f07:ac1::/48
2a0c:2f07:4663::/48
2a0c:2f07:4896::/48
2a0c:2f07:9459::/48
Signature Algorithm: sha256WithRSAEncryption
0b:7b:d6:1f:7a:b5:c0:bd:57:88:af:0a:35:53:0f:8f:1c:e0:
26:93:8c:24:26:c4:75:e4:0d:04:ef:46:b0:47:c3:86:b2:c4:
c6:34:54:7e:a6:24:46:7c:26:20:46:e7:b1:b1:6b:39:ee:8a:
76:12:7a:2f:8a:74:91:53:51:28:84:ae:71:6a:e3:8c:80:5a:
15:db:12:88:49:e3:84:c1:03:c1:87:dc:fb:52:c7:0f:c8:79:
71:2e:7b:01:c5:d1:bc:b3:a9:42:b5:da:ca:0f:58:34:f5:d0:
ba:f6:7d:ed:f3:d1:1b:75:dc:25:75:82:d1:0b:df:1c:2d:42:
08:a1:77:a2:72:2b:2e:11:18:2b:c3:82:e4:24:10:2f:0d:c0:
0f:dd:63:dd:df:22:ce:52:08:9d:0d:65:5a:6e:43:92:db:e1:
f1:41:9e:c0:97:0c:2e:a1:08:96:df:8c:ac:d5:36:46:b0:42:
88:ac:a4:d1:ab:1a:1b:43:14:9b:00:5d:67:fe:e3:e9:5f:ce:
e4:d6:b8:ec:aa:fc:d0:61:f4:e0:76:fd:15:57:77:a4:14:21:
5b:fb:c0:95:d2:0a:f9:a8:bb:fd:a4:94:19:ae:17:2f:82:22:
93:4f:c6:29:fa:ff:52:e1:2a:50:a9:ea:a5:7f:e8:59:67:3f:
21:6e:56:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:49 2024 by rpki-client on console-fra.rpki-client.org