Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/ZkIawMM0mvX2rjImPk2vN3ZjBdE.roa
File: ZkIawMM0mvX2rjImPk2vN3ZjBdE.roa (raw, json)
Hash identifier: 08HziG3MfXINgGRIEteg1bfQTN+GqOtmEn7ZG8CctpM=
Subject key identifier: 66:42:1A:C0:C3:34:9A:F5:F6:AE:32:26:3E:4D:AF:37:76:63:05:D1
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019039EB366D7C07CEFFDA71E2CD53233309
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/ZkIawMM0mvX2rjImPk2vN3ZjBdE.roa
Signing time: Fri 21 Jun 2024 08:30:34 +0000
ROA not before: Fri 21 Jun 2024 08:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47585
IP address blocks: 217.180.57.0/24 maxlen: 24
217.180.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jul 2024 07:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:39:eb:36:6d:7c:07:ce:ff:da:71:e2:cd:53:23:33:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jun 21 08:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66421ac0c3349af5f6ae32263e4daf37766305d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:47:1e:88:9d:dc:f6:fb:ed:aa:2e:5b:31:24:
5d:ae:49:72:56:6a:1f:3a:78:a7:1d:90:96:86:1f:
ff:1b:b8:d4:62:bf:c2:d9:7a:de:d9:c2:cd:81:bf:
e1:73:3d:15:c4:a0:9e:bf:33:3c:2e:f4:80:d4:c6:
86:e3:d9:6f:eb:bd:8c:4d:2b:03:24:8b:15:a9:9f:
b5:71:64:e8:f2:d4:1a:8f:4c:60:f5:40:1c:05:2b:
aa:b9:fb:73:1a:ac:13:de:f4:f0:08:c5:64:95:78:
18:70:15:95:55:3b:b2:a3:ba:c4:28:1b:6f:6d:a5:
14:d8:3e:b0:fc:c2:d1:8a:f5:14:22:22:85:89:e6:
42:f2:e4:3d:c8:d5:93:35:5e:66:1f:4e:9e:00:95:
f5:f0:a5:a8:d7:e0:59:6b:dd:1a:0e:0e:5d:fa:3b:
5e:bb:19:07:92:f7:70:3e:ef:5b:88:12:2d:2a:04:
d4:e2:7d:cd:85:96:2c:5f:f2:58:49:fd:c8:da:75:
eb:ef:6f:2c:a1:99:84:68:d6:06:aa:ea:c6:a5:6a:
fe:26:4d:f0:a3:9c:db:90:c4:9c:83:b6:78:e2:6f:
6a:09:92:cc:e8:7e:7a:28:2d:ef:a7:6b:c7:9d:9d:
48:5b:23:d8:f4:84:fc:8f:0e:e9:b5:ca:5f:34:71:
bf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:42:1A:C0:C3:34:9A:F5:F6:AE:32:26:3E:4D:AF:37:76:63:05:D1
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/ZkIawMM0mvX2rjImPk2vN3ZjBdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.180.57.0/24
217.180.61.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:a6:48:60:bb:95:90:89:cb:b6:f7:70:5a:3d:78:26:1a:3b:
f8:4b:0c:10:bf:56:c4:73:65:90:e3:45:bc:0e:3c:2c:fe:d4:
6d:26:c1:2b:da:b0:29:76:35:90:01:c8:db:8d:bb:a1:95:f4:
4d:c6:a2:8c:22:77:76:93:67:63:e0:9a:cd:1a:4b:a1:b0:e5:
df:3c:fb:97:80:d8:17:84:86:8d:3e:5d:ad:b3:be:07:be:3b:
8e:e3:09:8a:00:a3:64:62:58:d7:ab:2b:b0:bf:d3:14:5a:97:
0c:d8:23:3b:91:da:c7:d2:5c:5b:c3:1c:9c:6a:c1:f7:3a:76:
a1:1e:28:1c:4a:1e:7d:0c:f5:db:5f:ed:bb:d3:ff:69:40:fa:
6b:8f:12:3a:f0:26:85:f3:68:68:c7:47:05:23:a4:82:49:8f:
33:40:28:82:04:57:0d:d0:a4:29:1c:e7:0b:0c:28:07:9e:4a:
a8:25:83:16:b6:c3:de:35:ef:7a:33:f0:f1:b5:8d:08:fa:29:
1a:ec:37:5f:6b:5f:71:f9:e9:5e:a2:af:9f:b6:96:ed:bd:3c:
92:f9:b1:0f:75:69:e1:78:e0:39:6a:55:5a:4a:0b:2b:2a:34:
08:f0:66:b2:87:2b:3f:db:d3:66:89:d6:e7:80:82:85:75:55:
b1:49:dd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 09:49:47 2024 by rpki-client on console-ams.rpki-client.org