Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/ZeoeBi2BsKyIvZI7uTqpks7Lddc.roa
File: ZeoeBi2BsKyIvZI7uTqpks7Lddc.roa (raw, json)
Hash identifier: Q9WBC0LGzDiSj41OsGnZxib5bu2Wle4Qfo8AtdY/KCA=
Subject key identifier: 65:EA:1E:06:2D:81:B0:AC:88:BD:92:3B:B9:3A:A9:92:CE:CB:75:D7
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 0186D8D6FBFE844129931B0BED95849E30DC
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/ZeoeBi2BsKyIvZI7uTqpks7Lddc.roa
Signing time: Mon 13 Mar 2023 02:40:13 +0000
ROA not before: Mon 13 Mar 2023 02:40:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54994
IP address blocks: 163.171.64.0/24 maxlen: 24
163.171.67.0/24 maxlen: 24
163.171.70.0/24 maxlen: 24
163.171.71.0/24 maxlen: 24
163.171.87.0/24 maxlen: 24
163.171.207.0/24 maxlen: 24
163.171.222.0/24 maxlen: 24
163.171.231.0/24 maxlen: 24
163.171.252.0/24 maxlen: 24
163.171.166.0/24 maxlen: 24
93.188.135.0/24 maxlen: 24
163.171.177.0/24 maxlen: 24
163.171.182.0/24 maxlen: 24
163.171.188.0/24 maxlen: 24
148.253.231.0/24 maxlen: 24
148.253.232.0/24 maxlen: 24
148.253.233.0/24 maxlen: 24
148.253.237.0/24 maxlen: 24
148.253.234.0/24 maxlen: 24
148.253.235.0/24 maxlen: 24
148.253.246.0/24 maxlen: 24
148.253.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Mar 2023 02:53:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d8:d6:fb:fe:84:41:29:93:1b:0b:ed:95:84:9e:30:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Mar 13 02:40:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65ea1e062d81b0ac88bd923bb93aa992cecb75d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:80:6d:62:14:56:03:4a:07:5a:ee:a1:77:05:
8b:9b:56:1b:48:8e:ff:ee:7d:ef:a8:a6:23:2a:ce:
af:bb:79:a9:70:bd:d6:c8:c4:bd:3d:c7:3a:d1:a1:
71:2b:c5:da:ff:d5:d0:e9:4a:f8:f0:03:9e:58:5a:
21:e8:0f:c1:3a:14:4c:65:8e:7c:d2:16:90:31:14:
6a:d0:12:39:bc:fb:c5:bd:cb:a9:17:f1:6e:2d:0d:
52:39:c9:9e:a3:b9:89:5a:95:10:c9:9c:5e:35:17:
c6:40:68:6e:57:a8:18:92:00:32:da:83:1e:36:1b:
c8:b5:2c:b0:f7:cd:1b:ae:45:3d:1c:9c:48:5d:70:
ee:66:ef:27:19:ad:2b:49:3f:d8:13:40:b3:ae:d2:
2d:91:0b:19:03:d3:98:2d:49:4c:2c:58:e6:01:14:
fd:e0:19:fa:f2:9e:41:2d:f9:9e:fc:b7:48:b0:ee:
4a:5d:8d:d2:aa:98:0b:9b:4a:69:88:80:84:0b:99:
51:09:2d:e5:3d:46:5b:a1:27:4d:13:ee:70:ed:08:
23:86:16:b6:9d:90:d3:6f:89:56:6e:3a:25:9c:f8:
16:bc:7c:b3:4c:a6:05:c9:b0:22:79:f5:43:ce:e1:
10:5a:11:27:68:71:f1:cc:e9:2d:95:e7:1b:ea:9b:
cd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EA:1E:06:2D:81:B0:AC:88:BD:92:3B:B9:3A:A9:92:CE:CB:75:D7
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/ZeoeBi2BsKyIvZI7uTqpks7Lddc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.135.0/24
148.253.34.0/24
148.253.231.0-148.253.235.255
148.253.237.0/24
148.253.246.0/24
163.171.64.0/24
163.171.67.0/24
163.171.70.0/23
163.171.87.0/24
163.171.166.0/24
163.171.177.0/24
163.171.182.0/24
163.171.188.0/24
163.171.207.0/24
163.171.222.0/24
163.171.231.0/24
163.171.252.0/24
Signature Algorithm: sha256WithRSAEncryption
10:98:e1:b6:0c:32:6e:2e:87:be:bb:6c:fc:f4:19:0d:78:1b:
2f:ce:e8:02:2e:f4:d0:3d:ce:b5:a4:ea:ac:da:a5:06:79:d0:
3b:e1:5a:75:3e:6f:22:0d:c7:b5:59:9c:9b:6b:8e:3b:34:0e:
04:7b:74:61:e1:9d:7e:3f:15:d0:d9:11:6d:83:70:cf:c1:f4:
8b:5a:f7:50:4a:ff:a9:b0:ca:7e:90:ca:ff:d5:a2:b9:4c:5f:
12:cd:49:bf:9e:91:81:e9:32:d9:e3:4f:81:1b:cf:54:cc:b7:
6b:71:15:90:ad:3f:f6:e9:4f:fb:32:d6:22:95:73:1e:2e:d4:
0a:70:92:8a:77:ce:25:54:d5:db:14:d7:cc:09:5d:ec:16:ae:
b9:d5:33:04:38:b0:51:3d:31:aa:35:ee:e4:69:01:37:83:31:
08:48:ba:2f:2a:ee:8c:a3:1a:4e:57:78:cc:eb:96:47:25:46:
a3:4b:31:bc:22:2f:6d:4e:4e:b9:cb:28:17:21:59:c4:a0:da:
d6:87:b7:51:b2:9e:2f:3e:fa:21:90:d8:ae:22:62:57:d8:c3:
2c:26:d1:00:99:3c:a7:0e:e1:73:21:be:a2:f7:df:b8:aa:42:
08:98:c1:15:7c:ca:90:fb:18:54:35:30:58:15:5d:10:24:a5:
82:64:77:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:27 2024 by rpki-client on console-ams.rpki-client.org