Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/ZeZZI0Oqx_wPoG02gJzNBw0DEUo.roa
File: ZeZZI0Oqx_wPoG02gJzNBw0DEUo.roa (raw, json)
Hash identifier: su9F4RMwOIh8ZVTFg+nPm2kNBAhLqLv+eOgCvF4K4kE=
Subject key identifier: 65:E6:59:23:43:AA:C7:FC:0F:A0:6D:36:80:9C:CD:07:0D:03:11:4A
Certificate issuer: /CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Certificate serial: 018CC56ECAA3D086702F906B36A86EFBD23E
Authority key identifier: 99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/ZeZZI0Oqx_wPoG02gJzNBw0DEUo.roa
Signing time: Mon 01 Jan 2024 14:30:21 +0000
ROA not before: Mon 01 Jan 2024 14:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206324
IP address blocks: 185.189.144.0/22 maxlen: 23
2a0b:ed80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ca:a3:d0:86:70:2f:90:6b:36:a8:6e:fb:d2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Validity
Not Before: Jan 1 14:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65e6592343aac7fc0fa06d36809ccd070d03114a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f6:9e:f1:bc:8c:bc:3b:7a:bc:62:4b:9e:39:
af:ff:f6:30:19:93:9a:20:02:88:90:0b:6d:77:f2:
ff:db:bf:a1:31:b6:6a:12:17:09:3c:34:e4:e8:a4:
81:e4:1c:98:fa:e9:6f:b1:53:da:6d:49:25:9e:31:
72:3c:64:44:f1:16:74:aa:06:93:c0:6a:64:7e:fa:
e5:26:1e:13:8d:ea:a3:d5:98:6e:c2:71:e0:fc:4e:
10:44:4d:1f:8a:2e:30:65:a5:60:36:11:e4:47:a1:
a3:06:82:c2:50:48:cb:f0:9f:41:a1:07:74:8a:7d:
5e:4d:00:01:fe:00:14:9c:b4:99:a2:18:93:10:4d:
cd:92:c7:90:4c:7c:af:bc:6b:40:34:7e:66:e1:9e:
2e:da:27:f0:10:c4:97:4b:00:62:d1:52:76:80:a6:
e8:2e:66:b7:ed:dd:7d:ed:30:bf:16:37:93:11:12:
f9:c6:e5:4b:64:3d:50:b8:c2:cf:ba:d8:d0:d2:6b:
a8:0e:29:c4:07:ec:70:bf:78:22:24:8c:32:69:88:
c7:f8:b3:66:49:6e:d5:e8:83:b9:aa:e3:7f:d9:04:
86:7f:eb:ce:1d:c9:a8:d2:f7:76:e2:e9:a4:e3:79:
eb:58:43:2f:06:7a:80:d3:a7:ae:14:cf:fd:91:cc:
7b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E6:59:23:43:AA:C7:FC:0F:A0:6D:36:80:9C:CD:07:0D:03:11:4A
X509v3 Authority Key Identifier:
keyid:99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/ZeZZI0Oqx_wPoG02gJzNBw0DEUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.144.0/22
IPv6:
2a0b:ed80::/29
Signature Algorithm: sha256WithRSAEncryption
0a:e8:c7:c3:08:14:b7:a5:4b:47:90:e9:77:97:12:68:3c:fe:
33:79:bc:85:58:63:bd:df:9e:fc:4e:3f:b6:ef:95:60:fc:53:
27:ba:da:03:17:83:e0:68:f1:ec:7d:27:b8:92:07:c9:31:3a:
90:61:eb:c3:b5:6b:db:02:55:d1:82:e5:29:3e:e1:fe:e5:96:
4d:62:cc:8d:0f:45:88:af:92:eb:cd:9a:9c:b8:20:58:f7:eb:
3b:cf:73:ea:a2:29:e1:7c:2a:ab:2d:9e:6b:4b:e5:29:63:66:
10:e9:26:fd:97:66:6e:33:61:75:c3:fb:56:6f:40:2e:6d:a5:
34:37:e3:83:bb:fd:4c:92:9b:37:0c:48:59:5b:b2:11:ea:0f:
0f:be:09:85:57:4e:9b:e0:fc:4d:bd:8a:43:03:62:64:ca:7c:
90:78:2c:87:fa:8f:90:aa:cb:56:12:42:d6:fe:42:cc:2a:91:
c3:98:58:fc:e4:7f:85:f1:fd:69:a1:73:67:56:86:af:e7:90:
36:4c:3c:03:67:c5:22:1c:c9:1e:d7:fd:24:2d:bc:8d:0a:41:
31:f1:7a:fb:55:ae:3a:5b:d8:23:c8:8e:98:ba:16:b4:65:24:
dd:06:65:55:98:ba:57:6c:c9:a5:4d:35:f7:ae:3d:bc:10:1f:
c9:a4:cc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:05:11 2025 by rpki-client