Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZK0NMbLlIzmuTyxx-xwarwhfXuc.roa
File: ZK0NMbLlIzmuTyxx-xwarwhfXuc.roa (raw, json)
Hash identifier: mrOYC/ArrfKt7EJ9UAuqDqBQwTKnmpUMwe9v9pSQyxY=
Subject key identifier: 64:AD:0D:31:B2:E5:23:39:AE:4F:2C:71:FB:1C:1A:AF:08:5F:5E:E7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0192244AB7D098A6FED405304DA39385BA74
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZK0NMbLlIzmuTyxx-xwarwhfXuc.roa
Signing time: Tue 24 Sep 2024 13:48:49 +0000
ROA not before: Tue 24 Sep 2024 13:48:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200239
IP address blocks: 193.124.80.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
194.87.75.0/24 maxlen: 24
194.87.91.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Oct 2024 13:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:24:4a:b7:d0:98:a6:fe:d4:05:30:4d:a3:93:85:ba:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 24 13:48:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64ad0d31b2e52339ae4f2c71fb1c1aaf085f5ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:17:c9:c2:32:2a:20:f6:5c:5d:59:6b:c2:ad:
37:c8:da:cb:0d:f6:09:fe:d4:98:87:3d:2a:96:a3:
b8:26:75:67:60:9c:e1:d7:e6:f8:6c:de:1f:59:a2:
3c:47:09:62:c0:e5:15:29:a1:7e:34:c8:e4:92:d2:
11:5e:97:84:d0:4b:3b:43:e7:a2:40:f9:3e:b5:6c:
56:d7:b4:d0:ae:24:11:3e:fe:ed:19:01:a4:eb:a8:
98:d6:17:38:3f:e0:e7:a7:b2:c5:13:a2:8f:b3:a9:
09:c3:9f:07:ed:84:7a:b0:de:c0:aa:c3:e5:07:f9:
a5:05:53:95:6d:6b:d5:99:62:17:a0:c9:2c:bf:61:
21:a7:b4:8a:62:5c:bb:8f:f6:12:7f:84:ad:ca:47:
56:6d:90:1d:2a:02:f5:8f:bf:bb:d5:99:a7:0f:1d:
d6:16:ef:6a:d6:7b:36:2d:db:01:c3:9f:46:16:0e:
a2:88:28:c1:14:d9:1c:61:e5:96:cd:f0:1f:0a:dc:
c3:ad:b8:20:94:67:82:34:f2:1f:9c:f6:9e:32:28:
4a:ef:4e:a6:ba:6b:c5:96:bd:5f:a5:a8:ba:99:1b:
a2:1a:c1:42:cd:e8:4e:e4:f8:a6:d1:22:02:53:22:
53:b4:34:8f:2c:9c:4d:33:36:4c:19:65:0a:db:40:
bd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AD:0D:31:B2:E5:23:39:AE:4F:2C:71:FB:1C:1A:AF:08:5F:5E:E7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZK0NMbLlIzmuTyxx-xwarwhfXuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.80.0/24
193.124.90.0/24
194.87.75.0/24
194.87.91.0/24
195.58.63.0/24
Signature Algorithm: sha256WithRSAEncryption
52:65:ed:29:59:b8:4a:b0:ef:c7:a7:dd:81:0f:f6:81:d5:93:
b8:6b:0e:56:a8:99:3c:ef:1b:3c:dc:cc:30:10:15:b0:85:96:
70:cb:85:60:96:96:04:bd:4e:96:7f:0a:16:c0:5f:b3:19:9c:
f6:2a:f7:0b:0e:93:f0:37:10:c9:6e:10:42:f7:ee:0e:29:51:
d0:d8:d7:33:c5:72:b2:a1:b9:c8:a7:48:0e:70:1f:80:42:ab:
4d:58:fc:02:71:b5:74:6b:69:c4:b1:df:36:78:c1:57:12:17:
6a:f5:04:d0:70:18:0c:7c:ee:e8:f1:f4:6a:8d:6e:9d:52:91:
61:61:8d:30:a6:5f:54:42:f8:73:90:08:8b:5f:15:6f:ac:79:
f1:a8:0d:31:1b:e7:f8:66:6e:0f:b5:a8:26:ae:66:f4:74:fc:
db:bd:0c:fa:15:f7:5d:eb:e2:0a:09:05:21:9f:2f:39:55:aa:
4c:28:0b:6e:1b:b2:6b:af:f8:c7:cc:c7:24:a3:ab:89:ac:08:
d5:79:0b:28:3a:3f:46:b7:80:f7:ca:7c:3d:3b:dc:74:a5:b2:
21:09:24:44:0b:72:7a:5e:ad:cd:54:b4:3b:8e:a4:b3:46:7e:
98:5f:f1:c1:10:d4:2b:19:f0:bc:a2:91:66:5d:bc:d0:17:6e:
7c:80:51:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 17:42:54 2024 by rpki-client on console-ams.rpki-client.org