Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/zEb5ZO9wLqSqxQ1VkY7cShQRAlo.roa
File: zEb5ZO9wLqSqxQ1VkY7cShQRAlo.roa (raw, json)
Hash identifier: ERy7DV0WTKLhZjxSt+SvGH8GnaxjA3P+dWVA9c4LCec=
Subject key identifier: CC:46:F9:64:EF:70:2E:A4:AA:C5:0D:55:91:8E:DC:4A:14:11:02:5A
Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial: 018CC80194E89D71517479B1AAC1131E1EB1
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/zEb5ZO9wLqSqxQ1VkY7cShQRAlo.roa
Signing time: Tue 02 Jan 2024 02:29:55 +0000
ROA not before: Tue 02 Jan 2024 02:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61315
IP address blocks: 93.101.80.0/20 maxlen: 24
93.101.96.0/20 maxlen: 24
93.101.112.0/20 maxlen: 24
93.101.16.0/20 maxlen: 24
93.101.240.0/20 maxlen: 24
93.101.32.0/20 maxlen: 24
93.101.48.0/20 maxlen: 24
93.101.64.0/20 maxlen: 24
93.101.176.0/20 maxlen: 24
93.101.192.0/20 maxlen: 24
93.101.208.0/20 maxlen: 24
93.101.224.0/20 maxlen: 24
93.101.128.0/20 maxlen: 24
93.101.144.0/20 maxlen: 24
93.101.160.0/20 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 07:25:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:94:e8:9d:71:51:74:79:b1:aa:c1:13:1e:1e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Validity
Not Before: Jan 2 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc46f964ef702ea4aac50d55918edc4a1411025a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1e:15:1b:60:c3:26:6a:8d:b5:3d:59:7d:95:
64:c9:5a:69:c1:d1:4b:4c:c0:9f:e1:58:7c:43:67:
e6:62:1c:02:01:f7:7b:0e:29:9d:58:79:ac:f0:d7:
67:a8:84:88:1e:3e:a9:16:f1:e1:00:f4:9e:f7:76:
a1:81:78:d6:a9:25:14:61:8f:66:bd:18:fc:48:44:
58:da:f4:3b:24:07:4c:51:1b:19:0f:9d:f1:d3:47:
2f:6c:8e:bb:b0:f4:0e:c3:84:7a:78:9c:e1:74:5c:
63:06:a3:9c:db:d6:f1:50:bd:8f:4e:8f:e0:e8:8e:
13:35:63:2b:48:56:60:cf:bd:b4:75:fe:7c:4d:36:
24:15:21:bf:32:4f:67:fe:36:89:87:b4:3f:b4:a3:
c7:32:f8:83:9b:34:68:3a:0c:01:29:98:66:21:43:
93:c2:58:29:c3:30:6c:f6:28:01:15:c0:56:ba:5f:
17:f0:ab:2f:58:28:50:75:01:6b:a9:f2:5f:90:a1:
26:c1:81:5d:97:54:f6:1c:c2:bf:fc:73:f5:98:63:
e3:12:0c:d5:7e:c5:9c:01:8b:44:7e:ce:e1:d4:5f:
41:01:36:9c:d5:65:c2:da:6d:f5:bf:2f:f1:01:bc:
56:de:0f:5c:f9:5f:d1:92:cd:d9:f7:69:89:3e:95:
96:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:46:F9:64:EF:70:2E:A4:AA:C5:0D:55:91:8E:DC:4A:14:11:02:5A
X509v3 Authority Key Identifier:
keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/zEb5ZO9wLqSqxQ1VkY7cShQRAlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.101.16.0-93.101.255.255
Signature Algorithm: sha256WithRSAEncryption
cb:0b:8a:e2:8b:0b:e7:b1:d5:f9:4d:e1:1c:c5:02:48:56:ec:
4f:10:f7:8a:01:8c:ed:ea:c0:f1:3d:b9:be:3a:0e:f1:38:48:
1d:ee:c5:88:5d:9b:b5:57:6a:c8:f9:56:e2:69:56:a7:01:2c:
ba:0f:cd:ac:fd:94:1d:ba:14:53:64:41:3b:2b:f9:0d:41:ca:
84:51:44:51:43:b1:3f:39:cf:f7:f2:26:7f:d7:1e:79:6b:10:
d9:8f:93:29:85:96:d7:53:e6:54:f7:0b:5a:f2:15:a4:12:a3:
60:8a:b2:a0:08:3a:6a:c4:c1:58:8c:27:91:dd:14:d6:04:c6:
78:50:41:ae:d1:cd:ba:8b:ef:2c:23:58:2e:65:9a:03:70:d6:
86:53:a6:f3:b4:10:c1:47:db:12:14:29:8a:15:d2:dc:c8:13:
88:f3:77:cb:7f:d8:46:d7:6f:9d:43:9a:e8:c1:c8:d4:71:be:
81:74:57:07:68:ad:77:d0:1d:69:1c:08:26:5d:b4:5d:17:5e:
68:ca:2f:36:df:8e:9e:20:5a:3e:ff:00:47:0b:d4:57:e5:3e:
46:e0:9c:5a:91:8e:67:5c:9a:db:a4:2c:ec:cc:28:91:28:df:
2a:e1:b2:13:53:9f:37:2b:27:3b:4d:ea:72:59:af:e0:4f:a4:
23:c9:78:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:05 2024 by rpki-client on console-ams.rpki-client.org