Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZMv2EkF9_dbpUPACSW0fL-Uj3yk.roa
File: ZMv2EkF9_dbpUPACSW0fL-Uj3yk.roa (raw, json)
Hash identifier: MkLzSLphApI1kkZvILa7w7omaPdusBfM8soaEQoHdYk=
Subject key identifier: 64:CB:F6:12:41:7D:FD:D6:E9:50:F0:02:49:6D:1F:2F:E5:23:DF:29
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D8A75DAD56E23312DBFB6DF85099B5C08
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZMv2EkF9_dbpUPACSW0fL-Uj3yk.roa
Signing time: Thu 08 Feb 2024 20:43:15 +0000
ROA not before: Thu 08 Feb 2024 20:43:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213094
IP address blocks: 185.252.160.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 09 Feb 2024 03:15:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8a:75:da:d5:6e:23:31:2d:bf:b6:df:85:09:9b:5c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 8 20:43:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64cbf612417dfdd6e950f002496d1f2fe523df29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ef:b3:1b:c2:fb:fa:7d:9f:63:23:5b:bc:4d:
67:1e:1f:27:ac:36:71:c5:ae:58:ad:cb:d4:43:5e:
cb:8c:b8:75:64:7b:4b:88:1d:b3:1a:79:6c:17:2c:
79:d8:a5:89:e7:9d:fe:45:8b:21:38:da:41:61:9a:
27:d5:52:9c:01:c9:db:0b:e4:88:10:dd:56:19:0a:
26:89:4f:ae:fb:da:b1:a6:3c:17:0d:b3:46:0d:59:
0d:95:ce:07:0c:5f:57:4c:b4:d4:ab:20:7b:6c:e8:
58:74:86:2e:ae:5a:50:50:03:59:fe:d3:84:30:3e:
8f:bc:d4:02:34:54:5c:56:e3:83:e7:c9:5d:bf:17:
98:51:a9:17:03:bc:39:49:7e:50:51:95:1f:f5:d6:
be:80:82:12:86:6e:62:45:b7:58:ec:65:15:cd:2d:
47:f3:83:87:af:06:37:e0:1e:ce:3f:40:34:f2:5e:
3e:bc:35:2b:e1:b4:91:c6:94:fa:ae:a6:5c:5f:c6:
0e:91:4c:42:d0:c0:49:df:c4:cd:ef:3b:d7:0f:1b:
9d:12:36:4a:09:ac:02:ab:49:df:6b:ce:0f:68:b8:
6d:e0:d4:1f:2c:27:ed:42:18:58:93:82:31:75:85:
e7:f9:9a:c8:6b:08:c7:55:1e:53:00:aa:a0:76:cc:
92:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CB:F6:12:41:7D:FD:D6:E9:50:F0:02:49:6D:1F:2F:E5:23:DF:29
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZMv2EkF9_dbpUPACSW0fL-Uj3yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
21:b5:c3:1e:5a:50:66:2a:cd:86:77:46:d8:94:58:82:a4:f0:
cc:c3:7f:d6:e6:d3:0c:8d:0d:ab:60:bc:f0:cd:9b:3d:7a:cd:
89:af:6a:fb:0a:6c:72:f4:85:b1:e8:26:0b:87:e9:17:ed:2a:
46:77:a4:5e:69:87:0e:18:ce:98:8b:6c:9a:ed:c2:a0:c2:68:
77:4a:48:74:69:37:9e:3b:6c:7e:06:cc:33:83:76:eb:af:86:
3c:99:a8:18:df:39:3a:e8:d0:c7:b7:b4:44:13:91:55:2f:45:
93:6e:18:27:61:43:ae:aa:eb:24:a2:9c:d1:1c:18:f7:bc:e1:
56:6f:f5:bf:09:a9:6c:a4:5c:d0:42:a4:91:00:9b:27:c7:34:
54:de:54:5a:3e:a1:13:a8:7e:1e:27:08:5b:87:6e:d0:b0:88:
9e:b4:04:3e:ec:99:3d:85:ba:7b:b9:26:59:76:e9:e4:2b:77:
b9:9e:e5:d4:2b:d1:be:bd:4d:79:56:cc:44:66:26:39:bd:bb:
26:c4:df:e5:10:3e:99:4c:7c:eb:c8:23:c9:13:e3:74:77:17:
ea:0e:a0:11:06:7f:c1:8f:84:9d:53:75:73:d5:3d:33:00:94:
66:5e:cc:12:94:58:41:f1:46:5e:eb:17:8e:63:9b:0f:c8:02:
d4:51:ce:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 04:58:43 2024 by rpki-client on console-ams.rpki-client.org