Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZTR55YIEQ_OZhCWowEVNY-a_MRc.roa
File: ZTR55YIEQ_OZhCWowEVNY-a_MRc.roa (raw, json)
Hash identifier: Yf3J6HJm27NL9qBctGpFfwuqCO2/sTZgO4uJGwLFj1I=
Subject key identifier: 65:34:79:E5:82:04:43:F3:99:84:25:A8:C0:45:4D:63:E6:BF:31:17
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E7B0629A8E9EF33485F59B7E8C66A499B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZTR55YIEQ_OZhCWowEVNY-a_MRc.roa
Signing time: Tue 26 Mar 2024 13:49:45 +0000
ROA not before: Tue 26 Mar 2024 13:49:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 5.253.56.0/23 maxlen: 24
5.253.58.0/23 maxlen: 24
45.139.123.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
91.92.67.0/24 maxlen: 24
93.123.26.0/23 maxlen: 24
93.123.76.0/22 maxlen: 24
93.123.112.0/22 maxlen: 24
94.154.173.0/24 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.152.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
94.156.178.0/24 maxlen: 24
94.156.180.0/23 maxlen: 24
94.156.237.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
141.98.5.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.25.219.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 12:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7b:06:29:a8:e9:ef:33:48:5f:59:b7:e8:c6:6a:49:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 26 13:49:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=653479e5820443f3998425a8c0454d63e6bf3117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:07:38:bd:62:cb:7c:58:9f:67:b9:71:76:
7a:e0:d0:af:c6:7f:91:19:ab:9c:c9:20:3f:72:3b:
58:24:4b:a1:41:72:c1:00:86:33:ed:83:34:a7:84:
41:ab:bb:2c:16:55:09:c2:9a:35:ee:da:92:6d:8c:
28:ef:55:25:8b:e9:c0:db:23:c3:49:14:60:f6:00:
79:91:0a:9b:fa:d9:d8:46:63:79:47:6a:e2:5c:d8:
c9:54:24:53:1d:0a:a1:b1:c9:7c:19:f4:16:0f:7d:
7c:b8:a0:2f:0f:40:80:0b:25:67:f0:93:ef:c3:be:
3a:32:95:aa:c9:ed:7b:bd:24:75:dc:2f:4a:b5:49:
74:df:7b:4f:c8:fb:bd:98:dd:ef:d1:67:ca:8c:50:
2f:da:b9:54:da:57:34:65:17:29:32:02:c0:e6:8b:
67:99:e6:87:6e:c8:8a:9e:2c:ea:84:6a:68:7a:f6:
10:d0:53:ea:21:57:c8:1d:04:b7:71:81:54:7a:56:
5a:f0:2d:73:4a:ed:af:e2:4b:af:b2:92:67:4e:94:
8b:cb:c5:a3:df:bd:92:12:c5:59:9d:cd:a0:46:06:
3f:d8:0d:d4:27:8c:38:7e:2a:cc:bd:fe:c0:bb:4e:
35:5e:61:d2:ba:90:bc:27:ba:17:a1:9c:85:3c:d0:
e1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:34:79:E5:82:04:43:F3:99:84:25:A8:C0:45:4D:63:E6:BF:31:17
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZTR55YIEQ_OZhCWowEVNY-a_MRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/22
45.139.123.0/24
91.92.16.0/24
91.92.67.0/24
93.123.26.0/23
93.123.76.0/22
93.123.112.0/22
94.154.173.0/24
94.156.2.0/24
94.156.152.0/24
94.156.154.0/23
94.156.178.0/24
94.156.180.0/23
94.156.237.0-94.156.238.255
141.98.5.0/24
185.252.177.0/24
193.25.219.0/24
193.47.62.0/24
193.58.121.0/24
193.58.123.0/24
Signature Algorithm: sha256WithRSAEncryption
29:cb:3d:b2:52:0c:27:02:53:ee:ef:7d:b7:12:48:85:d6:00:
ae:d4:ca:a6:bf:11:75:82:47:b4:3f:8d:28:6a:41:ae:c1:b9:
89:a6:73:dc:4f:78:bb:47:b2:d0:32:c0:80:ea:39:74:be:3e:
aa:b9:17:2c:04:7a:3e:2a:b4:f7:6a:2c:fd:85:19:1e:05:c4:
fb:30:13:2a:4c:7a:e2:bb:7a:33:23:7d:e9:7d:0d:ad:71:7a:
a1:e4:f4:fc:2e:e9:74:17:b2:44:e2:b2:cb:3a:5f:3b:b1:81:
3f:cd:67:29:ff:ab:cf:c4:16:2f:54:c8:13:df:4a:18:a2:87:
dc:41:13:0f:11:c7:e0:8a:f9:28:81:31:b8:b8:00:a8:f8:67:
3e:5f:cc:35:51:c8:68:d0:6a:a6:b7:24:10:b2:fc:e8:7e:0f:
7e:78:6e:76:64:f5:bb:72:03:2d:de:95:e0:1c:60:19:b4:07:
e9:97:f6:dc:28:6d:3a:0d:2a:c9:d1:21:05:56:15:84:a7:de:
83:7f:f4:28:31:6f:e5:f2:50:b6:e7:3d:36:8d:73:87:52:6a:
b9:ce:54:c6:29:80:05:31:ff:5c:26:4a:12:83:a6:bf:06:e5:
4e:2d:d3:5c:46:00:79:72:ea:dc:44:d9:3c:d4:a5:ea:a8:c0:
33:66:0f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 17:38:53 2024 by rpki-client on console-ams.rpki-client.org