Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZUOn6L267wlILi54xrbTGLNICxQ.roa
File: ZUOn6L267wlILi54xrbTGLNICxQ.roa (raw, json)
Hash identifier: y0HA8SIaMPKlLh+ToCsyXC/RRiQc6kzyedsSRf2pmlM=
Subject key identifier: 65:43:A7:E8:BD:BA:EF:09:48:2E:2E:78:C6:B6:D3:18:B3:48:0B:14
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01902EEEB7DCF1892C2CAF35D7D8BF907D00
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZUOn6L267wlILi54xrbTGLNICxQ.roa
Signing time: Wed 19 Jun 2024 05:18:34 +0000
ROA not before: Wed 19 Jun 2024 05:18:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 5.253.56.0/23 maxlen: 24
5.253.58.0/23 maxlen: 24
45.139.123.0/24 maxlen: 24
91.92.67.0/24 maxlen: 24
93.123.76.0/22 maxlen: 24
94.154.173.0/24 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.152.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
94.156.178.0/24 maxlen: 24
94.156.180.0/23 maxlen: 24
94.156.237.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.25.219.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 19:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2e:ee:b7:dc:f1:89:2c:2c:af:35:d7:d8:bf:90:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 19 05:18:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6543a7e8bdbaef09482e2e78c6b6d318b3480b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f9:df:a7:d4:ee:4e:57:8b:5e:7d:6b:03:27:
7d:da:47:47:2c:db:d4:15:9a:6d:8d:a4:b4:4b:01:
f6:c1:a2:46:3b:29:c5:63:13:84:a5:bd:49:64:da:
01:15:3d:ed:ca:fb:04:53:cb:fc:2d:cb:12:56:b1:
4c:df:c7:6a:ea:41:b8:f9:ff:d8:57:e6:b3:e1:c5:
b9:3c:b7:28:08:a1:46:71:52:12:0b:2c:bb:a4:c4:
e4:34:15:b8:49:ba:04:5e:c5:b1:5f:8b:1a:02:69:
3a:ed:6b:52:a5:0f:c1:42:38:bb:79:9e:df:22:73:
0d:1f:6c:f4:32:dd:36:73:34:d1:4f:de:59:fe:bb:
56:02:a5:a8:8d:61:ab:71:cb:69:ef:aa:db:23:47:
6c:a0:a0:78:6d:a2:30:fb:f8:cb:26:65:a4:7e:1b:
bf:1a:05:bc:bc:b5:f9:b1:51:8a:ba:18:f0:ea:44:
c1:2c:f1:9d:72:98:32:32:0c:a9:8e:65:06:b4:e0:
0f:25:8f:f5:3c:8b:80:80:32:71:7c:58:9f:b9:1e:
26:df:e0:11:72:27:4c:0c:3b:2f:ab:2a:5b:de:32:
32:83:8c:77:b4:fb:b1:50:d4:10:d7:22:72:6f:c1:
53:d3:3f:c9:ae:55:43:b3:ed:b9:a5:6c:82:55:ca:
a5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:43:A7:E8:BD:BA:EF:09:48:2E:2E:78:C6:B6:D3:18:B3:48:0B:14
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZUOn6L267wlILi54xrbTGLNICxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/22
45.139.123.0/24
91.92.67.0/24
93.123.76.0/22
94.154.173.0/24
94.156.2.0/24
94.156.152.0/24
94.156.154.0/23
94.156.178.0/24
94.156.180.0/23
94.156.237.0/24
185.252.177.0/24
193.25.219.0/24
193.47.62.0/24
193.58.121.0/24
193.58.123.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:5f:72:24:5c:15:b5:aa:3f:7e:a7:44:e3:8c:80:3b:93:12:
22:23:92:08:ad:26:18:e2:43:bb:25:d3:31:21:1e:58:58:02:
d7:1b:14:cf:82:af:ee:9a:46:74:90:bd:e1:87:fa:45:bb:82:
70:b9:41:a4:02:65:7f:a9:61:86:00:b4:d3:22:b2:37:a6:db:
43:51:13:bd:a1:04:7f:32:25:0e:f4:cd:cd:98:44:21:9f:4a:
32:6f:38:79:06:54:96:86:23:41:b1:41:cc:93:bc:57:91:20:
b6:59:4f:e8:52:07:79:6f:f3:4f:21:7b:71:ec:39:b2:eb:eb:
35:91:c9:6e:9a:29:13:a5:43:14:01:f7:b7:b3:9b:2c:98:22:
df:2d:14:4b:c0:70:9a:0f:95:57:ba:79:6e:13:0b:d8:18:3f:
78:bd:48:25:9d:44:0b:aa:1c:8b:a4:5d:fa:a0:3e:cb:16:ca:
2b:27:97:40:d4:d3:9d:95:91:8f:8e:93:46:88:97:f8:ea:3e:
4c:99:29:cb:58:63:5e:35:6d:16:74:15:c8:01:cb:64:cb:0b:
6e:7d:fd:ba:bc:1b:a6:f6:d1:04:70:d8:93:46:e0:25:c2:78:
ab:d1:a6:7b:d6:fd:0f:91:26:a3:ce:75:fb:a1:63:e6:48:e5:
f0:72:fb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 22:48:31 2024 by rpki-client on console-ams.rpki-client.org