Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZZChrZxAOTqxcFAFOhuJEE1Xvyk.roa
File: ZZChrZxAOTqxcFAFOhuJEE1Xvyk.roa (raw, json)
Hash identifier: KUifq1vcaQAvpozliwyt9y+4NrnJyQoMt5CUG+WsH+g=
Subject key identifier: 65:90:A1:AD:9C:40:39:3A:B1:70:50:05:3A:1B:89:10:4D:57:BF:29
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E2D5542224FF61E113E80849507C55EC2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZZChrZxAOTqxcFAFOhuJEE1Xvyk.roa
Signing time: Mon 11 Mar 2024 11:45:45 +0000
ROA not before: Mon 11 Mar 2024 11:45:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216156
IP address blocks: 87.121.84.0/23 maxlen: 24
94.156.102.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
178.215.237.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2d:55:42:22:4f:f6:1e:11:3e:80:84:95:07:c5:5e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 11 11:45:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6590a1ad9c40393ab17050053a1b89104d57bf29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:82:4a:a0:c3:55:c0:d3:41:d8:3f:9d:10:af:
d2:c2:09:fb:06:1c:18:c2:67:dd:6f:52:6e:89:0b:
26:75:88:07:55:3e:e9:5e:92:fe:5b:40:3a:87:2d:
70:a5:cc:c4:ef:18:a6:7f:fb:dc:a9:a8:48:6d:1d:
ab:f9:a8:4d:51:50:81:39:19:c5:5c:7b:af:b1:e0:
c1:59:1c:9a:4e:ff:af:10:34:9b:5b:1b:77:52:33:
4f:3d:4e:1b:93:30:b7:63:7c:0d:0c:04:84:dc:b7:
0f:b0:3e:74:23:63:d7:2d:9d:bf:97:3b:53:02:49:
07:ca:43:01:b2:f7:9a:e4:12:2c:31:9a:40:29:cd:
77:4a:7f:f1:f3:58:a0:7c:dd:d6:e4:ff:b9:2d:7c:
f4:28:00:67:b9:70:90:9b:6f:8f:51:f4:12:c9:40:
41:e6:94:63:3a:ae:e2:c2:ba:57:17:80:1d:f4:9c:
b8:47:51:5d:ef:00:ad:22:1a:7f:9c:ab:4c:e6:09:
33:07:f4:a2:fd:ca:41:f0:4e:fe:73:e3:a8:77:e8:
23:64:e9:0c:b4:b3:93:f6:58:c4:1f:6c:ff:c9:4e:
47:d0:79:e4:13:e2:33:db:89:7f:df:4b:4d:19:68:
4e:b2:ed:fb:ee:ad:9d:0d:6f:9e:2e:01:8a:82:18:
7c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:90:A1:AD:9C:40:39:3A:B1:70:50:05:3A:1B:89:10:4D:57:BF:29
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZZChrZxAOTqxcFAFOhuJEE1Xvyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.84.0/23
94.156.102.0/24
141.98.6.0/24
178.215.237.0/24
185.252.176.0/24
Signature Algorithm: sha256WithRSAEncryption
36:bb:a7:4d:23:04:f5:e2:fd:d2:3a:5f:4d:55:99:6b:d8:fe:
ff:8b:bd:c3:27:9e:91:08:a9:b5:e0:c0:07:68:4c:d2:21:45:
f3:61:19:82:89:cd:58:12:e7:ff:88:0c:62:83:85:b6:6b:94:
0d:93:d5:5c:d5:63:3c:a6:0d:78:ff:eb:69:b5:79:ea:8a:06:
93:86:f7:f9:47:f5:a7:5f:ce:ad:ea:e2:64:7c:f2:06:44:4b:
e0:83:23:21:8a:3a:94:af:d8:55:5d:89:22:a6:d4:f8:68:db:
ab:fc:b2:de:99:b9:db:52:df:02:35:a3:c0:f5:73:1b:4d:c8:
38:3a:b6:d7:cd:ff:52:44:f2:cb:2c:84:52:d4:b4:a9:9a:1d:
7e:ee:14:fe:9f:5f:b1:2a:e6:6f:50:7a:00:db:4d:6f:f1:e4:
1a:bf:c5:bb:ab:70:e7:ad:c9:08:c5:ef:fb:dc:50:bf:fe:8d:
b0:a5:4a:8f:f4:22:18:3b:56:c5:38:77:09:f2:8e:59:1c:5b:
16:cb:c4:5e:d2:7f:56:42:3b:d2:d2:42:5d:5f:77:3c:01:02:
91:e9:3b:48:89:5b:fa:14:3f:3c:0b:8a:b0:69:69:4a:ff:f6:
b3:fc:fe:3d:64:6b:ab:27:73:35:cf:cc:e2:ba:ad:b8:34:69:
25:d2:4c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 18 17:06:38 2024 by rpki-client on console-ams.rpki-client.org