Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZwQKFwd4hPHytMLaJJnfJdcNBKc.roa
File: ZwQKFwd4hPHytMLaJJnfJdcNBKc.roa (raw, json)
Hash identifier: FP6m3Ai0asoO1fEr9EuAEP9Od8gR4E76AjNoH2A28dI=
Subject key identifier: 67:04:0A:17:07:78:84:F1:F2:B4:C2:DA:24:99:DF:25:D7:0D:04:A7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018EECD6885A7E3C2245714566549E591796
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZwQKFwd4hPHytMLaJJnfJdcNBKc.roa
Signing time: Wed 17 Apr 2024 16:14:26 +0000
ROA not before: Wed 17 Apr 2024 16:14:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203168
IP address blocks: 45.88.90.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
94.156.10.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Apr 2024 16:10:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ec:d6:88:5a:7e:3c:22:45:71:45:66:54:9e:59:17:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 17 16:14:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67040a17077884f1f2b4c2da2499df25d70d04a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c3:75:93:1b:e0:08:07:6f:2b:bd:da:3e:b5:
25:fa:97:78:9f:eb:59:76:e6:d6:bf:22:f9:8b:ef:
e4:90:11:6d:33:d0:98:75:4a:c0:a1:be:b5:53:6a:
a0:14:6d:06:d0:26:58:97:e9:e2:21:0c:a7:0a:60:
d3:bd:0b:ea:c8:cc:07:10:c0:1e:d6:ae:dd:24:7c:
28:54:c5:8a:f4:53:c5:8c:25:46:94:86:03:c3:47:
cc:ee:71:0c:53:d8:56:e5:23:93:60:73:0f:15:0a:
8a:68:5b:84:3f:4b:36:1c:8b:a3:aa:0b:fd:c4:21:
71:2e:ea:29:26:15:89:f9:c9:14:4e:98:27:76:83:
72:2f:79:eb:1e:ee:6b:83:54:64:65:ca:01:d9:a7:
06:c1:b6:41:d3:7a:2f:10:f1:1b:c0:cc:d2:2e:66:
c3:d8:9a:78:9e:86:c6:2a:c8:10:5c:28:3a:20:3a:
60:7d:f8:08:28:64:85:ab:83:10:9c:4c:2b:40:b2:
68:39:96:1e:b2:40:f6:14:97:55:2f:2a:a4:de:d0:
e7:75:d8:a4:71:17:fc:97:c2:e3:6f:34:1f:98:50:
a4:df:55:27:25:dc:18:40:00:74:3c:84:5b:db:a2:
91:13:b1:40:74:88:e9:25:a3:4f:9c:b7:3e:27:ea:
7f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:04:0A:17:07:78:84:F1:F2:B4:C2:DA:24:99:DF:25:D7:0D:04:A7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZwQKFwd4hPHytMLaJJnfJdcNBKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.90.0/24
87.120.84.0/24
87.121.105.0/24
94.156.10.0/24
193.222.96.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:71:fb:d1:ae:b7:33:3e:14:08:2c:e9:65:66:34:12:9a:53:
a5:76:0b:9d:bb:8f:93:ce:96:29:39:82:f4:c8:c7:da:9b:a3:
9e:7f:56:e5:60:8f:59:52:a2:b5:92:b5:63:79:fb:9d:42:c1:
e2:de:18:26:e0:61:a7:30:59:31:e3:86:1b:64:00:a8:0c:77:
40:f1:c7:1c:e3:b0:5c:c3:d3:72:55:52:85:55:78:4b:62:28:
89:c0:e5:77:2c:77:54:44:8d:ff:6b:d2:f0:a7:c7:0c:3c:d7:
0f:7b:ea:9c:f9:a6:1f:f7:7d:3f:76:df:28:f1:3e:0e:f6:ea:
36:8c:ca:e9:a9:60:8d:00:0f:9e:41:50:9a:2c:e5:50:36:59:
ad:03:c7:fd:a6:38:7b:13:3c:c1:ed:34:91:0d:e0:24:7d:b8:
ed:7e:f3:10:29:02:0f:22:8f:1e:20:62:90:ce:f7:1e:4e:35:
97:c5:58:99:7b:21:72:fa:fb:51:8c:ce:c9:10:57:63:98:62:
e0:38:73:39:27:e2:73:0c:6a:57:51:7c:ef:ff:19:fe:a6:7e:
a5:51:d4:af:b7:e9:ce:aa:66:9d:8d:4c:75:b4:20:de:ea:ce:
7c:52:c6:87:1a:58:35:68:94:81:0f:b8:f5:30:66:02:86:56:
84:18:57:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:14 2024 by rpki-client on console-fra.rpki-client.org