Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zeywzEuAAg5AuL4KRiYPbSC-UJg.roa
File: zeywzEuAAg5AuL4KRiYPbSC-UJg.roa (raw, json)
Hash identifier: OXHLNyCNxMEd1CX0ehS3PEqwGN8lP95xhybPfjgTj9o=
Subject key identifier: CD:EC:B0:CC:4B:80:02:0E:40:B8:BE:0A:46:26:0F:6D:20:BE:50:98
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D31E3D835FBF928042BD3946A7207C23E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zeywzEuAAg5AuL4KRiYPbSC-UJg.roa
Signing time: Mon 22 Jan 2024 15:57:12 +0000
ROA not before: Mon 22 Jan 2024 15:57:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 37.221.120.0/22 maxlen: 24
87.121.146.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
185.225.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 00:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:31:e3:d8:35:fb:f9:28:04:2b:d3:94:6a:72:07:c2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 22 15:57:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdecb0cc4b80020e40b8be0a46260f6d20be5098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:51:f8:dc:93:2e:f8:b8:7a:6a:79:4e:1e:
bd:26:fe:49:d3:26:39:f2:04:79:99:6b:86:3d:f1:
c7:d5:40:b7:14:45:d3:18:33:82:db:0b:49:76:fe:
ba:5d:59:69:59:78:50:66:a9:2a:f3:06:24:27:a0:
c0:3f:f3:c8:a2:f6:17:95:5b:a4:6f:2f:47:29:23:
26:6a:bb:6f:63:7b:7e:dc:f8:a2:f5:8a:5c:bc:f0:
02:9d:ac:23:aa:68:e9:c0:f4:0b:23:85:14:46:c0:
35:5a:0d:28:59:ca:ce:61:9c:d5:61:6b:13:6c:16:
99:df:3d:01:39:1b:52:77:fc:ee:4c:4a:31:c8:23:
d4:3f:7c:64:a9:d4:5b:71:73:56:17:bd:bc:dc:4c:
41:d7:af:51:f9:06:61:5e:ee:37:3d:79:9d:f8:76:
bc:fa:39:45:b7:bd:8b:66:76:a7:ad:46:1f:25:d0:
13:ab:89:ec:92:a6:65:7e:7e:d4:30:f2:cb:78:74:
35:1a:b6:3c:29:91:4a:a8:c7:38:c5:ac:6d:b9:a1:
50:47:a7:7e:3f:30:9f:40:25:b1:78:7b:dc:fd:d9:
a2:e1:1b:2e:c2:77:64:34:93:e8:50:8f:81:b0:11:
ad:43:c9:cb:49:e5:df:10:3a:ad:f4:5e:34:c7:64:
6d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EC:B0:CC:4B:80:02:0E:40:B8:BE:0A:46:26:0F:6D:20:BE:50:98
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zeywzEuAAg5AuL4KRiYPbSC-UJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
87.121.146.0/24
178.215.226.0/24
185.225.73.0/24
Signature Algorithm: sha256WithRSAEncryption
31:a5:46:33:31:dd:03:82:67:cd:bc:72:a3:21:9d:32:6b:ba:
e8:14:e0:fc:94:fb:28:20:df:0d:15:38:98:0b:9c:18:40:90:
9a:7e:19:f3:3b:92:a6:7e:a0:f6:35:51:81:ed:40:35:df:f5:
69:57:d2:d8:e9:d8:97:4c:24:21:5f:5f:64:66:f2:b4:28:68:
24:5a:d2:59:02:eb:51:1f:45:84:30:47:01:12:0e:74:4a:2e:
20:7e:7e:ea:79:8e:de:2c:0c:1a:2c:c5:f4:dc:f0:8f:1b:03:
a7:d8:05:3d:64:96:74:b0:59:70:30:c8:bb:77:35:15:96:3d:
99:f6:f4:40:7d:51:9c:4d:71:29:d4:78:f2:d0:a8:9c:a2:44:
37:8d:48:f5:7f:c0:2f:5f:7d:9f:9c:84:e0:b4:99:5d:a7:bf:
1e:0a:8a:f3:79:ba:f4:49:9e:71:2c:0a:b7:86:78:08:a8:f6:
b0:2a:ab:7c:15:5e:76:6b:8c:1d:98:87:27:31:14:c6:65:2f:
b2:b2:fb:1e:24:ba:4f:7c:34:d7:d3:d8:da:c5:b9:9a:19:de:
b5:68:87:d6:dd:43:5a:22:00:2f:62:92:9c:9a:4e:56:2b:5e:
7a:fd:a0:7a:7a:c1:b6:bf:e5:bb:7b:41:a9:53:e3:7f:0e:64:
ea:66:ea:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 01:12:01 2024 by rpki-client on console-fra.rpki-client.org