Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/zKhmv-WXCvFFaaBQkjucf3RTsfM.roa
File: zKhmv-WXCvFFaaBQkjucf3RTsfM.roa (raw, json)
Hash identifier: 2LDVquSyedJWhe9FrmfilCthwi1mK3ZbE6zbAq3aEQM=
Subject key identifier: CC:A8:66:BF:E5:97:0A:F1:45:69:A0:50:92:3B:9C:7F:74:53:B1:F3
Certificate issuer: /CN=567190854786a16afa6b0ec78dfb0620abaacfef
Certificate serial: 0192B99B522E417B1BD43F8243B57127B0E7
Authority key identifier: 56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/zKhmv-WXCvFFaaBQkjucf3RTsfM.roa
Signing time: Wed 23 Oct 2024 13:40:16 +0000
ROA not before: Wed 23 Oct 2024 13:40:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20712
IP address blocks: 5.172.160.0/20 maxlen: 20
5.172.170.0/24 maxlen: 24
81.2.64.0/18 maxlen: 18
81.187.0.0/16 maxlen: 23
81.187.161.0/24 maxlen: 24
90.155.0.0/18 maxlen: 24
90.155.64.0/19 maxlen: 20
90.155.96.0/20 maxlen: 20
178.238.144.0/20 maxlen: 20
194.4.172.0/22 maxlen: 24
217.169.0.0/19 maxlen: 24
2001:8b0::/32 maxlen: 63
2001:8b0:a::666/128 maxlen: 128
2001:8b6::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 23 Oct 2024 13:59:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b9:9b:52:2e:41:7b:1b:d4:3f:82:43:b5:71:27:b0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567190854786a16afa6b0ec78dfb0620abaacfef
Validity
Not Before: Oct 23 13:40:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cca866bfe5970af14569a050923b9c7f7453b1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d7:c0:70:5f:cc:08:79:b0:51:66:9c:12:ee:
62:82:ed:24:d5:6b:ae:49:88:59:8d:48:04:e3:4a:
1c:a7:94:30:96:72:2f:5f:c1:ad:06:6b:78:e1:fa:
d7:df:f9:de:08:f7:cf:a7:fd:53:e5:d2:00:82:03:
a1:83:16:8f:15:1d:1f:fe:12:a8:76:12:9c:fc:ca:
d2:cf:49:0d:00:82:4b:a2:b2:3d:d9:7d:d3:4f:68:
72:90:af:8a:9e:b0:7a:07:84:68:ea:1e:a4:a5:c5:
1d:45:68:23:1d:aa:f6:d5:9a:59:8d:56:9e:73:78:
1c:70:17:dc:ad:d4:35:44:3d:08:12:01:ae:be:81:
60:e5:1c:9e:20:01:62:85:f0:29:b2:58:14:5f:12:
ce:6d:ce:c9:ea:aa:e4:a0:3c:31:07:79:70:57:b0:
e4:4d:4e:94:b3:09:62:ea:3c:be:59:73:52:53:ee:
61:7e:46:c5:6a:21:94:d3:41:de:78:83:17:e9:2d:
76:4b:bf:ca:48:cb:31:28:66:e3:fe:bd:fe:fd:36:
93:d6:b4:f8:c4:1b:02:af:26:a0:c8:a0:af:f3:a5:
8a:b6:d2:93:b7:cc:17:d9:e6:34:b1:86:19:3a:50:
e8:1b:df:43:08:52:57:29:71:6e:96:1f:e8:a7:48:
2d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A8:66:BF:E5:97:0A:F1:45:69:A0:50:92:3B:9C:7F:74:53:B1:F3
X509v3 Authority Key Identifier:
keyid:56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/zKhmv-WXCvFFaaBQkjucf3RTsfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.160.0/20
81.2.64.0/18
81.187.0.0/16
90.155.0.0-90.155.111.255
178.238.144.0/20
194.4.172.0/22
217.169.0.0/19
IPv6:
2001:8b0::/32
2001:8b6::/32
Signature Algorithm: sha256WithRSAEncryption
18:45:2a:7f:5f:e9:b5:02:7a:fc:0d:b3:7b:34:59:3a:f5:1b:
84:de:b8:2d:d0:37:fa:ce:70:67:15:71:6d:52:ac:78:c7:34:
92:7b:14:a0:af:28:da:71:79:a3:0c:eb:0d:3c:d4:42:e2:b1:
b9:5f:a3:cd:96:6f:4a:a9:6a:10:ac:fb:91:33:df:ee:8d:ec:
83:02:ba:6d:45:2e:71:3b:54:e2:c0:da:a3:fd:6d:ef:e9:c6:
7a:c0:93:02:31:63:28:f3:52:fd:41:5b:8a:a6:cf:49:43:68:
9f:85:7e:7e:3f:34:0a:74:ab:26:c0:73:19:11:bf:dd:4a:c5:
dd:8d:02:ed:fd:d1:e3:29:00:7e:24:c9:fa:67:73:d8:a2:23:
28:cf:9a:4b:e7:4b:08:4f:7f:7a:81:3c:ed:2b:b1:13:6a:30:
c4:32:94:ac:e7:cf:e9:ea:6d:d8:88:99:19:84:77:d8:1a:94:
12:ec:e0:a6:05:b4:36:9a:8c:60:72:b9:cd:d0:86:31:83:ea:
fb:87:42:fd:c9:6d:33:07:33:f5:a0:8e:96:87:78:6c:40:b8:
7f:29:67:fa:5e:2a:58:13:8e:96:b2:2b:57:e6:e4:b1:4b:2c:
b8:f7:9f:7e:36:a4:b7:97:d4:a5:33:e5:c1:64:1c:ec:e4:c7:
b5:1c:de:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:46:59 2025 by rpki-client