Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/Z56CQs6A7sStVdMkGkUlEFsUdP0.roa
File: Z56CQs6A7sStVdMkGkUlEFsUdP0.roa (raw, json)
Hash identifier: LRMcM1lrbNx6wgxU1mgMVSvTpTU8fNrN1etPpPZ+sy4=
Subject key identifier: 67:9E:82:42:CE:80:EE:C4:AD:55:D3:24:1A:45:25:10:5B:14:74:FD
Certificate issuer: /CN=3ea53ac9a8dc446fb7e0113b68b38e970c19f7cc
Certificate serial: 018CC34941A7147A9872D656EAEA7183DDAF
Authority key identifier: 3E:A5:3A:C9:A8:DC:44:6F:B7:E0:11:3B:68:B3:8E:97:0C:19:F7:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/Z56CQs6A7sStVdMkGkUlEFsUdP0.roa
Signing time: Mon 01 Jan 2024 04:30:07 +0000
ROA not before: Mon 01 Jan 2024 04:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29549
IP address blocks: 193.105.240.0/24 maxlen: 24
185.63.121.0/24 maxlen: 24
185.63.123.0/24 maxlen: 24
185.63.120.0/24 maxlen: 24
185.63.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:41:a7:14:7a:98:72:d6:56:ea:ea:71:83:dd:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea53ac9a8dc446fb7e0113b68b38e970c19f7cc
Validity
Not Before: Jan 1 04:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=679e8242ce80eec4ad55d3241a4525105b1474fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:5c:27:10:09:56:34:ba:e1:c5:49:0d:59:
03:64:8c:60:1e:14:05:6c:e1:f6:b5:63:41:e7:d8:
76:75:21:9d:8b:1e:6f:ac:4b:12:93:d2:f7:a6:c9:
2e:75:9d:cb:fd:e3:83:12:d3:31:6a:f4:c1:35:b3:
19:66:95:9c:b1:0f:39:cc:f3:52:d3:75:7b:9f:01:
a8:0c:d8:6a:e3:8d:11:67:a4:8b:72:32:d9:1a:fb:
ba:c0:49:19:f4:e8:8d:8c:34:2d:14:d6:4c:ea:d8:
7e:00:5f:9b:1c:dc:08:6c:23:af:95:46:90:d5:c9:
25:07:e8:30:fe:98:92:9a:a4:40:fd:87:ee:01:be:
fe:92:5b:39:3b:c7:70:a5:94:48:59:06:3c:f4:cb:
c9:e9:db:c4:7d:b7:5b:1e:f2:14:05:02:e3:83:f5:
ac:de:f1:65:01:80:42:23:72:43:9e:6a:47:3d:7e:
74:f4:ae:db:9f:e1:bd:d5:1f:bb:d1:47:bd:51:6c:
45:7a:cd:39:b0:6d:5f:c5:cd:32:3b:43:0c:66:81:
fd:04:96:cd:2b:7b:b8:fc:dc:f4:c4:1c:ae:83:32:
df:4c:89:dd:38:85:b5:d3:39:23:20:18:fd:f8:26:
85:da:99:eb:9d:4a:ea:1a:9f:4f:91:5a:f8:0d:39:
fa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9E:82:42:CE:80:EE:C4:AD:55:D3:24:1A:45:25:10:5B:14:74:FD
X509v3 Authority Key Identifier:
keyid:3E:A5:3A:C9:A8:DC:44:6F:B7:E0:11:3B:68:B3:8E:97:0C:19:F7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/Z56CQs6A7sStVdMkGkUlEFsUdP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.120.0/22
193.105.240.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:18:1e:e5:e9:d6:7e:66:87:67:ca:f7:05:05:19:ad:5c:0d:
ab:41:ff:c2:8b:47:e7:ad:7f:b2:1f:01:57:c0:26:0e:6e:7a:
c9:cc:c2:47:6a:c8:fa:d5:ac:0c:eb:5e:fd:3e:82:f8:cf:00:
be:8a:01:18:7e:79:ae:84:ce:64:e6:fc:27:bf:8c:24:bb:29:
99:f7:c1:96:17:a7:4c:07:84:69:ac:e8:df:c2:ff:25:fa:bf:
51:d3:fb:24:2b:f9:ec:37:86:9f:4c:4b:c9:fe:7f:6c:75:0b:
7e:26:47:7b:cb:fa:d7:4f:1b:05:af:12:7e:46:8f:8c:44:81:
44:03:47:73:fa:82:74:d0:a6:04:a9:6d:d4:26:ff:c6:8c:db:
c3:ba:d5:ae:93:27:54:6b:63:2d:22:a9:8b:f0:a4:96:dd:4a:
0c:9f:4c:dd:65:ed:3e:b8:a8:ee:e4:70:a9:ce:45:b7:90:07:
3a:5a:5d:f5:b6:92:ec:58:96:0e:af:0a:93:c2:da:4c:90:32:
c9:14:5a:6c:04:41:ed:d2:8f:2c:d8:dd:df:8a:48:36:33:60:
95:d8:53:71:d2:38:5e:a9:82:1c:f1:5b:cf:52:c6:a1:3d:05:
45:2c:b4:a8:79:ed:84:2e:39:fd:32:fb:c1:9e:87:28:2d:e0:
c8:35:b9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:30 2025 by rpki-client