Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/ZGZOvUtmiMzalAFsproNAidbDLc.roa
File: ZGZOvUtmiMzalAFsproNAidbDLc.roa (raw, json)
Hash identifier: zLTX+cW9o9vHdgqseHbmJ2ruTMCm+uH3zGYYCpA3KiA=
Subject key identifier: 64:66:4E:BD:4B:66:88:CC:DA:94:01:6C:A6:BA:0D:02:27:5B:0C:B7
Certificate issuer: /CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Certificate serial: 018CC3B729AB4D5B336C8B41B86E8F1000AC
Authority key identifier: ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/ZGZOvUtmiMzalAFsproNAidbDLc.roa
Signing time: Mon 01 Jan 2024 06:30:10 +0000
ROA not before: Mon 01 Jan 2024 06:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207867
IP address blocks: 45.159.104.0/23 maxlen: 23
45.159.104.0/24 maxlen: 24
45.159.104.0/22 maxlen: 24
45.159.105.0/24 maxlen: 24
45.159.107.0/24 maxlen: 24
188.68.191.0/24 maxlen: 24
188.68.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:29:ab:4d:5b:33:6c:8b:41:b8:6e:8f:10:00:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Validity
Not Before: Jan 1 06:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64664ebd4b6688ccda94016ca6ba0d02275b0cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c7:20:e2:af:6c:05:68:10:2f:75:44:04:eb:
ff:25:f4:22:70:fe:f6:44:4e:bd:57:a8:cb:9c:c1:
47:db:7e:ab:c7:55:73:15:ff:7f:f0:b5:2c:b5:9d:
f5:40:6b:c2:1d:9b:06:b5:e5:69:93:bb:61:92:19:
4d:59:23:35:bc:8b:16:30:b3:62:b0:ea:d9:b6:d7:
68:e9:75:60:0b:a5:e0:db:2e:e1:3a:b9:c9:70:a6:
48:6b:e9:0e:70:e8:6e:a7:30:60:0f:97:50:cb:ae:
59:72:ec:d9:fb:a7:33:40:17:7b:58:e3:f5:cc:f4:
59:42:25:a4:1d:74:66:62:ce:ab:2a:68:44:ed:ee:
dd:f0:ec:e0:6f:54:d5:85:11:dd:ce:7d:9a:29:35:
2d:d0:ee:a4:1b:e5:3a:6e:c6:f6:5c:d2:06:54:e5:
b1:63:1d:28:cb:9e:07:60:a1:d8:e1:92:32:d1:de:
3c:f7:92:12:46:1d:28:e3:87:bf:47:2b:5e:b4:aa:
2d:5d:0b:3d:ed:e5:d2:30:42:d6:0c:32:3f:d8:c6:
8b:80:47:4f:98:92:ed:b0:9f:67:04:de:6b:0a:7e:
bc:0c:a2:3e:b3:9f:ed:b1:bd:4b:e8:ca:b5:ad:92:
57:9f:05:e0:20:74:98:f4:4e:e8:2f:3b:52:e0:7f:
32:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:66:4E:BD:4B:66:88:CC:DA:94:01:6C:A6:BA:0D:02:27:5B:0C:B7
X509v3 Authority Key Identifier:
keyid:ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/ZGZOvUtmiMzalAFsproNAidbDLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.104.0/22
188.68.188.0/24
188.68.191.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:0f:74:9b:3e:b4:bb:e4:69:1f:c5:11:48:44:30:b0:30:fa:
f5:73:b5:03:f7:45:c6:c4:f0:8e:4f:c5:a0:7d:25:60:b4:a1:
ae:c9:3e:0e:9d:1c:f7:1a:ed:11:62:b4:86:2c:64:84:1a:5e:
12:b7:35:bb:f5:d5:bf:4b:36:04:fa:5f:1b:13:70:df:79:b7:
ca:7c:fa:d1:a1:67:0b:a8:28:be:77:88:ed:1d:1f:02:20:af:
b6:7a:ba:9d:5a:18:45:5c:4e:cb:fc:86:b2:11:8d:be:73:cd:
8c:bc:8a:b2:3c:e8:d2:ba:32:e3:5c:ff:61:a5:09:45:2c:76:
06:09:a5:86:0c:85:21:c7:03:50:71:9b:de:c7:88:51:17:67:
0b:81:e2:33:a8:d0:93:69:9b:e9:da:47:d7:67:c1:f3:34:53:
48:87:8d:96:f9:cc:2e:12:fc:d1:aa:07:8f:7d:6b:c5:bf:72:
9e:fd:8a:79:08:f3:c2:78:9e:4c:c7:c3:b1:72:2f:42:ae:4c:
8a:23:c2:ae:21:36:c8:de:e9:2b:88:de:c1:b0:e1:18:9e:a6:
2a:20:cf:06:d9:a9:84:ad:a7:ff:14:28:5d:ba:2a:00:9f:fa:
5c:a8:ce:23:c7:9c:c8:21:6a:a5:de:31:63:6f:89:e2:59:4b:
3f:d4:d3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:17:17 2025 by rpki-client