Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/zekZ1gvDf0ZGIey952RPQH-h8qk.roa
File: zekZ1gvDf0ZGIey952RPQH-h8qk.roa (raw, json)
Hash identifier: 1bwOfM7d2REHaH0+fpR8rxySjr/FlGpkP/knvPqfLog=
Subject key identifier: CD:E9:19:D6:0B:C3:7F:46:46:21:EC:BD:E7:64:4F:40:7F:A1:F2:A9
Certificate issuer: /CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Certificate serial: 0191C1CADB7FB8FF80AC5B98D886B13CD430
Authority key identifier: 6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/zekZ1gvDf0ZGIey952RPQH-h8qk.roa
Signing time: Thu 05 Sep 2024 10:46:22 +0000
ROA not before: Thu 05 Sep 2024 10:46:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49371
IP address blocks: 185.124.12.0/24 maxlen: 24
185.124.13.0/24 maxlen: 24
185.124.14.0/24 maxlen: 24
185.124.15.0/24 maxlen: 24
185.236.28.0/22 maxlen: 22
2a03:9000:200::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:25:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c1:ca:db:7f:b8:ff:80:ac:5b:98:d8:86:b1:3c:d4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Validity
Not Before: Sep 5 10:46:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cde919d60bc37f464621ecbde7644f407fa1f2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:17:73:eb:9c:d6:d5:d7:9d:e1:fd:95:36:
6f:81:69:53:fe:db:73:eb:1f:da:90:1f:5c:e0:ee:
9b:96:9f:3e:51:28:f5:59:1c:08:e9:e1:26:48:96:
bb:a5:a0:4f:03:e2:96:e7:cd:d8:ec:54:28:8a:bd:
fb:ef:77:42:b3:a8:00:52:da:86:c9:69:44:64:db:
bb:d8:a0:3a:71:29:dc:10:0f:0d:52:9d:cd:80:7b:
c0:b2:42:da:7f:25:d6:ec:15:e4:bc:70:9a:39:a6:
00:a6:48:b3:7e:2a:95:4d:01:d9:7f:72:c4:92:6d:
f9:e1:bc:0c:5a:0f:e3:85:95:a7:3f:3e:54:33:ca:
e6:ba:b0:f4:dc:52:c5:04:6c:60:55:9e:4f:f3:a3:
1e:94:9e:cc:ac:9b:4c:86:0e:31:2b:b5:9a:58:07:
4c:7a:d1:3b:aa:ef:d3:48:7f:a6:27:d5:4a:ee:6b:
aa:97:39:c6:dc:76:d9:f3:3e:39:82:92:05:65:88:
f4:51:28:39:3f:a1:de:e4:0e:7d:b9:a3:c2:e5:ee:
ff:3a:50:31:df:60:9a:f2:bb:ab:74:6b:5e:1f:c2:
86:6f:c0:ad:88:e3:6f:9a:1f:d4:4a:93:27:18:09:
87:42:aa:a9:a1:7d:4a:ca:d2:91:ba:1b:72:bf:03:
5c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E9:19:D6:0B:C3:7F:46:46:21:EC:BD:E7:64:4F:40:7F:A1:F2:A9
X509v3 Authority Key Identifier:
keyid:6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/zekZ1gvDf0ZGIey952RPQH-h8qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.12.0/22
185.236.28.0/22
IPv6:
2a03:9000:200::/40
Signature Algorithm: sha256WithRSAEncryption
94:db:4f:76:67:9c:5b:5b:08:68:e2:a1:3b:69:81:97:15:48:
23:6b:68:ee:2f:ef:9f:76:61:59:0d:ad:b1:4a:ba:38:cb:52:
67:6b:c8:47:0a:c4:a9:e4:88:e0:08:da:77:34:93:3a:56:d5:
6d:bc:31:33:ce:f6:72:76:ab:cf:a9:a9:24:7f:af:0b:f7:b6:
cb:28:85:4b:2c:21:5a:7d:a4:1c:ed:4e:5b:f1:13:49:3d:d5:
07:2e:ee:79:cf:7a:60:1a:33:9f:79:fb:8a:fc:05:78:45:e3:
74:a1:b3:31:b8:d6:b1:bf:8b:bf:19:50:b2:8d:00:8e:e2:83:
b6:6a:99:70:6d:8f:2d:48:ad:a9:91:96:12:8e:76:d7:33:d1:
ac:4d:a0:f8:ec:b5:23:6b:be:67:7a:3a:4b:f4:70:45:02:7c:
cf:0c:36:59:15:9b:52:2a:d0:02:39:81:ad:b5:e1:2a:64:1a:
76:9f:9b:88:e3:fb:26:2c:f7:42:a1:8a:5c:dc:dd:72:b3:e0:
98:fc:ae:3f:19:f5:04:ca:57:2b:82:f2:bb:f4:b7:b0:78:e9:
01:61:46:43:4c:31:ea:8f:58:ee:f3:2b:d9:9f:33:4a:f2:97:
e8:64:97:c2:ea:60:63:19:8b:6f:90:c1:37:9b:df:af:db:a1:
64:fe:46:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 12:52:17 2024 by rpki-client on console-fra.rpki-client.org