Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/ZhM9fp384MTRn7QM41EKslEoSuM.roa
File: ZhM9fp384MTRn7QM41EKslEoSuM.roa (raw, json)
Hash identifier: whLvJ0vgzRqRw19xBD+jEKTaPu8AUsT43kikemRtWJc=
Subject key identifier: 66:13:3D:7E:9D:FC:E0:C4:D1:9F:B4:0C:E3:51:0A:B2:51:28:4A:E3
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 018CC42527B6BE1468C08D73BC11D82C13EC
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/ZhM9fp384MTRn7QM41EKslEoSuM.roa
Signing time: Mon 01 Jan 2024 08:30:18 +0000
ROA not before: Mon 01 Jan 2024 08:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58075
IP address blocks: 185.187.100.0/22 maxlen: 24
2a0a:47c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 05 Mar 2024 09:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:27:b6:be:14:68:c0:8d:73:bc:11:d8:2c:13:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Jan 1 08:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66133d7e9dfce0c4d19fb40ce3510ab251284ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:f0:ff:f5:3d:56:be:84:fa:db:ce:c4:69:
ce:08:0f:a2:f0:e6:66:38:88:be:ee:39:4d:dd:c4:
c6:73:de:5f:32:f8:4f:42:fc:28:57:45:1a:ae:e5:
f1:38:e8:40:cb:15:cc:89:b4:be:40:90:d0:d3:2e:
26:18:84:fe:a4:43:bf:49:27:df:95:bb:de:c9:56:
dd:68:4d:7b:3c:96:be:6e:72:9d:90:c1:56:ed:53:
ea:e5:c8:53:f3:2b:f2:58:50:b9:cc:bf:f8:8a:21:
7b:b5:21:f3:79:65:a6:2f:ae:db:e9:2f:be:19:bc:
1d:41:d5:53:ae:8b:c4:b5:f6:86:15:84:ac:62:36:
36:03:94:f6:7f:97:13:8b:0e:f5:88:11:1d:17:6b:
31:cd:c0:13:61:ad:7f:71:58:db:65:f5:51:63:47:
a5:14:5a:f6:54:0c:4d:5f:14:f3:7b:f2:53:00:16:
76:14:ae:73:1f:97:05:39:31:b0:9c:3f:d3:8c:31:
90:e1:61:a1:51:3b:08:09:c1:47:87:8e:5d:99:04:
b1:e5:1c:fd:3b:20:4c:54:9b:8b:83:59:4a:e6:fd:
1c:f1:0f:0b:5e:01:d9:f4:c6:8c:7c:ee:5e:7d:13:
00:9e:ea:be:67:de:95:71:07:72:97:12:d3:b0:da:
71:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:13:3D:7E:9D:FC:E0:C4:D1:9F:B4:0C:E3:51:0A:B2:51:28:4A:E3
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/ZhM9fp384MTRn7QM41EKslEoSuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.100.0/22
IPv6:
2a0a:47c0::/29
Signature Algorithm: sha256WithRSAEncryption
1e:35:13:25:b6:c5:e9:98:28:e9:a5:ee:78:6a:e5:00:e3:8f:
f3:31:65:64:8e:61:9b:82:f1:e1:ce:bd:76:b3:f6:40:bd:30:
b8:3a:c0:63:7a:45:c1:f7:01:f8:6b:a8:7b:41:aa:5c:2c:c1:
8b:47:bb:a3:e3:6f:3b:4f:55:13:28:21:05:46:a5:6a:5b:8f:
45:c4:6d:e5:ae:4c:b7:47:45:83:ce:54:07:02:87:4b:2e:63:
61:c1:cf:22:59:a6:c2:d3:f6:c8:f0:95:67:49:9e:5b:d8:ca:
a3:72:43:6b:90:de:5a:e8:d3:fa:91:d2:d2:c9:d1:aa:a1:f8:
7e:66:f4:03:11:c1:6b:22:c0:94:9b:40:4c:84:a7:8e:46:33:
3e:e8:fc:ca:5d:d8:22:36:80:a4:d0:3e:0d:b7:74:86:42:24:
17:1b:27:e3:cf:e8:d5:3d:f1:47:dd:f7:0c:73:8d:72:44:fe:
8f:29:76:cd:3c:6b:de:17:02:f0:37:1e:fd:47:6c:82:54:e9:
8c:61:5d:cc:b8:17:ba:0e:7c:a9:d4:30:ee:7e:03:e4:fb:47:
ef:c8:4a:d1:fb:e0:b4:f1:c1:2e:0e:3f:35:ec:68:d8:20:6b:
d8:04:28:d4:03:f8:f0:6d:34:92:23:eb:1a:5b:47:7e:28:8e:
2a:04:e1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 12:50:44 2024 by rpki-client on console-ams.rpki-client.org