Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/ZjooexbXHuwsfWAYEYb0Stuzeag.roa
File: ZjooexbXHuwsfWAYEYb0Stuzeag.roa (raw, json)
Hash identifier: 4J1FSAELzgJVctOC02cuoetZNoxbHIr4rw1x+rqg9B4=
Subject key identifier: 66:3A:28:7B:16:D7:1E:EC:2C:7D:60:18:11:86:F4:4A:DB:B3:79:A8
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018FB057E9FBB1EC5C699E0E0D5B85B532F8
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/ZjooexbXHuwsfWAYEYb0Stuzeag.roa
Signing time: Sat 25 May 2024 15:21:42 +0000
ROA not before: Sat 25 May 2024 15:21:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216271
IP address blocks: 185.168.28.0/22 maxlen: 22
185.201.136.0/22 maxlen: 22
2a06:cac0::/29 maxlen: 29
2a0a:e2c0::/29 maxlen: 29
2a0f:d480::/29 maxlen: 29
2a11:2f40::/29 maxlen: 29
2a11:3b40::/29 maxlen: 29
2a11:7240::/29 maxlen: 29
2a11:9600::/29 maxlen: 29
2a11:f140::/29 maxlen: 29
2a11:f240::/29 maxlen: 29
2a12:440::/29 maxlen: 29
2a12:6640::/29 maxlen: 29
2a12:6740::/29 maxlen: 29
2a12:6f40::/29 maxlen: 29
2a12:7740::/29 maxlen: 29
2a12:8ec0::/29 maxlen: 29
2a12:ccc0::/29 maxlen: 29
2a12:e240::/29 maxlen: 29
2a12:f0c0::/29 maxlen: 29
2a14:c0::/29 maxlen: 29
2a14:140::/29 maxlen: 29
2a14:1c0::/29 maxlen: 29
2a14:800::/29 maxlen: 29
2a14:f40::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 26 May 2024 15:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b0:57:e9:fb:b1:ec:5c:69:9e:0e:0d:5b:85:b5:32:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: May 25 15:21:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=663a287b16d71eec2c7d60181186f44adbb379a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:32:32:f1:d2:3a:b9:14:00:76:c1:00:70:9a:
95:1c:95:3e:80:00:3b:27:84:4f:82:86:9c:8f:08:
18:c3:07:8b:2d:2f:41:e3:a6:17:98:55:23:01:11:
3e:4b:ef:2c:b7:8a:e6:a1:fa:85:ef:50:1c:f2:e9:
7b:6a:f7:29:35:e6:5f:b2:14:f1:23:2f:bd:b7:73:
80:23:89:98:63:fb:32:8a:51:a7:65:4c:2e:9b:24:
6c:19:e0:ad:28:cc:d7:59:a7:8a:be:68:78:d8:e4:
66:3b:4b:10:b6:4a:02:cd:e5:86:19:d3:19:2f:91:
96:82:d3:d1:e0:47:6e:57:77:44:1c:52:83:9e:91:
5d:4d:76:4c:23:ce:18:09:f8:8f:dc:de:9f:f0:b7:
68:42:4a:54:12:e3:0a:1b:1a:d4:1d:4a:bf:13:cc:
9d:9a:74:91:7a:de:80:fd:9b:ac:48:a1:1f:cc:68:
f6:58:48:f5:4f:9d:f3:75:a2:95:b5:4b:2a:f8:86:
b6:28:3e:62:74:e4:5e:9c:ef:06:99:a9:16:12:73:
dd:6d:e3:04:eb:83:2e:8b:9c:39:25:d2:23:4f:b6:
6e:e9:54:f4:ea:d3:c5:1d:8d:94:75:3e:0a:c8:b8:
94:e2:da:85:ab:d0:f8:b2:ea:a6:52:39:b2:62:48:
7e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3A:28:7B:16:D7:1E:EC:2C:7D:60:18:11:86:F4:4A:DB:B3:79:A8
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/ZjooexbXHuwsfWAYEYb0Stuzeag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.28.0/22
185.201.136.0/22
IPv6:
2a06:cac0::/29
2a0a:e2c0::/29
2a0f:d480::/29
2a11:2f40::/29
2a11:3b40::/29
2a11:7240::/29
2a11:9600::/29
2a11:f140::/29
2a11:f240::/29
2a12:440::/29
2a12:6640::/29
2a12:6740::/29
2a12:6f40::/29
2a12:7740::/29
2a12:8ec0::/29
2a12:ccc0::/29
2a12:e240::/29
2a12:f0c0::/29
2a14:c0::/29
2a14:140::/29
2a14:1c0::/29
2a14:800::/29
2a14:f40::/29
Signature Algorithm: sha256WithRSAEncryption
9e:cc:b8:48:3a:61:b6:98:67:69:1d:32:10:99:2c:89:6e:d7:
3b:48:a2:d3:81:1c:9b:ac:05:66:32:38:16:52:5e:5d:25:23:
e5:7d:12:79:33:5b:ce:17:83:fc:7a:80:1e:6e:d7:f9:c2:c7:
46:cb:1d:bf:03:63:98:8f:78:d5:27:8c:31:56:be:9e:29:86:
2f:ba:6b:97:d8:2b:99:37:b0:fb:3e:a6:0e:44:98:be:56:85:
17:18:fa:e4:a3:5d:05:b1:50:e0:0c:06:94:da:5e:15:23:2e:
00:e3:d2:2c:5d:fc:26:44:a7:cc:f7:1c:de:34:02:f9:2c:1d:
ff:13:17:ae:49:55:0a:77:72:3f:37:23:97:a6:2a:0b:c8:5a:
35:e0:82:78:55:e6:4f:75:42:07:71:1e:9b:5b:a0:87:c2:1c:
cd:81:b9:14:f7:a9:45:fa:53:a4:32:d6:81:f7:ae:41:26:ec:
20:60:44:e4:cb:4a:9e:3d:35:42:c1:36:a7:ff:c6:9d:4a:2f:
0c:c1:8c:b3:cc:cd:b0:6c:98:5e:72:a3:6d:59:00:65:ad:47:
7a:8e:ba:73:88:56:be:1a:9e:25:e1:d1:c3:06:53:21:fb:8b:
aa:1b:c3:51:d4:74:4f:f3:ea:14:8e:ba:03:ff:b4:36:06:8d:
a0:32:6d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:38 2024 by rpki-client on console-fra.rpki-client.org