Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/zYGeRSYZgj_sjsNUrvhha5257WU.roa
File: zYGeRSYZgj_sjsNUrvhha5257WU.roa (raw, json)
Hash identifier: lUnB66wvMdqZjsQy9/5946xctOMpf/m2l0t/99Fu7/8=
Subject key identifier: CD:81:9E:45:26:19:82:3F:EC:8E:C3:54:AE:F8:61:6B:9D:B9:ED:65
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 018CC7954BBB14D114DD4E57048F224F69E2
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/zYGeRSYZgj_sjsNUrvhha5257WU.roa
Signing time: Tue 02 Jan 2024 00:31:39 +0000
ROA not before: Tue 02 Jan 2024 00:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.33.92.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 02:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:4b:bb:14:d1:14:dd:4e:57:04:8f:22:4f:69:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Jan 2 00:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd819e452619823fec8ec354aef8616b9db9ed65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8b:d5:1d:ae:b7:71:d0:fa:0d:03:ea:07:b8:
36:e5:08:5f:a7:25:0b:41:0b:93:ea:74:f2:c3:a1:
24:2a:03:75:a3:c2:d2:3f:3f:ac:cc:fb:d8:80:bb:
9c:3d:13:b1:cf:5d:f8:72:6e:fe:d4:93:ce:aa:8e:
ea:e7:8c:d9:3b:76:59:92:a5:c2:a4:bb:54:38:06:
c5:28:c8:b5:c4:e9:68:a5:fa:83:37:3e:6e:d9:9b:
64:fe:8f:e3:82:c4:c6:93:7e:49:b8:ae:6d:10:f5:
1e:f1:6e:b5:b5:63:4f:89:30:13:ff:40:b6:37:ad:
a6:c2:6a:01:a3:ab:59:06:7f:dc:e1:d6:50:25:b1:
d0:24:a2:61:24:24:e8:c7:11:f4:d5:6a:31:b3:38:
b9:58:ba:84:06:dd:64:29:16:9c:e6:05:f2:62:a3:
b3:2b:85:6a:df:70:7d:c5:8a:5c:41:9b:7f:c9:ee:
21:ad:fd:0e:ac:0f:b9:77:a5:ed:98:5f:79:f0:39:
d4:19:95:75:de:4a:1b:2e:fb:58:8c:69:2f:5f:ce:
a6:89:d8:c3:49:29:75:1d:e9:14:f1:1d:c6:f6:4d:
8f:b6:ab:8d:38:58:56:b8:29:43:f7:52:ef:9b:12:
80:33:9f:f3:bd:93:39:37:8e:f0:18:3d:d1:97:81:
13:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:81:9E:45:26:19:82:3F:EC:8E:C3:54:AE:F8:61:6B:9D:B9:ED:65
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/zYGeRSYZgj_sjsNUrvhha5257WU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.92.0/23
Signature Algorithm: sha256WithRSAEncryption
63:93:eb:3a:5d:17:ae:a9:23:5a:0f:46:77:c3:ca:6c:24:9c:
91:a8:07:89:0d:32:3c:dc:61:fd:8a:67:a0:29:82:51:f4:b6:
d3:a2:86:c6:be:33:6c:d7:8f:9d:62:f1:c0:c1:b2:5c:0b:ab:
b1:5a:3d:c6:b1:c1:fc:69:d1:8f:7e:5a:0b:07:c1:d3:79:6a:
0d:b6:47:7f:a0:0e:0b:c3:cd:96:07:1a:00:c3:07:ae:62:5e:
1e:af:12:95:7e:05:4d:fb:a9:80:e8:ac:91:7f:66:43:7d:ae:
67:fe:08:5a:d0:f4:6e:69:da:6f:7f:e5:ed:ed:96:2c:f5:7a:
eb:46:94:9a:8b:41:de:37:cf:b3:f3:cc:ae:9d:a1:35:1a:d3:
64:ee:3a:6a:5c:60:7a:05:3f:4b:7e:6e:e8:1f:84:46:f7:a8:
c8:e4:47:a1:cd:76:b2:ca:ac:c6:d9:e3:52:b2:b5:35:b0:93:
54:ed:c3:88:ee:bb:46:19:62:83:6d:0f:f5:94:d5:67:1a:e1:
9f:ee:a7:1b:be:c6:ba:cc:e7:b7:52:db:0d:d9:e1:4e:a1:ca:
e3:e1:2f:98:95:c6:14:57:a6:b1:19:e1:f7:f2:c4:1c:3f:22:
ec:80:4c:20:1a:6e:ab:8f:60:ba:84:13:c1:b0:cc:82:68:5a:
ba:12:16:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:43 2025 by rpki-client