Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/ZadojbHSz5WtFj2ocxBBhwgdXr4.roa
File: ZadojbHSz5WtFj2ocxBBhwgdXr4.roa (raw, json)
Hash identifier: 18CY+dPefp+rvy7NI9G89gbNNd3PnY3+hYU0kZxBf2w=
Subject key identifier: 65:A7:68:8D:B1:D2:CF:95:AD:16:3D:A8:73:10:41:87:08:1D:5E:BE
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 018F29843AA80DD179526C859D9DB1525F36
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/ZadojbHSz5WtFj2ocxBBhwgdXr4.roa
Signing time: Mon 29 Apr 2024 11:01:22 +0000
ROA not before: Mon 29 Apr 2024 11:01:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 62.100.216.0/22 maxlen: 24
185.89.251.0/24 maxlen: 24
193.239.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 05:28:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:29:84:3a:a8:0d:d1:79:52:6c:85:9d:9d:b1:52:5f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Apr 29 11:01:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65a7688db1d2cf95ad163da873104187081d5ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:9e:28:ba:58:09:d0:0d:68:9e:31:ee:64:
64:9c:32:61:7e:62:f5:ec:fc:7e:ce:4b:dd:83:62:
74:0f:5d:84:6c:e9:8c:1a:65:be:d7:31:c2:b0:0e:
16:c9:02:d1:c0:f8:0f:ed:6a:d1:d7:fa:7d:12:07:
ab:a0:ff:e4:f4:42:98:3c:89:bc:30:68:d4:2c:ea:
41:95:b9:d7:e4:2b:24:bb:19:0d:5b:db:82:e6:79:
33:00:03:a3:ec:ae:da:ab:d7:37:08:e2:2c:99:47:
75:75:6a:38:b9:13:eb:3b:de:52:41:fa:51:f8:79:
78:b4:33:73:f3:e0:52:04:37:b4:b9:7b:b5:3a:79:
0c:a9:2d:2f:05:26:94:2e:34:1e:77:b4:f4:d1:c0:
ef:3b:ad:5f:cf:14:7c:58:bb:e1:0a:90:c6:42:6e:
51:b4:f1:08:a6:21:86:4a:39:cf:12:b2:c3:69:7d:
24:7d:46:32:83:76:3b:51:1e:4a:de:7e:1e:15:ff:
44:f8:e1:da:fd:97:51:3f:0f:16:cc:4d:4b:ce:60:
cd:25:c8:83:15:7e:cb:cd:b2:54:61:47:e0:85:04:
1b:67:ae:19:db:3b:41:21:50:a6:7a:36:2c:c7:7f:
3e:24:e8:39:03:f2:9f:ee:16:c4:34:0e:32:6b:3b:
7f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A7:68:8D:B1:D2:CF:95:AD:16:3D:A8:73:10:41:87:08:1D:5E:BE
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/ZadojbHSz5WtFj2ocxBBhwgdXr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.216.0/22
185.89.251.0/24
193.239.146.0/23
Signature Algorithm: sha256WithRSAEncryption
88:3e:e8:cc:09:ea:a1:72:76:e4:0e:f1:bf:2f:4a:d5:ce:07:
98:1d:aa:ad:cc:8b:4c:5d:f5:bf:ca:7e:20:63:cb:09:a8:ad:
76:84:1e:3f:05:01:22:39:b0:62:49:f8:57:ef:06:fd:71:07:
fc:4a:b2:ba:03:40:63:99:6f:63:37:ac:dd:4e:9c:6d:89:5a:
28:85:56:d7:c2:f2:9b:a6:af:64:45:7e:81:87:83:da:a8:63:
f1:78:46:5b:2a:eb:f5:22:02:bc:17:87:ca:12:2d:7d:69:5e:
81:35:ae:d5:08:25:39:8a:ab:87:5e:9b:5d:ab:1b:7c:7f:59:
7e:d1:8b:0a:32:b0:8b:1f:a7:3e:44:74:76:2b:20:b1:51:5e:
2f:3f:df:4d:35:f2:b6:a7:eb:be:b6:cd:4a:b9:19:c5:e4:76:
0d:db:99:72:03:1d:bb:4a:38:ea:1e:83:ce:86:98:6b:e5:87:
54:16:46:11:ec:bd:95:49:f0:25:c9:74:fe:4c:bb:c6:5c:74:
06:dd:c2:44:63:66:6e:60:1d:0d:83:8d:13:31:af:0c:23:cd:
05:c5:4c:12:40:0a:ed:f9:32:46:ae:18:1f:cf:d4:71:47:07:
12:98:84:6f:21:10:0f:cc:11:c0:4f:e9:80:34:90:48:22:70:
49:a9:d8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 06:22:40 2024 by rpki-client on console-ams.rpki-client.org