Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ZNuCX3Iyxsy5CJlCCCVh3vkbGt8.roa
File: ZNuCX3Iyxsy5CJlCCCVh3vkbGt8.roa (raw, json)
Hash identifier: mhMf/RJ/zQhqlgargmEAptzZl9869/VMSjvqMPg3kPE=
Subject key identifier: 64:DB:82:5F:72:32:C6:CC:B9:08:99:42:08:25:61:DE:F9:1B:1A:DF
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019422FBC64C0B98579B699E174DB1C77591
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ZNuCX3Iyxsy5CJlCCCVh3vkbGt8.roa
Signing time: Wed 01 Jan 2025 17:48:32 +0000
ROA not before: Wed 01 Jan 2025 17:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214943
IP address blocks: 195.177.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Jan 2025 15:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c6:4c:0b:98:57:9b:69:9e:17:4d:b1:c7:75:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 1 17:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64db825f7232c6ccb9089942082561def91b1adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:92:21:d5:ad:37:14:17:1b:c2:03:bf:3d:
31:f4:0b:8a:23:2d:e2:ba:fa:22:f1:c1:77:4d:5b:
65:73:5c:e5:dd:a5:eb:c1:a6:91:dc:2e:6b:91:42:
1b:82:0e:cf:03:70:9c:b9:4e:3c:cd:be:81:21:e6:
87:17:f1:83:76:21:8e:49:46:f0:66:43:83:43:7d:
c5:6d:58:cb:b0:72:64:ae:b9:e1:9f:48:ed:13:46:
39:39:d9:a7:d9:f9:4f:33:6a:f0:13:c6:da:b9:c2:
f9:70:c2:dc:cf:d9:de:40:01:98:ed:df:7a:e4:16:
99:46:85:c3:b4:6c:88:ca:a6:b5:4a:ab:e3:f1:f5:
16:25:c0:1e:8e:3e:bb:bc:ca:60:f9:3e:96:2f:17:
a9:62:a1:c0:db:82:d2:f5:a2:80:50:fd:82:73:51:
71:2e:a2:86:f3:83:d4:0e:ce:6c:94:34:ed:74:27:
5d:48:18:42:56:9a:09:e8:59:17:3c:e6:07:2e:5c:
d5:95:11:cf:4e:33:9c:36:f8:5b:71:71:3a:09:62:
37:ab:7b:4e:d5:9e:41:df:1a:eb:57:f3:d4:0d:76:
0e:95:d2:8d:9d:72:f4:7e:f7:fa:91:82:91:9e:d7:
3a:b9:95:7e:c7:e6:d1:5d:cb:fc:ab:d0:c5:91:50:
b8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DB:82:5F:72:32:C6:CC:B9:08:99:42:08:25:61:DE:F9:1B:1A:DF
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ZNuCX3Iyxsy5CJlCCCVh3vkbGt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.92.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ad:ec:b6:6d:ad:43:9f:89:f4:31:15:48:15:db:a7:4b:3e:
9e:2d:30:34:a9:83:a0:7f:df:0a:bd:52:fc:12:4f:96:61:f9:
b2:9d:e6:ab:41:0f:d8:59:a5:a6:08:37:16:c5:d6:dd:4d:a4:
84:62:74:af:8e:65:75:1b:09:de:fe:23:17:cc:9d:08:c0:ff:
66:cb:3c:d5:93:92:2d:76:76:77:5e:a0:ea:5a:5e:ee:91:e3:
6d:3b:1e:c4:94:f5:b9:a5:c3:5b:8b:3e:5f:34:11:e7:36:5b:
ac:d3:ea:71:21:da:65:fc:b0:cc:e5:a6:1d:29:ce:3c:e5:d5:
41:3d:b1:51:ae:a2:bb:2e:d0:a6:ec:2b:28:67:63:d4:9c:93:
c8:cc:71:87:a6:9e:de:f5:e0:a4:74:8d:58:2b:69:b2:13:62:
39:1c:be:f2:52:d9:da:c9:33:24:52:2b:7e:22:4e:c2:b8:0e:
ff:90:41:d9:11:7c:7f:97:46:58:bf:41:96:b0:1e:17:69:8d:
49:f1:1c:70:7a:4c:2b:84:82:33:9b:a8:60:18:97:0c:51:23:
83:b0:4d:88:1a:55:45:69:f9:d1:90:55:a5:b7:b7:41:8e:9d:
5c:b5:54:69:59:a2:dc:c3:1a:87:39:69:58:3d:5e:da:7a:86:
04:57:cb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:46:25 2025 by rpki-client