Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ZmsCi-q_mgiOOlDKHanFfSp84Co.roa
File: ZmsCi-q_mgiOOlDKHanFfSp84Co.roa (raw, json)
Hash identifier: 0VdAurWujt5qDV6uVWpdOKTWE6ee+Ylk/d6hwAnFjT8=
Subject key identifier: 66:6B:02:8B:EA:BF:9A:08:8E:3A:50:CA:1D:A9:C5:7D:2A:7C:E0:2A
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018DC34A984AF09CA151FBBCAEC9BB40339D
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ZmsCi-q_mgiOOlDKHanFfSp84Co.roa
Signing time: Mon 19 Feb 2024 21:34:22 +0000
ROA not before: Mon 19 Feb 2024 21:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203511
IP address blocks: 2.56.108.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.151.2.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 21:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c3:4a:98:4a:f0:9c:a1:51:fb:bc:ae:c9:bb:40:33:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 19 21:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=666b028beabf9a088e3a50ca1da9c57d2a7ce02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0f:a2:54:bc:ff:b1:10:6a:a2:78:2f:60:79:
81:a5:33:7f:86:c8:97:2f:f1:9d:73:14:ab:44:33:
69:26:1f:29:18:55:7a:cb:68:cd:a4:62:f8:aa:65:
e1:7b:08:33:d6:ee:7c:a2:8e:cd:30:85:5c:ac:c4:
56:78:4f:c0:2c:2d:79:7c:1e:54:12:f2:65:af:b8:
5e:84:b6:ba:55:4e:2d:4d:27:d0:d5:f8:73:be:56:
cb:ed:53:b2:17:67:2c:fc:ce:49:b3:fc:41:c3:3b:
02:96:9d:50:59:67:73:08:99:4d:d7:f9:6c:91:fb:
47:ac:07:d9:b1:4c:26:da:f5:da:04:f4:d2:e2:d7:
b8:75:23:a3:10:83:e8:d9:3d:48:5a:fb:ae:71:3e:
9a:d2:cf:64:d6:2a:95:6a:da:89:55:6a:3b:38:6b:
00:16:84:c5:8f:4f:66:d6:67:d9:85:e5:7a:df:a3:
ae:88:79:77:d6:1e:77:78:61:01:75:ec:3f:7f:a6:
cb:75:ae:3c:e0:1e:3c:15:5a:0b:4d:79:d4:16:2b:
40:56:68:f9:2d:23:f6:49:48:66:c4:49:f2:e8:25:
a2:12:c1:95:e0:c9:58:06:df:3a:11:db:4a:bb:5a:
f2:92:00:11:40:a7:75:f2:76:7f:5f:03:e9:33:30:
de:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6B:02:8B:EA:BF:9A:08:8E:3A:50:CA:1D:A9:C5:7D:2A:7C:E0:2A
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ZmsCi-q_mgiOOlDKHanFfSp84Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/24
45.88.138.0/24
45.94.171.0/24
45.151.2.0/24
77.83.37.0/24
194.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:0a:a7:bd:75:37:5a:e2:b9:a0:52:7f:fd:54:04:b9:80:56:
00:23:cc:25:bd:7d:f2:01:c7:99:a7:bc:a1:95:88:e5:d2:bd:
ce:60:89:1f:5e:cc:37:f0:45:3b:c6:29:f0:24:c5:81:49:84:
3b:a1:20:1a:dd:b2:a0:11:bd:a6:eb:71:13:57:be:65:60:85:
64:7c:1f:ea:22:b4:d3:35:6b:c3:ad:d6:98:61:eb:79:8f:a7:
3c:07:e5:4e:dc:94:d8:9a:cd:55:e4:8c:f1:ab:53:82:4e:b2:
c0:a1:5e:27:4f:2c:a8:92:b1:6c:92:f1:1d:32:3a:81:90:5a:
70:f6:80:8d:30:c7:43:70:8e:7a:c5:49:a0:6b:fb:ac:cb:24:
e8:ae:80:db:6a:fe:77:6b:a3:55:31:a9:ee:57:b2:e1:fe:55:
b4:64:b2:46:54:04:fe:02:72:64:05:7d:0e:e6:f0:04:e0:16:
ea:34:a3:4e:90:02:75:87:36:f5:cd:ec:72:dc:04:df:89:b1:
88:98:d1:81:7a:f3:cd:41:a4:31:41:fa:4a:ca:d2:c9:b4:ef:
78:ba:8f:3a:2c:28:86:65:f2:30:38:0c:37:5b:8b:5f:8e:70:
4d:57:77:57:33:58:ff:13:bb:78:d6:13:0a:47:e5:fd:f7:84:
91:23:89:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 01:01:16 2024 by rpki-client on console-fra.rpki-client.org