Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/ZBuTpuFRIG0nP4YgtxeEome0fFw.roa
File: ZBuTpuFRIG0nP4YgtxeEome0fFw.roa (raw, json)
Hash identifier: pSTuvKnIe8bN1yQbhlRSlnk3ovFdKprLodFHNqb7J3w=
Subject key identifier: 64:1B:93:A6:E1:51:20:6D:27:3F:86:20:B7:17:84:A2:67:B4:7C:5C
Certificate issuer: /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Certificate serial: 018CC94ADFBBD80BE73C7E84AE017CC2E907
Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/ZBuTpuFRIG0nP4YgtxeEome0fFw.roa
Signing time: Tue 02 Jan 2024 08:29:36 +0000
ROA not before: Tue 02 Jan 2024 08:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49025
IP address blocks: 185.111.108.0/22 maxlen: 24
95.173.200.0/21 maxlen: 21
95.173.204.0/22 maxlen: 22
95.173.208.0/21 maxlen: 21
95.173.216.0/21 maxlen: 21
185.2.40.0/22 maxlen: 22
2a02:a48:f000::/36 maxlen: 36
2a06:5d80::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 19 Jan 2024 09:09:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:df:bb:d8:0b:e7:3c:7e:84:ae:01:7c:c2:e9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Validity
Not Before: Jan 2 08:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=641b93a6e151206d273f8620b71784a267b47c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1b:b7:63:69:f5:d3:0f:a3:58:0a:1a:f8:57:
5b:4e:d4:5c:aa:69:d0:bc:7d:7a:51:e6:bc:46:2a:
2b:16:45:ab:9e:b7:aa:23:67:63:3c:93:8f:2e:8d:
60:26:06:be:58:b9:4e:c6:5b:c4:f4:c7:9a:32:ef:
d5:fb:f8:1a:63:d1:c5:03:2c:48:b1:98:f7:1b:cd:
0f:0d:22:f4:8a:fc:f8:d6:8b:46:95:76:35:53:ff:
3d:1c:a8:d3:75:76:81:e6:41:9f:29:63:fd:b2:b4:
c9:be:82:c5:d3:64:b3:27:15:63:bc:8b:e8:65:2e:
c4:fb:d5:48:91:75:36:1a:f0:59:fe:64:97:4c:ed:
b1:c5:b3:a3:12:11:e9:05:e7:0d:4e:b9:fe:10:37:
1f:c9:42:0b:70:32:a2:e3:91:4f:15:93:20:86:fa:
a5:02:2a:e5:c0:fa:ed:7c:f9:9d:14:15:43:e5:1c:
64:ec:dc:1e:49:d8:a5:57:3e:3f:97:ff:1d:94:32:
de:3c:96:a1:f0:bd:f1:b3:5b:de:de:7e:d2:64:dd:
b5:54:9f:82:32:27:e9:ce:2c:af:f7:fb:a7:fa:27:
5f:cf:d6:d6:9e:c1:21:59:ee:83:02:4d:e6:b0:2b:
54:04:c0:74:be:a3:5b:20:0f:db:ca:9c:c6:3f:dd:
eb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1B:93:A6:E1:51:20:6D:27:3F:86:20:B7:17:84:A2:67:B4:7C:5C
X509v3 Authority Key Identifier:
keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/ZBuTpuFRIG0nP4YgtxeEome0fFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.173.200.0-95.173.223.255
185.2.40.0/22
185.111.108.0/22
IPv6:
2a02:a48:f000::/36
2a06:5d80::/32
Signature Algorithm: sha256WithRSAEncryption
1e:05:39:a8:c6:df:bd:88:c3:15:1a:d2:ab:76:1d:8e:51:9d:
9d:52:81:e9:d9:30:b6:89:54:cb:f9:7b:23:58:3a:af:c2:a9:
9b:6a:bf:14:6b:8c:dd:d7:ac:16:bf:53:72:7c:a7:ee:16:72:
44:9e:97:db:bf:eb:ec:c6:74:08:ca:a1:d2:ac:fb:48:39:5f:
b0:6e:15:0b:bb:99:62:4e:8f:a2:d3:9d:54:bf:91:ab:92:08:
8b:d5:06:fe:a3:1b:ef:fa:4b:8c:c8:7c:93:a2:4a:a7:36:a5:
74:db:ba:1f:49:95:e1:0e:98:e4:1e:e2:b1:c6:8f:cf:d4:0a:
2a:e1:4f:0d:43:7b:ae:97:27:4c:97:bc:d8:be:b8:50:16:3c:
06:1d:71:c5:18:51:c5:58:c2:22:be:da:77:45:c8:22:54:c4:
93:83:6f:f9:71:44:b1:d9:da:11:e5:b1:31:2a:c3:14:f1:2f:
e9:39:7b:10:e6:81:f6:6a:c3:16:b9:27:a0:d2:89:66:5b:75:
39:54:83:f8:94:13:86:45:98:7a:9c:2f:7c:97:44:30:aa:81:
88:b7:33:a4:5d:f8:79:66:5f:df:27:5a:9c:22:63:e8:91:71:
75:28:28:4d:7a:10:61:15:f3:db:22:fb:09:94:1c:44:8f:d1:
16:18:82:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 19 12:48:38 2024 by rpki-client on console-ams.rpki-client.org