Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zwPwvFnznvdbDW_I54Dm9yGh6Rw.roa
File: zwPwvFnznvdbDW_I54Dm9yGh6Rw.roa (raw, json)
Hash identifier: ftMBjJzVFUeT9cN0Wntzzg6tuba0ExD94t1sH2ZYCsA=
Subject key identifier: CF:03:F0:BC:59:F3:9E:F7:5B:0D:6F:C8:E7:80:E6:F7:21:A1:E9:1C
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018BFE5BF6B68128C6980A498138E884A124
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zwPwvFnznvdbDW_I54Dm9yGh6Rw.roa
Signing time: Thu 23 Nov 2023 22:45:21 +0000
ROA not before: Thu 23 Nov 2023 22:45:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142594
IP address blocks: 2.56.166.0/24 maxlen: 24
194.56.225.0/24 maxlen: 24
185.234.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fe:5b:f6:b6:81:28:c6:98:0a:49:81:38:e8:84:a1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Nov 23 22:45:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf03f0bc59f39ef75b0d6fc8e780e6f721a1e91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:04:27:ff:60:2f:e3:76:fc:f4:f8:91:34:5d:
b2:59:b2:89:b2:06:02:0f:75:3a:45:82:ec:fc:8a:
96:ea:6f:57:ab:81:98:53:5f:73:8e:0d:d7:40:67:
55:13:12:03:10:b7:4e:b8:4a:aa:ec:4b:0f:34:5b:
c8:bf:91:e1:aa:e0:85:c7:16:5e:55:cd:45:da:81:
49:b3:de:06:8d:10:09:b4:b5:bb:e4:c5:a3:fe:79:
fe:d3:1d:ea:97:0e:95:ae:1e:db:76:54:b7:6b:4b:
c7:c6:16:63:ff:06:46:57:11:10:ef:82:ab:d4:c8:
2f:11:90:e8:17:9d:0c:6b:ab:6f:fc:36:c9:45:c9:
e7:5e:8a:28:19:70:7a:15:4b:a0:32:b8:90:68:d7:
78:e3:4e:36:8a:a1:c2:1f:68:73:cd:bb:79:a6:44:
8d:b4:88:35:df:f0:e4:48:6e:7b:95:18:54:3b:52:
40:47:ff:b7:0c:16:97:ea:b8:69:87:ac:67:1b:35:
16:da:9c:15:47:74:83:5d:bf:ea:a3:44:0a:45:bb:
7b:f5:ad:a6:7a:c2:db:06:29:f0:11:60:1f:08:aa:
ee:09:13:b5:99:01:4d:81:e8:64:c7:b8:a0:45:91:
50:48:93:9b:e8:a1:d0:41:d2:7f:f1:ce:21:5d:9f:
5c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:03:F0:BC:59:F3:9E:F7:5B:0D:6F:C8:E7:80:E6:F7:21:A1:E9:1C
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zwPwvFnznvdbDW_I54Dm9yGh6Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.166.0/24
185.234.74.0/24
194.56.225.0/24
Signature Algorithm: sha256WithRSAEncryption
73:aa:7e:49:60:31:d2:fe:9a:74:a2:6b:27:1f:db:de:40:2f:
d8:f8:11:3f:07:f7:63:e4:20:22:ed:18:33:7a:f9:e3:73:80:
ae:00:f6:3e:af:88:77:e3:2e:28:3e:a1:70:d8:16:96:ec:e7:
13:8f:5f:98:2b:57:1e:de:d6:c3:86:66:f5:6d:dc:dd:d6:1c:
eb:11:b8:f4:1d:4d:69:be:7c:8d:6f:23:69:79:0c:d5:3b:8b:
08:d1:4e:b5:d5:d1:6c:43:35:73:8a:1b:7c:79:07:44:1b:03:
af:b7:36:4d:b6:f7:c5:cf:9c:f2:e8:fc:9b:7f:a7:e7:44:b6:
cf:d1:1f:d7:fd:b4:f5:48:6c:81:85:6c:76:2e:05:d4:b3:c7:
85:80:e6:a1:5c:f1:fc:78:80:3b:78:95:a4:16:01:09:4b:89:
6a:92:e8:04:2b:70:1e:80:40:f7:40:f3:c2:37:fd:50:1d:73:
97:fb:90:bf:20:cd:0c:53:47:28:5d:75:27:92:69:ad:3e:18:
10:48:06:5b:92:c1:ce:da:d9:20:ce:d8:bf:45:a7:e8:84:e8:
ee:a0:7f:83:4c:c5:66:01:40:5f:a7:d3:8c:b3:bf:45:0e:ea:
44:8e:6f:0d:24:7e:dd:75:43:e4:ff:e3:7b:d5:18:44:f1:f9:
a1:d5:99:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:49 2024 by rpki-client on console-fra.rpki-client.org