Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/ZqJlXVe-CVZ-9Gc6KwoqlsrhaAg.roa
File: ZqJlXVe-CVZ-9Gc6KwoqlsrhaAg.roa (raw, json)
Hash identifier: BUg2nBT4IRIUSNZ1kJaFmc5Q8dXpn0VaXtLJG+1JI9s=
Subject key identifier: 66:A2:65:5D:57:BE:09:56:7E:F4:67:3A:2B:0A:2A:96:CA:E1:68:08
Certificate issuer: /CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Certificate serial: 018F9AEE12D7CB1EA6C541D3FFB999DA1DEB
Authority key identifier: 87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/ZqJlXVe-CVZ-9Gc6KwoqlsrhaAg.roa
Signing time: Tue 21 May 2024 11:34:04 +0000
ROA not before: Tue 21 May 2024 11:34:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49824
IP address blocks: 91.225.200.0/24 maxlen: 24
91.225.201.0/24 maxlen: 24
91.225.202.0/24 maxlen: 24
193.93.216.0/22 maxlen: 22
2001:678:604::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 27 May 2024 13:54:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9a:ee:12:d7:cb:1e:a6:c5:41:d3:ff:b9:99:da:1d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Validity
Not Before: May 21 11:34:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66a2655d57be09567ef4673a2b0a2a96cae16808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:2f:d3:15:9f:a8:36:9a:e3:1d:f5:5e:ac:
fa:98:51:36:1d:ed:47:de:c1:9e:a5:8f:b6:47:54:
0c:a9:b2:ad:32:3f:c8:3e:5a:3f:a0:66:1d:bd:7c:
ad:36:ad:56:65:c1:58:ec:b9:57:1a:53:5b:2b:c6:
2f:f6:af:58:ae:b0:19:75:dd:4d:70:9b:43:f5:49:
a8:69:a5:fe:09:72:50:5b:ff:3f:2e:54:eb:9c:52:
e9:36:44:1e:d9:fc:5d:a7:d3:40:7b:c6:44:5e:5f:
5f:d4:1f:6f:54:9d:d8:0b:98:7f:bc:a7:eb:85:0f:
27:cb:6b:c9:46:1b:7a:76:b9:da:1b:f0:ed:f6:f6:
b6:bd:9e:b6:01:c0:1c:6e:02:0f:58:a0:97:c0:e7:
f1:4a:7c:ef:cf:66:d2:4e:94:89:68:c3:e4:4b:f7:
19:42:74:3c:a1:5b:dc:d1:80:68:54:f7:1f:5b:58:
a1:91:3c:fc:30:bc:02:9e:52:11:f1:37:b4:8e:8f:
08:f2:0a:13:b5:bd:b8:9f:f7:73:53:52:88:56:c0:
a8:d4:1e:1b:9a:13:35:a4:61:ae:e3:69:f5:5f:90:
ff:4d:8a:1f:be:20:96:49:36:b1:fb:46:8e:90:33:
7e:84:e6:d7:27:3c:41:ee:f9:3e:fc:a7:8f:94:a6:
4e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A2:65:5D:57:BE:09:56:7E:F4:67:3A:2B:0A:2A:96:CA:E1:68:08
X509v3 Authority Key Identifier:
keyid:87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/ZqJlXVe-CVZ-9Gc6KwoqlsrhaAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.200.0-91.225.202.255
193.93.216.0/22
IPv6:
2001:678:604::/48
Signature Algorithm: sha256WithRSAEncryption
27:57:71:0e:79:20:01:73:84:a9:5e:bf:eb:da:b7:58:b4:02:
1a:8f:77:e5:6f:d6:29:4d:a4:53:c2:5c:57:dd:7a:0d:d5:f3:
31:b8:32:b6:da:68:50:4f:0c:72:39:0e:f0:cb:92:ae:be:7f:
68:c3:8e:bc:e8:04:3e:81:5a:10:11:3b:27:42:e1:77:31:d7:
49:91:73:40:4f:a0:d2:0e:06:08:e0:3e:19:2d:67:eb:15:ce:
e0:9f:f4:f6:52:72:81:4d:1c:6a:50:f6:d3:5c:a9:b7:0d:23:
20:c4:13:b2:f2:46:b3:f0:e3:ef:87:42:83:ff:08:0b:40:0c:
1d:a4:3e:f6:a5:86:a0:46:27:65:1d:01:6a:ee:1a:9b:e3:d2:
22:ec:d7:63:9a:fd:fd:79:8d:5c:4c:72:8c:e0:1a:5b:89:5f:
64:b7:68:8d:71:51:3d:96:0e:29:ae:81:13:b3:c9:7b:0d:0c:
dc:30:c4:56:f0:aa:0e:77:32:9b:49:bf:1b:74:b5:93:33:b9:
7c:4b:88:80:33:29:69:75:51:4a:4e:11:f2:9f:2e:fc:c3:4a:
79:8c:a8:dd:da:17:45:07:40:e8:d3:f2:8d:32:09:9f:91:4d:
4e:2a:97:6a:7c:ef:98:65:9c:e1:40:c0:2c:a5:7a:f1:c7:d8:
81:36:8c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:39 2024 by rpki-client on console-fra.rpki-client.org