Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/Cz-GMLUyIdYZqwZdTxW3EGyyplI.roa
File: Cz-GMLUyIdYZqwZdTxW3EGyyplI.roa (raw, json)
Hash identifier: 4nBlI/+HZEsR9AFIIr3KRq6/n1le5Zhu9aEY7W9FWI4=
Subject key identifier: 0B:3F:86:30:B5:32:21:D6:19:AB:06:5D:4F:15:B7:10:6C:B2:A6:52
Certificate issuer: /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial: 018CC86F722303B2763564D5AA4441995EDB
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/Cz-GMLUyIdYZqwZdTxW3EGyyplI.roa
Signing time: Tue 02 Jan 2024 04:29:56 +0000
ROA not before: Tue 02 Jan 2024 04:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 178.20.208.0/24 maxlen: 24
178.20.209.0/24 maxlen: 24
178.20.210.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 13:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:72:23:03:b2:76:35:64:d5:aa:44:41:99:5e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Validity
Not Before: Jan 2 04:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b3f8630b53221d619ab065d4f15b7106cb2a652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:02:b4:dd:da:3b:b2:a4:42:28:2e:68:cd:95:
ab:7a:59:37:53:1b:6c:01:91:a0:96:17:ba:dd:5c:
19:b7:ac:af:e8:bb:0d:d3:50:52:6b:b8:19:9c:60:
57:3c:73:ad:da:be:61:2e:26:7e:07:84:bf:71:78:
50:93:30:46:cf:c9:90:92:bd:97:6d:6b:c1:b0:04:
80:33:4f:78:fe:ad:91:c4:9f:4e:e1:ef:d2:ab:8f:
f0:73:81:ac:ee:f3:4b:5c:0f:c8:ef:17:c0:31:3f:
6f:f4:30:96:6f:65:b3:ff:2c:43:d2:f2:6a:b3:0d:
0c:b2:b3:ed:89:d4:9e:de:44:b6:aa:1a:a5:24:78:
06:49:bb:3b:aa:9f:86:0f:91:18:17:99:27:89:96:
8f:db:29:ce:de:20:da:f7:84:d7:ef:e2:f2:3d:61:
14:ee:ff:e8:36:49:a3:4f:f2:40:81:c1:d1:61:59:
4d:85:b5:7a:91:32:88:3f:c4:f0:a8:46:71:7c:08:
c9:36:f1:65:57:f2:42:ab:3c:97:ea:b9:ca:09:f1:
63:44:10:46:6e:be:14:46:13:fc:6e:bc:7b:c0:84:
36:f0:43:97:90:67:e0:6d:cc:b1:e2:91:6b:85:23:
36:c8:df:56:4d:44:3a:c4:52:ba:30:0b:b8:5d:17:
da:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3F:86:30:B5:32:21:D6:19:AB:06:5D:4F:15:B7:10:6C:B2:A6:52
X509v3 Authority Key Identifier:
keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/Cz-GMLUyIdYZqwZdTxW3EGyyplI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.208.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:92:87:7a:83:b0:25:47:54:44:8d:d1:85:e0:9c:25:37:65:
06:7f:57:69:04:70:07:29:50:7f:a8:90:4f:41:e4:82:ae:66:
91:f3:e6:24:f5:26:b2:e1:c0:8c:f2:3b:49:d5:95:a1:c8:2a:
59:3f:ba:a1:48:39:60:12:b7:53:8b:71:71:78:b0:3f:50:e3:
4c:ec:95:db:3a:9e:d8:13:36:15:31:70:98:f9:51:2e:d8:f8:
cb:f3:71:9b:46:cc:68:39:e7:7b:79:94:25:71:40:71:2b:41:
d0:ac:2f:fc:b3:d5:ee:d6:58:3c:d1:07:e8:29:c9:10:1f:ff:
a9:f8:40:ce:1f:87:07:6b:10:5a:d2:34:82:02:4b:3d:41:d1:
cb:dd:27:fe:f1:9e:0c:6d:a9:ce:c9:26:58:bd:13:fd:d7:8c:
e2:47:7c:70:9d:05:86:18:f2:7b:f5:b5:db:12:47:fb:a0:2f:
05:cb:e2:82:6e:fb:94:9a:96:7d:fd:03:92:fb:81:f4:01:c0:
aa:a4:36:04:94:f1:a4:c0:e0:75:72:72:da:b8:de:16:de:6b:
10:50:7b:87:1f:bf:a6:1d:34:d0:b3:7a:1e:6d:8c:73:34:1e:
95:3a:db:0e:8f:eb:d0:66:cf:4d:50:2a:3e:83:30:8f:9a:2f:
21:80:3c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:57 2025 by rpki-client