Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/Zsel22JqlvhjtVMdiGFoGv_MKrs.roa
File: Zsel22JqlvhjtVMdiGFoGv_MKrs.roa (raw, json)
Hash identifier: 3L6rmpCArq3eFKYyqqUbQyY3r8HkQvkmUN53Xsmc470=
Subject key identifier: 66:C7:A5:DB:62:6A:96:F8:63:B5:53:1D:88:61:68:1A:FF:CC:2A:BB
Certificate issuer: /CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Certificate serial: 018EE16CC9BC71800B76A7F48B75595299B7
Authority key identifier: 0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/Zsel22JqlvhjtVMdiGFoGv_MKrs.roa
Signing time: Mon 15 Apr 2024 11:03:06 +0000
ROA not before: Mon 15 Apr 2024 11:03:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50023
IP address blocks: 85.204.48.0/22 maxlen: 22
85.204.49.0/24 maxlen: 24
109.68.10.0/23 maxlen: 23
109.68.12.0/22 maxlen: 22
185.14.212.0/22 maxlen: 22
185.137.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 03 Jun 2024 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e1:6c:c9:bc:71:80:0b:76:a7:f4:8b:75:59:52:99:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Validity
Not Before: Apr 15 11:03:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66c7a5db626a96f863b5531d8861681affcc2abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:66:e5:06:2c:c2:f7:0e:70:06:1b:a2:3a:
0e:c4:85:0b:5d:e3:89:5e:2b:98:3c:fa:de:19:be:
1f:c5:00:a0:31:96:80:62:65:eb:00:54:51:4f:12:
c1:0a:50:54:50:22:16:0a:d2:b2:74:fd:c0:c6:64:
d4:cc:40:e0:9e:00:b7:db:e7:2a:84:04:11:96:d6:
39:04:08:5a:2b:fb:44:fc:1c:6e:54:9d:a5:30:0a:
e4:eb:ea:de:63:74:5c:43:43:78:fe:fb:43:13:78:
a0:d0:89:6d:37:0f:2c:7a:f2:5d:2b:10:46:28:62:
56:c4:5b:eb:e3:91:a9:23:ab:62:75:50:43:14:c9:
f5:c1:57:a5:45:68:93:e6:8e:7f:fc:28:fd:bb:bf:
c8:ab:4b:d4:2a:1d:d0:4a:01:97:2f:d2:46:5b:97:
ac:03:38:95:44:50:2a:73:bb:f4:33:22:f5:97:b7:
08:00:36:83:a4:9d:c5:51:bd:ba:5b:17:ef:25:10:
0f:b8:03:83:75:6a:24:59:17:de:7e:d5:bf:fe:3f:
c3:54:55:60:a8:a5:60:64:4e:a0:fc:dc:5a:5a:df:
0c:b5:2d:62:14:9e:e3:c8:40:35:14:b9:70:a9:ec:
c6:1f:0a:0c:0e:b7:d1:1e:8f:24:9a:58:81:e2:09:
1a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C7:A5:DB:62:6A:96:F8:63:B5:53:1D:88:61:68:1A:FF:CC:2A:BB
X509v3 Authority Key Identifier:
keyid:0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/Zsel22JqlvhjtVMdiGFoGv_MKrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.48.0/22
109.68.10.0-109.68.15.255
185.14.212.0/22
185.137.64.0/22
Signature Algorithm: sha256WithRSAEncryption
55:72:de:fa:20:3c:6a:d1:54:41:7e:a3:c3:30:55:d8:eb:1a:
cf:af:a2:98:3f:d3:32:6b:10:c1:93:47:3b:1c:06:3f:84:cd:
92:5d:78:6d:b2:9a:07:7b:48:6f:96:ba:9a:c7:82:73:01:8f:
a5:8e:68:88:85:2d:28:c0:a0:47:1f:4e:0e:46:19:32:38:ab:
41:4c:69:b1:78:08:79:42:91:69:91:e6:a9:b4:16:fb:bb:01:
95:97:3c:9b:db:10:c5:e8:91:a7:7d:e4:33:4d:b4:d6:ce:dc:
ff:d7:11:cc:a8:d3:ee:34:c6:05:9d:3b:99:38:2d:95:cc:d4:
ef:fd:ba:98:5b:28:4f:1c:e0:46:d1:56:45:5c:1a:f5:fd:f3:
d6:33:a8:99:ac:cb:34:82:97:90:b6:56:fe:fd:ab:0d:9f:18:
53:32:64:e3:54:c2:5c:71:3b:d0:c2:fa:9e:0a:72:e2:b9:03:
36:78:08:26:b9:e6:e2:02:d9:20:5f:62:33:95:7c:4b:16:ff:
e7:0f:21:b8:6d:89:44:9a:83:18:6e:fd:77:3c:7b:e6:54:56:
d0:02:3e:ce:78:55:e6:dd:f0:50:ad:f7:54:3a:6a:1e:f7:df:
27:a1:1e:d2:19:58:85:74:7a:dd:0f:d9:08:fb:b4:2d:8f:66:
8a:fe:92:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:19 2024 by rpki-client on console-ams.rpki-client.org