Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/zKu_1EEkWT24ZZkGnDDzVYM42OA.roa
File: zKu_1EEkWT24ZZkGnDDzVYM42OA.roa (raw, json)
Hash identifier: 73KAi1LVa3CyUkLVWOqABwTe9vvKsNjYLDUrCZTlJdY=
Subject key identifier: CC:AB:BF:D4:41:24:59:3D:B8:65:99:06:9C:30:F3:55:83:38:D8:E0
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 01938CF6E1D6B34030C2BD6DDE626F3C2CA2
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/zKu_1EEkWT24ZZkGnDDzVYM42OA.roa
Signing time: Tue 03 Dec 2024 14:40:09 +0000
ROA not before: Tue 03 Dec 2024 14:40:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204798
IP address blocks: 185.133.224.0/24 maxlen: 24
185.133.225.0/24 maxlen: 24
185.133.226.0/24 maxlen: 24
185.133.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Dec 2024 12:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:f6:e1:d6:b3:40:30:c2:bd:6d:de:62:6f:3c:2c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Dec 3 14:40:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccabbfd44124593db86599069c30f3558338d8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:e3:8d:d9:26:0c:75:a4:e8:43:86:37:6e:
68:4b:29:8c:f4:34:96:45:2b:ba:15:d1:24:d6:d4:
68:da:eb:02:f3:10:a4:97:be:18:02:89:c9:cf:d4:
82:d4:f9:5e:e6:79:ef:bd:40:69:af:bc:59:5a:89:
f7:24:67:b0:41:af:95:dd:4b:78:7c:84:7e:80:3d:
04:22:35:83:82:b0:43:38:6e:90:c0:de:23:9a:a8:
96:18:df:00:64:62:78:db:13:9e:55:da:60:5e:a6:
fc:b3:28:48:d1:c0:b6:3b:d6:9f:0d:b5:d1:4b:0f:
e7:b1:d3:43:05:c9:f9:03:17:21:9b:74:6e:7c:35:
6c:b9:bf:e2:86:74:c9:de:12:35:80:c3:0e:f0:0a:
57:b0:39:55:9c:a8:b8:26:4d:48:c2:9e:8a:94:13:
14:7c:75:ca:20:67:a2:e2:43:dd:bf:25:b5:95:12:
b2:e5:af:f2:80:82:03:42:3f:75:d9:de:58:d9:1d:
f8:29:ba:cb:e5:42:28:c4:ec:dd:3b:c0:a2:1d:f6:
63:56:54:e7:30:19:8a:79:3a:53:e3:da:7f:f6:d3:
66:02:ed:3b:c6:87:21:42:54:ec:53:e3:4f:6a:19:
ee:b3:03:11:5d:84:02:82:33:58:23:3a:db:21:41:
46:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AB:BF:D4:41:24:59:3D:B8:65:99:06:9C:30:F3:55:83:38:D8:E0
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/zKu_1EEkWT24ZZkGnDDzVYM42OA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.224.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:27:ad:66:c0:95:f7:d0:c0:e2:6d:26:d3:7f:87:f1:7b:e7:
07:3e:54:09:71:41:8c:45:fa:bd:c4:d5:41:47:e2:35:ea:42:
2e:88:21:9e:c2:4f:46:e0:84:55:05:49:56:6a:9e:22:2c:68:
bd:1d:82:f0:30:44:4c:22:1e:01:ec:3a:c2:51:40:9a:e3:0b:
f2:02:27:55:e1:11:c6:68:0f:9a:69:7a:12:aa:1b:94:5d:6c:
fc:d6:9e:4a:c2:31:7e:ed:01:e7:7b:3a:7d:11:f3:38:25:92:
a4:94:cb:64:43:3b:a4:a1:77:f9:fe:2c:8d:ad:03:c6:f4:d3:
1d:d7:5e:57:8c:4e:9a:eb:57:1f:13:a0:0f:ac:4b:cb:c5:ee:
a6:bc:0b:bf:0f:9d:e8:6f:e3:7c:cf:0d:1c:ee:b4:3b:f4:38:
d9:44:ea:7d:26:92:e9:45:df:c8:8e:76:95:75:ba:e4:b4:79:
8d:8b:fb:6e:5c:8e:56:55:0a:43:5a:cb:ba:46:a1:ce:57:71:
89:c6:1a:9f:24:72:75:29:14:c0:2f:43:b6:af:e4:f5:9e:31:
9b:05:0f:9c:7e:cc:03:e8:1a:af:63:b3:cd:aa:38:48:f4:0a:
0f:40:bb:05:ae:34:09:79:b1:78:f7:c7:d0:47:fa:a9:bd:d6:
8b:a9:cf:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:13:29 2025 by rpki-client