Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/Zk-CfAeqpKqIe-yXwktoNQUuyhQ.roa
File: Zk-CfAeqpKqIe-yXwktoNQUuyhQ.roa (raw, json)
Hash identifier: MvCxL972eg3ZhgcPKccz830Cny+DSdtnouhfyKAwcmM=
Subject key identifier: 66:4F:82:7C:07:AA:A4:AA:88:7B:EC:97:C2:4B:68:35:05:2E:CA:14
Certificate issuer: /CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Certificate serial: 018CC7943051CD3B19644C1BFB877511399A
Authority key identifier: 17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/Zk-CfAeqpKqIe-yXwktoNQUuyhQ.roa
Signing time: Tue 02 Jan 2024 00:30:26 +0000
ROA not before: Tue 02 Jan 2024 00:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56756
IP address blocks: 91.226.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:30:51:cd:3b:19:64:4c:1b:fb:87:75:11:39:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Validity
Not Before: Jan 2 00:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=664f827c07aaa4aa887bec97c24b6835052eca14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:37:bb:f2:3e:d1:9b:26:37:d4:1b:1a:07:
d0:c6:34:4d:5f:d1:a6:35:b9:f6:c7:10:44:c1:64:
6c:35:53:53:31:30:78:3f:f0:e2:a9:47:b3:99:f1:
8f:20:41:7a:da:78:7d:5b:8b:20:b1:47:2c:74:45:
0d:64:79:75:f3:d6:10:82:70:1f:cc:15:ff:f5:68:
a6:de:c0:e6:99:87:a2:02:0e:f4:f3:76:2d:82:8c:
5e:f5:e6:95:04:64:d7:d2:00:81:c0:ac:17:b1:77:
6e:94:71:f9:b0:73:d7:b7:89:5c:60:19:15:57:df:
4c:f8:88:3e:39:05:fa:f5:fc:76:08:81:01:dc:11:
03:4c:44:3e:ce:c7:50:fd:8f:2b:7d:85:d2:2f:57:
27:65:b2:0f:8c:4d:34:7d:21:50:b3:b1:64:91:05:
4c:6b:9b:af:ad:74:aa:c8:0c:5c:c2:01:36:d1:47:
a1:c7:a1:c9:e3:80:dd:03:78:70:30:c1:8e:e9:24:
3d:b6:7d:a8:90:2d:45:d1:5e:ec:f1:62:57:34:8a:
0f:0a:fd:d6:99:4c:23:d5:eb:04:24:92:14:f3:63:
88:9d:90:b3:d7:24:15:24:4a:3d:90:5a:aa:16:41:
5e:b9:dc:76:66:28:42:45:93:c5:90:c7:4a:79:67:
a0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4F:82:7C:07:AA:A4:AA:88:7B:EC:97:C2:4B:68:35:05:2E:CA:14
X509v3 Authority Key Identifier:
keyid:17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/Zk-CfAeqpKqIe-yXwktoNQUuyhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.207.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:65:af:6e:f6:be:84:98:25:97:d0:54:ad:a1:2a:33:5f:74:
69:fb:b4:bf:34:94:9d:cd:0a:35:71:99:8c:cc:00:51:e4:be:
0f:c6:a7:56:02:85:76:f0:c0:83:56:36:57:7b:2c:3e:03:d7:
2c:8f:e5:ce:60:23:cf:02:4c:59:9b:85:dd:83:e5:b4:f2:b3:
87:3d:25:da:3c:61:ae:eb:31:6a:bb:1b:1c:20:0d:da:d1:08:
49:01:19:d9:9a:bf:c7:69:2e:08:57:82:48:3c:f9:23:a9:ba:
24:4b:32:d3:48:10:1b:b0:4f:cb:6a:22:3f:ae:c3:95:c9:05:
a0:8a:1f:59:b9:73:97:1d:b8:64:2a:2f:eb:96:1c:c2:b3:9a:
9f:3d:03:73:1f:98:58:ee:31:3f:71:f5:26:ed:ad:04:4c:bb:
22:9c:21:ac:cb:1b:45:66:de:46:70:ab:20:1d:9b:33:f5:a9:
d5:8f:cb:07:9f:9b:6e:38:c2:43:c6:c9:ad:16:5b:75:fe:74:
86:1d:82:2c:e0:75:38:e3:55:f9:bf:19:95:bd:9b:e6:43:b6:
ff:6a:5d:53:88:c0:41:3d:97:a5:0d:22:3e:d7:b2:ed:18:f8:
f7:4b:13:72:fc:0d:36:c9:82:ba:0c:37:bc:50:b8:e3:f5:49:
ef:c0:83:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:13 2025 by rpki-client