Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/zvP4X-iJ6DvpO4k4KBwrlGzbdO4.roa
File: zvP4X-iJ6DvpO4k4KBwrlGzbdO4.roa (raw, json)
Hash identifier: 8quDorPohvBxSy8oTakoyOXoUT6rlMWkzK4AXLrqV9o=
Subject key identifier: CE:F3:F8:5F:E8:89:E8:3B:E9:3B:89:38:28:1C:2B:94:6C:DB:74:EE
Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial: 018CC4930D0CFA8CB8BE0066D5648DBCC2C9
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/zvP4X-iJ6DvpO4k4KBwrlGzbdO4.roa
Signing time: Mon 01 Jan 2024 10:30:20 +0000
ROA not before: Mon 01 Jan 2024 10:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50920
IP address blocks: 62.93.84.0/24 maxlen: 24
62.93.87.0/24 maxlen: 24
82.192.6.0/24 maxlen: 24
217.16.119.0/24 maxlen: 24
85.13.58.0/24 maxlen: 24
176.61.160.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 15:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:0d:0c:fa:8c:b8:be:00:66:d5:64:8d:bc:c2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
Validity
Not Before: Jan 1 10:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cef3f85fe889e83be93b8938281c2b946cdb74ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:48:06:f8:8a:7f:08:77:e9:b5:76:fd:14:44:
62:c3:50:38:10:1d:ff:3e:28:cd:ad:94:32:4f:ef:
98:02:2a:34:08:4b:75:7f:ad:ca:23:b1:ad:5f:af:
ca:56:b8:76:ec:7c:07:5d:bc:2d:08:b9:18:fb:58:
54:a2:2c:fa:b1:63:24:69:44:d4:cb:c1:ac:f4:31:
c9:5f:24:56:36:dd:4b:8b:d7:ca:29:77:e8:e4:7a:
bc:94:93:a7:19:ed:cf:36:56:a2:2e:69:5b:72:fd:
f7:e9:c1:59:06:a9:0c:ad:f7:b7:a1:2b:94:88:6c:
fa:8c:ca:c1:6e:6e:6e:7a:cb:a9:6b:45:6e:5a:1c:
48:ac:04:49:9c:07:0c:b1:ef:a4:be:79:96:dd:71:
f7:7a:90:84:ec:44:20:32:fc:96:25:66:1a:5c:58:
0d:67:bd:e5:d5:9b:63:2b:2e:ca:1a:3e:ff:53:65:
b4:b0:79:96:86:0a:99:fd:45:e2:e5:b0:93:14:7e:
35:a3:44:92:e8:d4:22:02:42:6b:16:94:39:07:63:
ec:ac:2c:a4:2f:d3:7e:86:d0:07:05:d5:b5:17:04:
38:ad:9f:6c:30:c2:7b:e7:cc:67:29:eb:8c:93:fa:
58:a1:e3:f1:32:e5:42:f6:8a:30:ba:1f:a7:6e:74:
7d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F3:F8:5F:E8:89:E8:3B:E9:3B:89:38:28:1C:2B:94:6C:DB:74:EE
X509v3 Authority Key Identifier:
keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/zvP4X-iJ6DvpO4k4KBwrlGzbdO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.84.0/24
62.93.87.0/24
82.192.6.0/24
85.13.58.0/24
176.61.160.0/21
217.16.119.0/24
Signature Algorithm: sha256WithRSAEncryption
45:3b:5b:ea:34:52:20:3c:9d:10:56:d9:b1:b8:e8:3e:2f:41:
9c:13:2b:a0:5c:65:8f:11:8f:8d:94:1f:88:9b:1b:2f:c9:94:
04:28:4c:8b:00:21:2f:21:09:56:1a:d7:4a:3f:38:b4:d2:11:
9b:89:5e:30:49:a3:6e:ea:12:b9:1f:e4:1e:76:59:70:b3:ef:
6e:a2:32:35:54:6a:82:d0:11:f0:8c:8c:fe:96:6c:87:05:33:
5c:bd:25:4d:1d:82:87:2e:88:63:37:dd:16:ef:ae:d1:7f:45:
81:f8:97:9f:d2:68:53:bf:7c:91:37:4f:ff:2f:7d:7f:dd:4b:
02:ea:54:5d:5c:90:ad:e4:37:03:7d:62:fd:a1:79:da:64:0b:
c9:36:c5:a9:5a:11:b3:1a:07:c8:fc:05:b3:cd:19:d9:21:cb:
f4:03:53:4d:fe:49:61:3c:aa:f8:3f:b8:10:26:aa:c8:1f:9f:
6c:60:fd:d6:15:3b:0b:00:0d:20:6e:56:d9:9e:0a:69:1b:6e:
ca:3c:73:99:0a:16:2d:b4:74:c2:46:48:17:61:ab:2b:96:3d:
48:7a:57:4d:78:58:26:d0:17:a3:51:7d:8f:0c:02:99:ac:85:
56:58:86:08:5d:66:4b:40:8c:4f:06:ba:92:01:a7:92:45:88:
71:ac:19:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 21 18:08:36 2024 by rpki-client on console-fra.rpki-client.org