Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ZNMTa9IcLZdqk07oBWKgieu4aYA.roa
File: ZNMTa9IcLZdqk07oBWKgieu4aYA.roa (raw, json)
Hash identifier: PA+bD3mrUNkuYOI8wUAm8mo19Oyt2HHpVHLv9hbFGAw=
Subject key identifier: 64:D3:13:6B:D2:1C:2D:97:6A:93:4E:E8:05:62:A0:89:EB:B8:69:80
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018D84C45CF63E2623CB8D338ECAB62F5866
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ZNMTa9IcLZdqk07oBWKgieu4aYA.roa
Signing time: Wed 07 Feb 2024 18:11:17 +0000
ROA not before: Wed 07 Feb 2024 18:11:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212667
IP address blocks: 2.59.48.0/24 maxlen: 24
37.221.80.0/24 maxlen: 24
45.11.22.0/24 maxlen: 24
45.14.221.0/24 maxlen: 24
94.158.188.0/24 maxlen: 24
194.32.240.0/24 maxlen: 24
195.69.148.0/24 maxlen: 24
195.69.150.0/24 maxlen: 24
212.18.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 17:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:c4:5c:f6:3e:26:23:cb:8d:33:8e:ca:b6:2f:58:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 7 18:11:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64d3136bd21c2d976a934ee80562a089ebb86980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6e:54:5b:5e:60:d8:2d:3d:bd:e6:93:99:90:
32:aa:86:54:e0:85:96:13:61:63:82:ac:46:2c:61:
97:da:df:4c:8c:c4:22:a7:01:6e:70:bb:d5:c5:bd:
ca:9f:e3:f4:d6:6e:95:9b:35:6c:e2:02:43:0c:35:
6b:ef:45:54:ee:dc:5f:96:53:37:1b:97:65:c0:2a:
d2:7b:ee:22:2f:b6:7b:03:0d:de:0e:bb:ce:bd:c5:
c8:eb:5b:2f:1f:37:2d:a6:66:de:03:ea:7a:da:4f:
f5:04:96:f0:40:fa:d7:46:21:5b:e4:d5:c1:e5:a5:
1e:30:8b:ba:b6:6e:9d:f0:43:d0:cc:8c:44:db:0d:
d4:9e:db:29:97:c8:5e:ea:ae:c6:c1:5e:97:c5:dd:
5a:0e:75:44:68:91:40:32:f3:ff:85:62:b7:9e:d8:
e7:a8:40:03:55:f2:dd:72:94:4b:66:1c:08:ce:5c:
8e:1e:cf:ce:c9:21:cf:ca:a5:f2:90:e2:ba:e6:59:
85:54:e9:4c:32:8d:25:de:eb:d9:ce:f1:fd:0c:15:
98:f1:f9:de:bb:dc:5b:ef:4c:db:45:ff:6f:15:03:
cb:be:12:31:a3:82:7d:81:bd:0f:46:6b:e7:94:1c:
65:15:99:7e:36:f6:03:61:4f:e9:cc:47:a5:ce:27:
52:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D3:13:6B:D2:1C:2D:97:6A:93:4E:E8:05:62:A0:89:EB:B8:69:80
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ZNMTa9IcLZdqk07oBWKgieu4aYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.48.0/24
37.221.80.0/24
45.11.22.0/24
45.14.221.0/24
94.158.188.0/24
194.32.240.0/24
195.69.148.0/24
195.69.150.0/24
212.18.100.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:9a:2d:63:fd:99:89:de:c7:ce:a1:a9:10:a2:4f:6f:af:15:
bb:85:3d:1d:8f:94:66:3e:5c:ad:c0:c6:eb:92:6b:3d:7b:c1:
40:1b:dd:6f:4e:61:0a:3d:4a:34:2f:65:14:4e:db:9a:68:ee:
2f:9b:68:98:17:8d:3e:b8:14:54:d7:95:8a:66:fa:fe:35:2e:
54:dd:ef:0a:d2:f0:e6:5a:3d:5b:d1:95:df:dd:20:66:e9:43:
1b:1a:07:e9:60:d0:fd:17:14:dd:ab:e8:87:8e:84:17:66:e9:
a0:77:97:b1:01:58:46:8c:d2:e7:31:c3:cd:d8:ed:d4:0b:3c:
e3:1e:60:e6:d0:4e:fb:eb:91:3b:1d:82:55:03:39:e0:f7:7e:
25:82:e9:32:a5:b5:00:eb:f1:b6:8b:bd:e0:55:92:d4:2f:82:
86:34:b6:1d:a2:f6:e5:2c:4d:3a:81:ff:7f:6b:97:ac:fb:9d:
b9:4f:7c:96:7e:2d:0a:4b:56:a3:ea:ff:b9:7e:cb:63:8c:2a:
73:a0:9b:f4:bf:bf:52:8c:fa:58:93:66:b6:d2:23:d1:cf:3a:
12:15:76:36:fc:28:16:dd:23:ba:24:4b:82:0e:cf:c6:91:15:
7c:23:19:fe:bb:11:e0:4f:03:9d:fb:d2:45:63:b8:e7:46:d8:
f2:1b:9b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:48 2024 by rpki-client on console-ams.rpki-client.org