Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/ZGnxViw-pCPzblPJY8mafSjofzI.roa
File: ZGnxViw-pCPzblPJY8mafSjofzI.roa (raw, json)
Hash identifier: txuTziR7f/GgU0xniEQuysuR/CZd4hfPrsqfe8MGIIw=
Subject key identifier: 64:69:F1:56:2C:3E:A4:23:F3:6E:53:C9:63:C9:9A:7D:28:E8:7F:32
Certificate issuer: /CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Certificate serial: 01856FE6EBDE2B5A51000CDD632C87F2EB61
Authority key identifier: 78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/ZGnxViw-pCPzblPJY8mafSjofzI.roa
Signing time: Mon 02 Jan 2023 00:34:42 +0000
ROA not before: Mon 02 Jan 2023 00:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60138
IP address blocks: 185.56.93.0/24 maxlen: 24
185.56.94.0/24 maxlen: 24
185.56.95.0/24 maxlen: 24
185.56.92.0/24 maxlen: 24
2a04:da40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e6:eb:de:2b:5a:51:00:0c:dd:63:2c:87:f2:eb:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Validity
Not Before: Jan 2 00:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6469f1562c3ea423f36e53c963c99a7d28e87f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d8:6a:ea:48:50:a1:58:e6:76:99:ef:e5:ce:
ae:50:9f:61:14:bc:41:61:63:8e:9f:e5:38:c5:27:
83:9e:e5:70:97:e1:9f:be:98:d7:cc:73:b6:ab:ff:
24:75:6f:d3:bd:32:95:82:c7:fa:84:01:ed:f7:e5:
6d:65:3f:ac:a4:9a:f9:0b:9c:73:60:46:1f:57:be:
29:a0:c3:31:fc:00:e7:65:6c:78:85:1f:7a:3d:ca:
b7:e0:14:b5:59:6e:cb:1b:2d:31:95:50:c2:7b:9f:
08:ae:2e:d9:54:f2:80:25:c4:8f:ea:de:b1:d8:e6:
6c:31:0a:8e:ad:fd:25:30:fd:49:48:7b:5a:b3:98:
e9:c4:d1:bc:4e:28:15:58:38:9c:7c:3b:37:00:70:
07:5c:40:d7:64:eb:73:61:83:62:f1:e4:a5:8d:0e:
07:0f:c7:35:d9:cc:27:b4:12:22:26:f9:0f:10:70:
95:71:62:da:25:93:26:a4:14:eb:d3:ef:f2:7a:ee:
79:44:af:e5:49:05:d4:c0:31:b0:6c:76:db:68:c1:
3a:65:cd:7a:61:04:fa:7a:90:a2:9c:80:47:2e:c2:
62:62:d8:52:ec:42:a6:cf:6c:a1:da:fb:19:67:72:
c9:74:c4:e2:ce:25:95:5a:fb:60:49:54:c0:33:ef:
b8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:69:F1:56:2C:3E:A4:23:F3:6E:53:C9:63:C9:9A:7D:28:E8:7F:32
X509v3 Authority Key Identifier:
keyid:78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/ZGnxViw-pCPzblPJY8mafSjofzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.92.0/22
IPv6:
2a04:da40::/29
Signature Algorithm: sha256WithRSAEncryption
5f:21:f6:93:27:a7:b4:64:9f:47:8f:3b:18:e6:50:5b:bf:7f:
65:3a:86:0a:c5:55:62:fe:34:cc:f2:83:8f:9b:e1:b5:f4:b5:
54:ec:fc:2d:6f:6a:21:86:9b:6f:77:46:0c:67:ef:df:83:65:
81:d8:28:aa:61:65:d6:da:92:29:44:fa:7c:4f:ee:d6:7f:98:
02:93:86:06:bb:87:69:77:0c:f5:a5:dc:d8:24:bd:9d:22:6b:
6a:92:6a:61:2d:32:1e:2b:9d:0e:9f:4c:6d:c2:6a:2c:1b:82:
5c:de:91:40:eb:cf:63:a5:9b:81:96:a9:bd:96:5a:26:14:85:
c9:0c:a5:48:91:6f:23:23:80:0f:72:39:7e:b0:01:9d:28:dc:
99:77:a8:6d:12:ea:51:16:27:67:d1:af:b7:1a:ba:1e:d4:41:
1f:5d:26:55:1b:57:9f:3e:11:86:00:1f:02:af:dd:41:d8:1b:
58:37:29:ea:f7:88:e6:03:9c:98:21:43:b4:09:66:74:a6:43:
b8:31:9e:76:68:69:fc:3d:c9:a8:e6:e9:dd:85:0a:9c:6d:35:
8a:19:b0:79:fe:42:f9:c0:f3:97:74:73:e9:8b:26:73:9a:97:
aa:af:fd:4f:b7:5d:ff:52:83:bf:2d:80:d6:38:b0:ff:47:06:
74:47:d6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:54 2024 by rpki-client on console-ams.rpki-client.org