Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/ZwII-VJ01-LGUpBC8gqkgCeAsdA.roa
File: ZwII-VJ01-LGUpBC8gqkgCeAsdA.roa (raw, json)
Hash identifier: ZbaUf2SKtnwwDM7KzkJFKEiTaAJf6WCV0Zo8qqMnT0k=
Subject key identifier: 67:02:08:F9:52:74:D7:E2:C6:52:90:42:F2:0A:A4:80:27:80:B1:D0
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 0185A5D5253D60B88DBD05DB2E82F0F285F5
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/ZwII-VJ01-LGUpBC8gqkgCeAsdA.roa
Signing time: Thu 12 Jan 2023 11:54:47 +0000
ROA not before: Thu 12 Jan 2023 11:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 212.124.68.0/22 maxlen: 24
212.124.72.0/22 maxlen: 24
212.124.76.0/22 maxlen: 24
212.124.86.0/24 maxlen: 24
212.124.88.0/22 maxlen: 24
212.124.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a5:d5:25:3d:60:b8:8d:bd:05:db:2e:82:f0:f2:85:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Jan 12 11:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=670208f95274d7e2c6529042f20aa4802780b1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:ee:b0:d2:ac:59:df:c7:17:fd:7f:7e:ef:
dd:95:c5:03:b3:f8:68:1a:7f:4d:73:7f:c0:a5:c3:
80:f6:f6:c6:ff:01:1d:7e:47:85:03:cd:c3:83:c4:
0d:3a:c5:86:3a:0f:a7:20:6c:b5:3e:56:fe:ad:78:
11:62:dd:4a:2b:bd:b5:bf:be:0b:59:93:81:1a:66:
56:24:d1:0e:fa:74:bb:a4:0c:fe:59:46:50:fe:5c:
12:46:43:32:75:49:58:8f:ba:eb:86:1a:c7:06:d3:
01:4a:e5:0a:80:31:c5:4b:16:1b:40:ae:44:87:16:
ca:61:14:22:cf:de:ec:28:dc:1d:fe:5a:33:e2:6f:
12:cb:43:e1:fd:63:cd:87:82:40:1b:2e:09:bb:69:
80:75:ae:8f:2c:ca:f6:4a:cd:8b:03:b1:11:0d:6a:
42:ae:be:6b:3e:b7:e8:a9:7c:9b:62:a7:99:3c:b9:
63:67:74:26:c8:58:c4:51:9a:c6:ed:44:05:d1:1b:
c2:a0:48:7d:9a:91:26:53:3e:f6:8e:66:a4:cb:6b:
c7:82:30:ea:c6:89:d5:3a:bc:6e:56:3a:78:64:de:
c7:2f:69:6c:65:d2:67:ba:c4:9c:73:4a:27:40:80:
6e:31:01:9f:aa:6f:62:f4:16:25:22:cb:e2:5b:a1:
09:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:02:08:F9:52:74:D7:E2:C6:52:90:42:F2:0A:A4:80:27:80:B1:D0
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/ZwII-VJ01-LGUpBC8gqkgCeAsdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.68.0-212.124.79.255
212.124.86.0/24
212.124.88.0-212.124.92.255
Signature Algorithm: sha256WithRSAEncryption
44:3e:5d:3a:99:f9:ce:65:2f:64:23:4d:39:af:6c:e3:83:ad:
2c:19:2b:98:ad:a0:8e:91:1d:a9:a2:97:43:71:02:a1:ca:94:
8a:39:18:25:88:f0:78:d0:e7:b2:b5:b6:41:89:d9:41:66:67:
e7:78:13:35:f2:d4:47:10:e7:0c:1b:3d:ee:d8:85:6e:2a:f1:
92:a2:92:3f:a8:80:7d:15:bd:66:40:bd:1f:a1:ed:07:75:79:
36:b9:d5:bb:af:30:aa:8b:84:d3:5e:33:65:74:66:f0:0f:98:
ef:a7:73:22:0f:36:2d:23:eb:cd:29:42:72:05:f0:6c:14:74:
b7:72:d7:70:26:f4:7e:0f:5b:41:5b:1a:7f:b7:30:4d:87:8f:
25:80:da:73:c5:89:f9:36:52:cd:f9:de:54:ad:35:99:36:20:
24:3c:61:8b:c7:cb:59:15:12:d6:d7:09:56:1d:c5:50:14:18:
14:dc:68:51:19:bd:fa:5f:bb:b1:50:75:1a:d5:fc:53:e4:56:
3b:e9:43:3a:14:b2:e5:b0:cf:93:2c:53:a5:08:c5:97:3a:ed:
64:5d:f4:83:0b:c1:1a:88:f3:29:15:c4:9c:f2:91:81:0c:69:
f5:7e:7e:02:e7:f9:90:73:af:22:93:71:2f:5a:9a:82:f7:22:
bb:df:ff:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:48 2024 by rpki-client on console-fra.rpki-client.org