Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ZUJP_XeLsW_M0w05b8tQ0Y2aKCw.roa
File: ZUJP_XeLsW_M0w05b8tQ0Y2aKCw.roa (raw, json)
Hash identifier: nRl176Kb7A7Z39VUmqIgOY+MO2as9a6peXM6NVbg0Es=
Subject key identifier: 65:42:4F:FD:77:8B:B1:6F:CC:D3:0D:39:6F:CB:50:D1:8D:9A:28:2C
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018DA2717A189BB850BF314D8B0E5D29F8F6
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ZUJP_XeLsW_M0w05b8tQ0Y2aKCw.roa
Signing time: Tue 13 Feb 2024 12:29:22 +0000
ROA not before: Tue 13 Feb 2024 12:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142019
IP address blocks: 45.93.17.0/24 maxlen: 24
45.155.225.0/24 maxlen: 24
160.238.64.0/24 maxlen: 24
160.238.65.0/24 maxlen: 24
160.238.66.0/24 maxlen: 24
160.238.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 04:08:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a2:71:7a:18:9b:b8:50:bf:31:4d:8b:0e:5d:29:f8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Feb 13 12:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65424ffd778bb16fccd30d396fcb50d18d9a282c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d2:25:3a:4c:4b:5c:ae:5b:80:ae:be:9b:72:
f3:a3:c2:48:db:6c:c9:42:72:0f:40:4c:7e:80:1d:
12:b5:91:08:32:78:b2:0b:f6:06:11:e5:b3:40:31:
d1:32:50:93:3d:56:94:90:94:d9:5d:76:aa:ad:22:
56:e3:9c:ad:01:3e:19:4c:61:91:20:2a:74:56:35:
13:54:6c:00:8c:b8:7f:b7:0b:3c:03:54:bf:4e:b3:
e7:d9:af:6f:16:32:4d:35:d5:91:27:b4:be:c6:33:
50:c4:13:3e:d8:a8:fc:ab:1a:15:01:8d:34:48:07:
10:cd:df:cb:25:67:aa:3d:06:b1:fc:17:3f:dc:6b:
75:d7:a9:45:18:f0:93:c8:fb:1e:be:a0:c1:1a:a1:
7d:70:b7:2e:29:bc:4e:31:75:9a:08:83:0d:fc:5a:
51:be:61:37:f7:56:83:59:53:9b:76:36:21:cb:e1:
38:b8:8d:5b:3f:b2:c6:42:84:1a:d8:c1:88:ef:3b:
7b:b8:5f:5e:17:52:89:3e:47:5b:c3:e1:a8:1a:26:
28:2c:61:c0:8b:50:fe:b7:78:c0:eb:b0:ed:1a:64:
14:0b:5b:e2:1a:5b:37:99:3a:72:6a:81:2c:b4:ff:
cd:2f:1d:62:52:2b:5c:f4:9a:84:d1:3c:bf:ef:15:
78:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:42:4F:FD:77:8B:B1:6F:CC:D3:0D:39:6F:CB:50:D1:8D:9A:28:2C
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ZUJP_XeLsW_M0w05b8tQ0Y2aKCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.17.0/24
45.155.225.0/24
160.238.64.0/22
Signature Algorithm: sha256WithRSAEncryption
21:96:84:9c:1c:b6:d1:fe:70:12:c1:e6:94:10:cf:05:ed:61:
a5:f8:df:86:55:a7:aa:ba:a7:ee:9c:bb:29:28:f6:40:6f:da:
c5:a7:3a:88:45:4d:7c:be:6d:51:9b:4a:ed:f1:4e:77:05:61:
e1:52:7b:59:c3:89:30:11:b8:0d:44:a4:06:25:47:86:62:a0:
b8:53:f9:5e:4a:83:1a:9b:95:7d:bf:6a:34:c6:9d:09:e7:cc:
93:95:c9:06:95:cf:29:30:91:7d:43:73:05:a0:72:44:37:fe:
82:67:14:92:5c:b1:99:c1:77:3d:38:d7:25:41:41:9c:4f:8c:
54:76:d2:87:ac:9f:4d:d7:69:10:98:b9:18:7c:b0:7c:fc:63:
e6:59:3a:fb:d9:a0:7f:0f:70:89:71:25:22:9d:da:52:21:c9:
0c:f7:ef:a7:58:46:69:64:b5:bc:6b:7b:01:d2:71:7c:26:b0:
97:f0:9a:f1:61:e5:fd:ee:ca:38:57:10:63:0f:03:d8:c2:b0:
d7:64:43:77:9a:98:47:e7:00:90:d4:36:c0:d1:2d:57:c2:d9:
14:ef:d5:fb:cd:1d:e5:3e:04:69:74:35:f6:e9:c4:06:d2:50:
b9:ca:16:cb:5a:80:14:fb:ee:41:35:97:ea:8f:2c:d3:d4:e7:
65:a7:2e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 07:15:05 2024 by rpki-client on console-fra.rpki-client.org