Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/zo2B7KeuoRGQza6wOmBxsl7tBbU.roa
File: zo2B7KeuoRGQza6wOmBxsl7tBbU.roa (raw, json)
Hash identifier: n6tHLje7jl1VzvwyFkg5VMPwf2ZCPlQ8cyzOamc74rs=
Subject key identifier: CE:8D:81:EC:A7:AE:A1:11:90:CD:AE:B0:3A:60:71:B2:5E:ED:05:B5
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01916B5F252DFFC0F460B6A350D47B7AC556
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/zo2B7KeuoRGQza6wOmBxsl7tBbU.roa
Signing time: Mon 19 Aug 2024 16:01:23 +0000
ROA not before: Mon 19 Aug 2024 16:01:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15924
IP address blocks: 188.132.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Dec 2024 09:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6b:5f:25:2d:ff:c0:f4:60:b6:a3:50:d4:7b:7a:c5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Aug 19 16:01:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce8d81eca7aea11190cdaeb03a6071b25eed05b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ae:f1:1f:33:af:a9:8b:0f:2e:54:3b:d9:76:
42:62:f1:f9:b3:bc:db:5a:75:c4:df:79:9f:15:4c:
6e:9a:15:b8:40:6f:6d:d2:4f:b7:46:82:95:1a:08:
5c:53:b0:6b:95:ca:9a:bf:d7:5f:44:89:f3:4d:2b:
0b:37:27:23:b4:06:59:43:ef:2c:81:6d:89:df:08:
33:95:e3:c2:85:ef:fd:85:ab:d4:e8:de:1c:9e:64:
ac:35:5d:44:59:74:04:0c:75:fb:78:9e:05:4a:32:
7e:84:5f:b8:83:ef:66:4d:89:00:17:de:9a:c0:d3:
65:7f:c9:72:df:bd:68:40:d1:9f:1a:96:9e:2c:28:
4c:6d:2f:c8:bd:e2:e4:b1:bc:1c:05:bd:70:aa:c4:
8e:4a:24:99:b2:83:d9:c6:ec:5d:89:23:24:d3:57:
a4:45:ad:9c:99:d0:12:18:d7:ed:92:52:20:c7:21:
ed:31:79:d4:7e:14:9a:78:2e:20:82:f1:39:f1:46:
8c:70:91:ec:0f:9b:c9:a8:ff:71:98:db:12:94:2b:
ce:58:65:88:83:bc:9e:f6:4d:68:a6:4c:da:66:c7:
6f:78:93:cb:2f:d2:ac:9e:c0:8a:ed:38:1c:22:53:
88:b0:b9:19:22:15:f5:3d:78:14:08:07:e2:c1:74:
f9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8D:81:EC:A7:AE:A1:11:90:CD:AE:B0:3A:60:71:B2:5E:ED:05:B5
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/zo2B7KeuoRGQza6wOmBxsl7tBbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.229.0/24
Signature Algorithm: sha256WithRSAEncryption
52:29:b2:b5:d3:aa:bd:ef:69:d9:fe:47:94:53:17:56:65:3d:
9a:fc:84:e9:ee:59:23:13:87:55:20:39:bd:82:1c:31:c0:bc:
5a:4d:1f:89:97:ec:9c:74:d7:8b:7a:5a:ba:51:e7:c5:ce:9a:
d2:d2:23:85:d3:99:d9:e7:31:15:a4:98:34:29:d6:a8:1a:d7:
3f:41:46:ff:38:f7:4e:57:8b:8f:58:c3:45:68:d5:b1:fa:19:
9f:c5:06:bb:cd:78:d2:0e:b5:2a:71:a8:da:03:2d:29:d4:c4:
1f:07:54:d4:8c:c0:74:bc:e5:12:6b:72:c5:68:a7:3b:e4:87:
7b:dc:d4:c0:94:01:29:32:cf:d1:ad:c8:b7:ba:b0:a1:fb:d8:
13:1e:38:36:19:89:f1:4e:78:db:3f:64:a9:08:e6:e1:02:ce:
f4:18:a4:df:b0:66:cc:8c:3c:b9:d1:e3:87:3a:81:70:7b:a0:
51:ad:a2:2f:71:59:32:86:c5:32:c2:71:a7:fd:14:e4:65:25:
e2:24:75:a4:62:4f:32:3b:27:54:5d:ad:0f:b5:15:24:b2:1d:
87:e8:8c:86:70:38:8a:3c:45:3b:74:3c:bc:9a:64:83:86:23:
4c:a2:8d:59:d1:b2:80:2e:68:eb:dc:4f:00:67:37:e8:f1:3e:
1c:02:44:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:54:33 2025 by rpki-client