Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/cz_gSn9qkXyu1iJsSDExwxrId1c.roa
File: cz_gSn9qkXyu1iJsSDExwxrId1c.roa (raw, json)
Hash identifier: AYsyeQSae0Ez6Gs+udsQWXZlJjrvQ9wsGIDcSN0U4hE=
Subject key identifier: 73:3F:E0:4A:7F:6A:91:7C:AE:D6:22:6C:48:31:31:C3:1A:C8:77:57
Certificate issuer: /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Certificate serial: 018CC3B6D9BBB3143D7CBBE577588A3899C3
Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/cz_gSn9qkXyu1iJsSDExwxrId1c.roa
Signing time: Mon 01 Jan 2024 06:29:49 +0000
ROA not before: Mon 01 Jan 2024 06:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61437
IP address blocks: 185.200.156.0/22 maxlen: 22
2a09:a940::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 30 Jul 2024 21:14:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:d9:bb:b3:14:3d:7c:bb:e5:77:58:8a:38:99:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Validity
Not Before: Jan 1 06:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=733fe04a7f6a917caed6226c483131c31ac87757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:89:e2:8b:85:4f:e1:75:5b:d0:16:8e:c7:fb:
23:bc:b6:a6:f0:1b:4e:7e:72:b0:f8:1a:3f:ad:89:
86:ce:d5:5c:15:ac:f2:f7:48:01:a7:29:e7:5d:0f:
6c:8d:ee:4e:9c:45:5c:43:42:16:f0:12:b4:8d:99:
a2:29:89:fc:e8:e6:be:f7:29:61:a1:21:6e:05:2a:
86:d5:a6:a0:47:81:4f:e6:a6:59:88:aa:ad:c2:48:
2a:4f:c9:19:a9:69:b3:6d:3e:cd:f6:b7:2f:98:c1:
23:2c:4c:46:39:70:f5:95:d8:8e:78:0b:99:c0:a5:
06:9c:31:ba:da:fa:a0:58:37:b4:ce:2a:1e:6d:c1:
f0:d5:af:c6:73:87:81:9c:cf:73:bf:ee:74:e3:78:
d6:a5:b9:6c:b3:d6:3a:39:87:58:64:5a:e4:1a:83:
49:14:3e:da:4c:cc:62:a5:ed:68:57:37:b5:cf:e8:
9d:c1:3a:b8:93:5d:15:d3:b7:af:c0:f7:2b:57:c0:
b4:5e:68:40:70:e4:11:0c:70:66:bd:55:57:e3:12:
dc:34:e1:31:7f:97:d3:de:2c:f9:fc:3b:1c:43:38:
e1:d0:24:6e:86:ad:ce:91:6e:84:38:12:09:af:8f:
54:02:8e:ec:35:c3:e4:ed:19:26:f8:44:de:3c:63:
61:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3F:E0:4A:7F:6A:91:7C:AE:D6:22:6C:48:31:31:C3:1A:C8:77:57
X509v3 Authority Key Identifier:
keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/cz_gSn9qkXyu1iJsSDExwxrId1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.156.0/22
IPv6:
2a09:a940::/29
Signature Algorithm: sha256WithRSAEncryption
02:12:67:86:79:01:18:c1:3b:ed:13:e9:01:77:61:a4:21:86:
59:44:d9:cd:6e:3d:c3:f9:18:30:c2:ac:a1:27:17:6b:6b:bd:
fd:64:74:14:c6:38:af:f0:d4:4d:1d:19:08:76:2c:71:54:ed:
51:58:43:45:18:39:5c:c4:1e:19:2d:d2:f4:8b:9a:4b:03:ee:
fe:8b:9a:79:5b:80:7f:c7:dc:c5:20:91:d1:5e:70:d0:21:58:
97:d6:33:4a:de:02:b2:82:74:bc:56:65:62:b9:b9:07:d5:cd:
41:4d:00:f4:ae:fd:a9:a2:cf:9a:ab:b1:0b:be:6e:b2:e4:4b:
e7:9d:fb:f2:e6:a2:65:bf:17:4a:5f:c8:0b:78:06:69:2f:ee:
41:1e:a1:e7:27:3b:62:9d:0b:de:0f:6d:22:e8:56:ae:cf:17:
07:8c:02:b1:6c:8b:42:a1:67:5d:35:49:a6:09:ed:5e:22:49:
1a:8d:85:06:f7:14:a8:7f:49:7b:7d:e7:4f:a8:2c:14:18:3b:
6f:be:f8:09:38:b4:73:f4:39:bd:b5:3b:22:76:51:2f:70:07:
1f:42:cd:80:18:04:2c:79:72:a6:d4:3f:f3:31:a6:b1:9f:ab:
59:d8:5d:6a:0c:34:06:31:bd:2a:37:66:79:b7:f1:34:47:4c:
fe:7d:b2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:38 2025 by rpki-client