Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/zBCm_ctOo2nBWYXN86RsK4JOVtk.roa
File: zBCm_ctOo2nBWYXN86RsK4JOVtk.roa (raw, json)
Hash identifier: 4U25r4yMnOGIBtA7RNq/lw0byr4PVpY4yDFjNXng5bg=
Subject key identifier: CC:10:A6:FD:CB:4E:A3:69:C1:59:85:CD:F3:A4:6C:2B:82:4E:56:D9
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 0188DDFD78F34AAFEE14D4F70BAAAB7B6751
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/zBCm_ctOo2nBWYXN86RsK4JOVtk.roa
Signing time: Wed 21 Jun 2023 12:45:56 +0000
ROA not before: Wed 21 Jun 2023 12:45:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 86.62.31.0/24 maxlen: 24
86.62.28.0/24 maxlen: 24
86.62.29.0/24 maxlen: 24
86.62.30.0/24 maxlen: 24
194.107.161.0/24 maxlen: 24
194.36.32.0/23 maxlen: 23
45.80.30.0/24 maxlen: 24
45.80.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jul 2023 09:57:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:fd:78:f3:4a:af:ee:14:d4:f7:0b:aa:ab:7b:67:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Jun 21 12:45:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc10a6fdcb4ea369c15985cdf3a46c2b824e56d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ef:94:86:ec:4b:82:b9:11:5d:36:db:7a:4a:
6f:3c:dd:20:dc:87:5d:f6:48:73:ec:c0:27:a8:72:
3a:a2:85:7a:35:43:c2:2c:72:2c:23:a2:aa:77:f4:
03:cf:f1:9f:01:bd:a7:41:88:fc:43:96:a7:05:73:
66:bd:75:04:90:f1:3c:e3:2f:a5:70:42:f1:50:6a:
76:5e:df:87:3d:63:29:db:4e:21:88:38:e4:a4:72:
08:a5:6c:69:cf:f0:0d:a0:37:ca:11:9f:fa:7d:98:
71:56:b1:a3:de:f9:8a:ed:ed:a0:0b:8a:82:62:bd:
69:c2:81:21:1f:6f:20:c0:ed:82:4e:3c:29:10:b0:
ac:a8:21:65:b1:84:18:08:4f:92:eb:29:8f:8d:b3:
ce:81:b6:f7:61:80:01:3c:0f:42:33:7a:a3:b7:47:
b5:99:b6:6c:58:6f:c0:94:aa:4e:ec:32:43:d1:d2:
44:67:0f:33:a5:65:ef:cb:b6:02:9c:6d:58:b2:1c:
57:1f:64:8c:67:0d:cd:9a:7c:22:20:b2:ad:45:ec:
74:e5:9d:94:db:1f:b1:4f:01:6f:67:85:26:98:7e:
77:50:3c:e0:1a:10:45:58:2a:f4:cd:f3:ac:84:53:
c0:b6:de:ad:6b:5e:fd:a4:34:3c:ff:92:82:d6:fe:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:10:A6:FD:CB:4E:A3:69:C1:59:85:CD:F3:A4:6C:2B:82:4E:56:D9
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/zBCm_ctOo2nBWYXN86RsK4JOVtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.30.0/23
86.62.28.0/22
194.36.32.0/23
194.107.161.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:7d:26:73:fb:91:7d:03:7f:98:3a:0c:48:9b:ec:79:89:10:
ff:4f:31:94:b7:bb:74:e8:11:ac:71:14:9a:ff:ed:6d:1f:c4:
a2:48:f8:d0:9f:ab:07:c7:27:af:5e:e6:6f:a4:f7:08:d7:1a:
55:91:83:bc:f8:e8:2d:8b:1c:fa:62:0c:0d:38:32:96:c6:27:
c2:1c:34:d0:62:44:c5:f9:84:ff:54:c9:34:80:3b:dc:be:e3:
90:ff:80:d3:af:4b:a0:20:c5:13:fa:64:ce:71:d8:07:71:1b:
0a:32:92:cb:b1:e1:6e:9f:ed:0d:15:d0:cb:eb:2c:de:d2:10:
af:b3:53:17:1e:ab:57:1e:50:f1:e8:09:a2:38:a0:b1:b0:35:
fb:ef:5a:c6:48:6b:ff:24:4b:e1:a2:1f:e7:86:28:8d:81:9c:
0f:2d:7b:47:04:41:9e:aa:28:e4:30:e6:0f:8e:e8:48:99:15:
a1:59:5a:9a:e1:72:1e:3b:61:d6:29:65:30:4a:ec:2b:63:68:
23:e9:0d:ad:dc:59:d9:a5:d7:07:2f:a6:90:ff:74:89:e0:6a:
92:5d:c6:51:aa:f4:91:fb:b1:b0:12:ee:e2:09:16:08:ec:e0:
4b:88:8a:4e:98:e1:c0:b2:ea:74:5e:e0:1f:1e:35:7d:f4:d0:
7c:9e:18:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:12 2024 by rpki-client on console-fra.rpki-client.org