Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/zoIncjukOdGcx-Qt_x3fgMQbghA.roa
File: zoIncjukOdGcx-Qt_x3fgMQbghA.roa (raw, json)
Hash identifier: 3Q6FwZNxlQdoYzBVaGl8rlX2aAhata++KbWee2fizrc=
Subject key identifier: CE:82:27:72:3B:A4:39:D1:9C:C7:E4:2D:FF:1D:DF:80:C4:1B:82:10
Certificate issuer: /CN=f6f18c02405742c25377d696cd2a69dcc974bff8
Certificate serial: 019128FCD7991D9BE6BF82A8B78BA3DD9757
Authority key identifier: F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/zoIncjukOdGcx-Qt_x3fgMQbghA.roa
Signing time: Tue 06 Aug 2024 18:39:04 +0000
ROA not before: Tue 06 Aug 2024 18:39:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48919
IP address blocks: 31.128.160.0/21 maxlen: 21
95.215.92.0/22 maxlen: 22
2001:67c:19ac::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:28:fc:d7:99:1d:9b:e6:bf:82:a8:b7:8b:a3:dd:97:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f18c02405742c25377d696cd2a69dcc974bff8
Validity
Not Before: Aug 6 18:39:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce8227723ba439d19cc7e42dff1ddf80c41b8210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:3d:28:24:dc:1f:ce:da:32:52:1a:c8:38:
a7:b5:38:67:b7:d3:05:f0:68:79:95:99:ac:1e:a9:
26:4a:ba:c4:bd:27:83:0d:67:d9:8c:b0:6e:a9:2a:
f1:ef:5e:13:45:ab:3a:08:86:67:84:f8:35:65:9e:
2c:cf:b4:69:b4:ea:2d:98:8e:41:a7:7a:fb:7d:af:
a8:21:24:41:87:47:a3:e8:6d:de:06:cb:52:9f:f4:
76:d8:9c:6a:6d:c2:1a:51:e7:c1:6a:79:eb:30:3e:
ec:89:e5:56:df:80:fa:d3:c6:91:84:b3:35:7d:1e:
08:22:33:78:8d:37:21:47:44:f9:df:3c:4c:45:09:
48:f3:29:ad:11:2c:ff:db:70:c2:8b:40:2b:23:3e:
2e:fc:21:ee:82:89:99:b2:94:c3:f4:2b:19:5c:51:
35:74:4a:bf:de:0c:40:e3:26:a1:8f:0f:2b:b7:6a:
61:08:8a:65:6b:96:9b:d1:de:34:7a:f2:ec:8b:b2:
85:2e:b1:3b:9e:17:67:b3:37:18:f1:6f:be:55:b3:
b9:63:a4:d3:82:5e:d4:76:a3:9b:3c:f7:8f:f9:48:
1c:1c:ed:41:36:1f:2e:ca:51:08:dc:72:10:89:bd:
48:e0:4e:7c:9d:b1:3f:fb:88:78:17:8e:54:9b:e7:
82:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:82:27:72:3B:A4:39:D1:9C:C7:E4:2D:FF:1D:DF:80:C4:1B:82:10
X509v3 Authority Key Identifier:
keyid:F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/zoIncjukOdGcx-Qt_x3fgMQbghA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.160.0/21
95.215.92.0/22
IPv6:
2001:67c:19ac::/48
Signature Algorithm: sha256WithRSAEncryption
14:88:56:dd:ec:a4:e7:1c:fc:60:b8:10:be:85:1d:e8:36:47:
ec:15:8c:b0:54:72:07:a2:7c:ac:30:c7:ec:97:24:f9:59:18:
05:c2:ee:24:43:22:0f:07:c0:9b:11:44:bd:1b:3a:9d:42:3e:
d5:0d:8e:6d:76:5a:98:7f:c7:a5:2f:d7:b6:8c:1e:1b:17:8e:
3a:13:d9:07:80:ab:cb:05:b5:e1:b9:24:d8:db:6b:a3:fe:5c:
20:20:c6:cf:c9:f1:84:c1:6f:04:01:90:ab:3a:3c:2e:37:14:
9c:73:28:7e:56:01:7e:e4:95:7b:ff:43:1a:fe:ff:9d:8b:ba:
71:f8:37:23:60:a5:17:0c:8d:33:80:7b:48:42:3a:f8:30:aa:
d8:0f:d6:a0:bb:09:59:2d:89:4d:25:05:ae:9b:a5:8c:06:34:
e7:d6:73:c5:ec:d3:97:c1:8d:91:e6:71:07:3c:67:39:af:24:
05:f0:3b:65:75:a0:4d:b3:e1:70:10:52:e6:0e:4c:2e:1e:17:
ef:76:ba:3f:ca:2b:95:8a:ee:d9:1f:bf:51:b5:58:96:de:7d:
02:6e:79:d0:7b:ff:2e:ee:40:48:1d:a5:ac:4e:f3:0e:ae:51:
28:56:70:a3:f2:92:32:2f:42:82:17:8e:37:6f:3e:f6:f3:1b:
d9:cf:77:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:32 2025 by rpki-client