Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/ZJR5u7VoRsRyNN7xFEr8NawBBKs.roa
File: ZJR5u7VoRsRyNN7xFEr8NawBBKs.roa (raw, json)
Hash identifier: x/QHL9oRDKxgJQZGlidxLAWorV/ohh//+3Tcx9cTBJk=
Subject key identifier: 64:94:79:BB:B5:68:46:C4:72:34:DE:F1:14:4A:FC:35:AC:01:04:AB
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 018CC8DCDCE380F957936D8986246E7F94A1
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/ZJR5u7VoRsRyNN7xFEr8NawBBKs.roa
Signing time: Tue 02 Jan 2024 06:29:26 +0000
ROA not before: Tue 02 Jan 2024 06:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48851
IP address blocks: 94.188.222.0/24 maxlen: 24
94.188.233.0/24 maxlen: 24
94.188.232.0/24 maxlen: 24
94.188.234.0/24 maxlen: 24
94.188.235.0/24 maxlen: 24
94.188.236.0/24 maxlen: 24
92.61.238.0/24 maxlen: 24
94.188.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 11:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:dc:e3:80:f9:57:93:6d:89:86:24:6e:7f:94:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Jan 2 06:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=649479bbb56846c47234def1144afc35ac0104ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3f:e5:e7:9b:cd:09:25:b6:bd:c7:ca:b7:6d:
fc:16:8a:42:99:5a:9d:cf:04:58:05:ad:0e:e9:39:
87:c2:e5:60:f9:6a:c9:85:00:2c:e0:46:f7:f1:9d:
80:15:e6:82:c0:bb:49:e2:a6:7c:42:98:4e:6f:9d:
26:24:0d:bb:e3:57:a5:ae:04:3c:96:9b:5b:f9:fd:
73:46:79:94:a3:9d:3a:16:a5:c2:bc:5b:2b:88:88:
92:b7:5b:65:1c:21:97:1c:21:7b:4d:20:ab:73:22:
d1:0e:53:bd:77:fb:1a:de:a2:e7:93:e7:1e:d8:12:
16:2f:5a:f0:04:31:9e:61:df:72:eb:d4:e0:c4:11:
ff:08:1e:a4:36:dd:91:6f:77:dc:f7:b8:a3:3a:73:
2c:e1:1e:9b:5b:10:97:0e:23:2c:2d:55:ef:4d:64:
86:e7:0c:82:dc:24:72:b3:00:80:c2:ed:b1:38:ae:
0b:5c:7b:87:ae:08:a4:99:44:b4:31:d5:5d:37:56:
21:69:a1:d1:91:e1:7b:5b:19:93:95:32:5a:66:45:
d2:10:7b:fd:9e:b7:31:12:58:c7:d6:10:5a:21:11:
c4:e7:c3:11:90:9d:f7:20:3d:59:e9:02:96:1d:bf:
d2:1d:e4:82:85:92:ee:94:5c:e6:48:50:7e:0b:d8:
a4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:94:79:BB:B5:68:46:C4:72:34:DE:F1:14:4A:FC:35:AC:01:04:AB
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/ZJR5u7VoRsRyNN7xFEr8NawBBKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.238.0/24
94.188.210.0/24
94.188.222.0/24
94.188.232.0-94.188.236.255
Signature Algorithm: sha256WithRSAEncryption
1d:a8:09:79:cf:99:74:6f:56:52:29:45:2a:bd:c3:2c:67:d7:
84:8a:38:7e:88:35:29:38:23:95:51:3b:cd:f0:cf:80:e8:5d:
f2:3f:9a:10:d3:f5:91:65:a1:41:ae:58:ba:8e:5b:13:84:4c:
e3:e9:e3:07:fb:85:d2:bf:34:53:45:46:60:b2:2c:4b:21:ac:
d6:5a:58:42:98:b8:c4:f8:ce:43:4d:df:03:64:45:a8:76:02:
c7:f7:2a:a3:c3:d2:e1:19:f9:f6:88:51:1f:df:9a:c8:45:36:
6f:cc:f2:d6:5b:33:5b:b7:db:28:d7:51:68:29:f9:b4:6d:d2:
75:92:2f:5d:93:88:0a:07:d2:2c:ce:e6:32:ca:28:b0:70:b4:
2a:22:d3:a0:8a:fd:a4:82:cb:73:5a:29:c5:4d:4d:05:a1:16:
19:66:8c:ab:41:94:93:fe:1b:ba:17:23:2d:2b:00:99:88:e8:
25:21:d6:9b:53:13:45:a3:82:0b:5e:65:cc:01:82:18:ad:43:
33:dd:6b:49:7d:0b:a3:e2:55:31:3f:27:12:7b:3e:48:0f:b2:
f8:e7:b3:1d:79:17:1d:38:cd:4e:38:4a:37:4c:67:ce:6f:71:
ba:e1:69:87:99:ff:c8:74:44:bc:f9:c3:c2:5c:ef:1d:ce:34:
92:0e:85:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 15:10:45 2024 by rpki-client on console-ams.rpki-client.org