Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/Ziiju6mbeIEDhO84vIyFCwnsPc0.roa
File: Ziiju6mbeIEDhO84vIyFCwnsPc0.roa (raw, json)
Hash identifier: 9U2zAnudFl3BFJg5IYdzw4LKlxtzw3FQ8L4JmclGUfQ=
Subject key identifier: 66:28:A3:BB:A9:9B:78:81:03:84:EF:38:BC:8C:85:0B:09:EC:3D:CD
Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Certificate serial: 01856F14A42C0748650ABA91B6583ED48592
Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/Ziiju6mbeIEDhO84vIyFCwnsPc0.roa
Signing time: Sun 01 Jan 2023 20:45:01 +0000
ROA not before: Sun 01 Jan 2023 20:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12329
IP address blocks: 212.23.128.0/19 maxlen: 24
81.173.6.0/24 maxlen: 24
185.249.168.0/22 maxlen: 24
62.221.232.0/21 maxlen: 24
62.221.240.0/21 maxlen: 24
2001:7d8::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 22 Sep 2023 06:50:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:a4:2c:07:48:65:0a:ba:91:b6:58:3e:d4:85:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Validity
Not Before: Jan 1 20:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6628a3bba99b78810384ef38bc8c850b09ec3dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0a:d9:99:0f:42:b9:50:80:1c:c2:cb:4b:77:
0b:c2:70:35:78:45:4a:c2:c2:c1:8b:7a:2a:f3:61:
b3:c6:9f:18:8a:35:f6:a7:ad:42:8b:2e:04:b4:f5:
8d:ca:38:ad:ea:fe:04:45:91:c2:d1:d9:05:3a:24:
ae:0f:44:48:f5:df:fe:e2:1a:1b:01:7b:03:0d:e1:
11:5c:03:aa:2e:2b:79:ed:84:83:fc:54:ba:f5:39:
d4:0b:a9:13:f9:c6:fc:fa:c9:66:ac:db:7b:89:d6:
19:d1:fb:f0:79:1b:8c:d3:6d:80:b0:d2:6a:a1:dd:
41:ac:4b:81:35:cf:34:5e:35:f9:c3:7a:15:ee:45:
e5:9b:c2:97:69:d5:bb:b1:7d:4f:1c:37:cc:13:f8:
39:bc:c7:46:62:b1:3d:2e:fd:9e:28:0e:67:1f:2f:
ff:83:8f:d3:e2:81:14:c8:fc:78:f0:f6:c9:a5:19:
fc:8c:39:04:c1:dd:a6:6b:12:9a:c5:68:40:79:70:
6b:05:a3:e0:7c:5d:59:2f:72:a3:f9:c4:48:d7:4a:
ff:ff:b3:17:10:79:c1:96:79:74:fb:7f:c9:12:58:
aa:1d:9a:ea:e0:d7:f0:86:16:d1:89:e7:31:20:d9:
9a:28:94:1d:69:2c:a9:2f:7e:cd:fb:a1:2f:3c:c5:
6e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:28:A3:BB:A9:9B:78:81:03:84:EF:38:BC:8C:85:0B:09:EC:3D:CD
X509v3 Authority Key Identifier:
keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/Ziiju6mbeIEDhO84vIyFCwnsPc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.221.232.0-62.221.247.255
81.173.6.0/24
185.249.168.0/22
212.23.128.0/19
IPv6:
2001:7d8::/32
Signature Algorithm: sha256WithRSAEncryption
6f:cf:47:3f:9d:2d:d4:40:1d:77:82:d9:9d:ff:10:d2:c1:ba:
7c:e9:c2:8c:9a:f3:6b:c8:31:5c:98:a5:54:dc:b2:53:28:f7:
be:7c:39:b9:94:52:f4:16:0d:bd:a3:a4:65:dc:51:74:92:4a:
c2:98:fe:05:ff:df:83:fc:d3:27:98:92:0b:fa:ec:76:3c:f2:
7a:e6:46:de:ac:ee:87:9a:cf:0e:3e:26:d6:c6:7f:9a:de:30:
5d:83:96:a9:40:69:49:1d:72:0c:75:24:20:83:a1:7c:13:9c:
f5:6c:23:a5:e1:82:ad:e4:88:38:3d:45:17:b2:01:ca:6b:73:
c0:35:91:45:14:b7:3a:57:88:c4:36:0e:62:48:25:55:28:80:
3e:ea:ba:2e:8a:83:c9:f6:bc:44:29:fe:24:37:34:77:a6:57:
10:14:a3:d4:31:d4:fb:dd:df:3d:dc:35:11:f9:58:c6:d2:75:
4d:84:f3:88:75:f0:ce:78:1e:ea:e1:91:3a:f1:3c:0a:48:f4:
f6:05:c1:e7:82:96:cd:1c:6d:b1:70:1d:0f:42:1d:12:ee:b2:
a9:93:8b:07:ca:8a:e1:ed:df:f3:ca:9b:60:43:93:09:b2:09:
f4:d1:27:20:92:d6:0b:cc:2a:b7:0b:fc:bb:5d:29:be:da:ee:
5f:9a:45:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:56 2024 by rpki-client on console-fra.rpki-client.org