Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/ZXmgXwCwm47G-tyqwSbdLZuWwys.roa
File: ZXmgXwCwm47G-tyqwSbdLZuWwys.roa (raw, json)
Hash identifier: aTAJ/gCGQryXIi5CHBa4IwQR9TXyo5sS8Isfmik/1/s=
Subject key identifier: 65:79:A0:5F:00:B0:9B:8E:C6:FA:DC:AA:C1:26:DD:2D:9B:96:C3:2B
Certificate issuer: /CN=38a0c8826c18bcd513aaa7e52081ff9fd37919fb
Certificate serial: 01856CE5E82B72515F3BBEECA2FD9A4F96EE
Authority key identifier: 38:A0:C8:82:6C:18:BC:D5:13:AA:A7:E5:20:81:FF:9F:D3:79:19:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/ZXmgXwCwm47G-tyqwSbdLZuWwys.roa
Signing time: Sun 01 Jan 2023 10:34:44 +0000
ROA not before: Sun 01 Jan 2023 10:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206853
IP address blocks: 192.33.163.0/24 maxlen: 24
188.127.252.0/24 maxlen: 24
192.35.205.0/24 maxlen: 24
176.110.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e5:e8:2b:72:51:5f:3b:be:ec:a2:fd:9a:4f:96:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a0c8826c18bcd513aaa7e52081ff9fd37919fb
Validity
Not Before: Jan 1 10:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6579a05f00b09b8ec6fadcaac126dd2d9b96c32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:57:a0:6b:0e:88:b9:48:17:94:7e:eb:01:a8:
bb:26:e5:d1:04:72:25:bf:82:56:f7:58:ff:c3:41:
93:d7:5a:4f:0e:28:86:d5:bc:22:fd:ba:70:ab:9e:
cc:6f:0f:f7:9e:ac:91:7d:97:de:37:b6:8d:66:75:
6b:e3:a5:80:24:cd:6e:f3:61:bc:0b:2c:4f:21:ab:
2a:90:83:9d:72:7c:8f:77:76:96:32:ba:80:8b:f7:
cd:cd:59:d1:6e:8e:f3:0d:47:f0:91:51:b6:60:63:
75:d5:e9:09:2f:e0:4c:2f:e1:5b:31:a5:49:b8:df:
2c:45:ef:69:57:b4:9d:27:7a:4b:5f:8d:46:04:94:
19:de:ec:f1:1e:ca:43:56:1b:8f:29:bd:ff:25:e3:
e7:4d:e1:0e:ab:28:82:b7:b9:69:56:c8:d3:2a:29:
0b:d9:56:e0:7c:e6:13:e1:b7:38:15:1d:2a:f7:8f:
63:d8:6d:53:c7:a9:bd:86:f3:e3:f3:1a:b5:d7:2a:
72:b5:ac:97:b2:9b:bc:aa:89:8b:bf:31:f7:4b:7f:
2f:f2:50:5e:52:da:d1:c2:ba:92:a2:7b:ae:a4:11:
c7:41:4d:7d:26:d4:5b:40:10:43:67:0f:15:38:2f:
c1:9d:eb:59:3c:39:f7:34:17:f4:f3:16:2e:a4:49:
03:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:79:A0:5F:00:B0:9B:8E:C6:FA:DC:AA:C1:26:DD:2D:9B:96:C3:2B
X509v3 Authority Key Identifier:
keyid:38:A0:C8:82:6C:18:BC:D5:13:AA:A7:E5:20:81:FF:9F:D3:79:19:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/ZXmgXwCwm47G-tyqwSbdLZuWwys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.110.105.0/24
188.127.252.0/24
192.33.163.0/24
192.35.205.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:7b:3a:b7:72:1d:3a:f0:28:08:ce:f4:8d:1f:ba:6d:d2:66:
3f:4c:cf:8a:c9:f3:38:b2:ca:3a:e4:d3:3a:32:f8:20:29:3d:
68:cb:0c:33:79:63:6e:24:0f:23:8a:cf:21:28:7b:b4:a7:db:
10:da:ce:1a:b2:ba:22:d4:5f:26:83:64:f8:76:04:26:2c:47:
3f:1f:23:39:79:e0:88:9c:cb:e5:82:32:8a:91:b3:0b:03:8b:
22:a6:dd:01:fe:25:43:e6:5a:39:29:46:91:92:5c:5d:8f:87:
3e:b0:a6:ff:5d:30:a9:df:42:9d:32:c5:35:40:f1:ea:62:6d:
79:05:5c:04:46:b3:bb:80:e6:27:af:68:68:37:c8:d6:75:e3:
68:fd:ad:ff:73:c4:6e:c4:97:e6:bf:46:7b:40:ac:c2:32:64:
be:28:1b:98:1d:54:ad:46:54:4a:f5:0e:70:61:7c:d1:ff:1a:
dc:3d:d1:df:86:ee:83:40:d4:19:c1:c4:91:47:5e:42:91:c7:
4c:91:e3:eb:c7:19:6c:84:0d:ba:55:73:1a:d9:f0:2e:93:bc:
05:66:63:78:6f:fc:c7:fc:97:7c:9a:e6:27:85:56:32:aa:b4:
f9:21:45:d9:ac:11:29:19:39:9c:f3:ef:7f:78:2e:df:9d:89:
6d:ce:ff:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:33 2024 by rpki-client on console-ams.rpki-client.org