Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/ZinDoLmgFDxKhftMbjgtKW31skY.roa
File: ZinDoLmgFDxKhftMbjgtKW31skY.roa (raw, json)
Hash identifier: W7fCAMLrOIz83XWTVnwOUo+QqABLFtcSspAn0VhzY/8=
Subject key identifier: 66:29:C3:A0:B9:A0:14:3C:4A:85:FB:4C:6E:38:2D:29:6D:F5:B2:46
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018CC9BC6CFC4CA9CE67D11782E6F1B0390C
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/ZinDoLmgFDxKhftMbjgtKW31skY.roa
Signing time: Tue 02 Jan 2024 10:33:38 +0000
ROA not before: Tue 02 Jan 2024 10:33:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149767
IP address blocks: 46.20.109.0/24 maxlen: 24
46.20.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 12:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:6c:fc:4c:a9:ce:67:d1:17:82:e6:f1:b0:39:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jan 2 10:33:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6629c3a0b9a0143c4a85fb4c6e382d296df5b246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:1c:91:d1:a4:c3:7c:d2:8f:da:81:53:55:
58:97:e3:82:13:95:27:af:de:b3:9f:67:7d:7f:1d:
98:59:cf:42:c1:de:7a:8a:bc:89:a9:8b:6a:96:48:
6b:2a:02:f4:df:2c:59:b5:f1:23:ad:16:99:af:e2:
fc:33:82:74:0d:02:f7:dd:b8:96:a1:0f:0c:b5:9e:
61:70:8c:5c:c7:36:ff:b2:92:af:e7:c0:26:8e:bc:
47:6d:7b:42:92:86:1c:fd:d0:a1:ee:81:34:41:40:
dc:d7:f6:b6:ef:41:ed:d8:70:40:45:b1:b3:0a:a5:
90:fd:11:14:9a:41:a8:60:c2:06:15:70:f3:fa:c7:
90:60:0a:8d:36:7c:92:f8:24:67:3a:8d:5b:c6:db:
8d:aa:73:ea:ca:59:7d:af:67:74:6f:92:67:26:b6:
b1:bb:d4:c6:cf:90:55:54:e6:6b:9e:b1:72:0e:71:
b9:4a:44:b3:71:c6:c7:11:ff:86:63:5e:a9:ad:83:
fe:02:03:b6:55:ab:ba:b4:40:26:47:57:7f:63:06:
3a:04:a3:d2:8f:1b:4c:b9:cc:aa:0a:b5:4a:32:71:
c9:52:5e:f5:7d:50:6f:ae:a4:c1:63:15:94:86:06:
ad:d9:c7:8f:09:19:b7:12:e6:23:ed:da:c2:3b:31:
1a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:29:C3:A0:B9:A0:14:3C:4A:85:FB:4C:6E:38:2D:29:6D:F5:B2:46
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/ZinDoLmgFDxKhftMbjgtKW31skY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.99.0/24
46.20.109.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ac:f1:63:82:e7:af:9c:42:6c:f2:52:6a:c9:83:97:c9:5f:
fd:18:c4:f0:6e:87:1e:57:aa:f3:6b:16:19:6f:9d:db:a5:3c:
3b:2e:fe:9b:e8:9f:27:d9:13:54:a9:a3:f2:c6:c0:1c:3b:c5:
f7:eb:3d:82:7e:ab:e2:73:e4:84:80:df:19:78:23:bc:24:5d:
14:51:fb:f4:12:4b:f8:9a:bc:be:98:1f:c7:44:14:db:9a:8c:
37:78:54:24:87:f8:37:09:fb:7e:e8:8f:5e:60:1c:62:8a:e4:
8f:7b:27:ed:b4:5d:6f:02:f6:92:31:7f:0e:4a:ad:4b:6b:81:
02:0f:87:72:98:14:0b:7a:ce:89:d7:53:1d:56:f1:ff:f0:d1:
8a:c9:87:4c:c6:73:9a:80:8a:da:15:ba:4d:bd:06:9b:ca:be:
76:48:45:0a:0c:2f:fa:6b:48:46:52:26:8a:6f:ab:aa:5f:81:
db:88:03:81:7b:e5:79:37:85:a7:e5:8a:e2:3a:bb:50:c4:56:
41:d0:29:12:a5:b4:88:45:e3:d9:df:a2:52:c5:b4:f1:f5:95:
df:05:a4:18:df:04:7c:20:aa:d3:0a:84:72:8a:61:3e:4e:9c:
d4:a3:fe:b9:80:6a:0b:73:db:c6:c7:5c:28:46:d6:82:45:3f:
68:23:61:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:06:39 2025 by rpki-client