Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/gZzck_lXJBVRW82xt8TYc_hcsfs.roa
File: gZzck_lXJBVRW82xt8TYc_hcsfs.roa (raw, json)
Hash identifier: wQV/RL9ud9RPM0REViDIBK6krP6+8EV5cggsJ2Z5WGM=
Subject key identifier: 81:9C:DC:93:F9:57:24:15:51:5B:CD:B1:B7:C4:D8:73:F8:5C:B1:FB
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018E4EE5793508F4D224D29F2EAEF5834FC4
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/gZzck_lXJBVRW82xt8TYc_hcsfs.roa
Signing time: Mon 18 Mar 2024 00:10:45 +0000
ROA not before: Mon 18 Mar 2024 00:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48449
IP address blocks: 46.20.104.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.160.195.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 07:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4e:e5:79:35:08:f4:d2:24:d2:9f:2e:ae:f5:83:4f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Mar 18 00:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=819cdc93f9572415515bcdb1b7c4d873f85cb1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:81:83:62:9f:2f:73:c3:86:e1:b9:a9:67:59:
8f:06:64:bf:ec:47:e1:b5:c4:86:43:75:fe:e6:7e:
ab:ff:93:af:37:a3:ed:bf:30:65:aa:ea:a1:13:65:
80:26:44:e1:5c:3d:27:9b:f0:d9:e4:ca:ef:49:79:
31:3e:73:43:3d:fe:56:af:92:1f:a4:f9:4d:70:68:
6b:14:b4:67:f7:be:78:ea:a6:7e:53:65:82:eb:43:
c5:41:14:cf:ca:84:60:0d:14:d5:63:87:ba:03:51:
4d:e4:e8:3e:c1:91:8b:24:b6:7f:eb:7d:a1:59:9b:
bf:51:1e:81:45:77:95:ef:f3:49:73:7f:0c:40:cc:
9e:d9:49:7e:eb:03:51:82:3d:9e:e0:d3:dd:4f:ac:
49:86:c7:4e:28:4b:61:db:df:20:19:db:dc:d4:74:
f4:4d:31:60:00:18:c9:02:8b:24:0f:79:57:da:de:
12:8f:f0:25:e8:9b:18:38:ba:b6:de:32:36:52:41:
5c:d8:59:cd:00:bc:e9:32:0d:3e:6a:a0:4d:2e:db:
da:76:0b:f3:a5:5c:6c:76:e2:c1:98:8a:92:8b:d0:
8c:b9:93:50:a4:07:1c:c7:ab:6a:63:76:93:ea:c4:
19:5c:21:5a:de:97:f7:74:02:49:25:d9:93:b1:e2:
58:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9C:DC:93:F9:57:24:15:51:5B:CD:B1:B7:C4:D8:73:F8:5C:B1:FB
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/gZzck_lXJBVRW82xt8TYc_hcsfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.104.0/24
185.160.194.0/23
185.169.221.0-185.169.223.255
Signature Algorithm: sha256WithRSAEncryption
76:4b:2c:13:a1:4a:7d:7d:1b:c1:8c:4b:9d:9b:76:36:a8:98:
4c:fa:2b:44:f0:ca:ea:aa:b9:f4:cd:b9:91:e8:f5:63:5c:b9:
3d:47:ca:e8:42:22:be:1c:34:1b:59:8e:af:95:82:6d:4a:90:
c9:db:a6:91:94:7b:b9:d5:e8:f3:97:04:fd:ba:f0:6e:59:d5:
d1:c4:88:6e:d4:02:86:45:3e:02:b8:c0:43:ed:b2:f3:35:16:
bc:7b:b6:87:5f:2e:04:2f:f3:00:14:2f:f0:d2:1b:a0:ca:00:
74:14:c3:3a:fc:e3:7d:4e:a3:6c:e4:21:f5:0c:7b:9e:dc:fe:
86:64:92:d6:24:26:3b:b8:0d:6e:e0:4a:3c:b7:6c:14:f0:7e:
80:be:b0:8c:6c:e8:e5:c3:c4:3d:2b:7c:f7:bf:37:3a:0a:e2:
e3:e2:21:b9:bd:78:28:9c:97:30:84:15:be:df:8f:7d:68:45:
7a:7c:94:a3:48:d6:7a:21:49:83:82:fb:b9:35:bc:13:fb:7b:
6a:95:c4:26:69:f4:72:a8:2d:de:d7:14:6f:d5:15:7f:6d:96:
11:47:e6:fc:3b:e6:ec:59:93:62:89:2f:3a:b6:c8:da:b4:3c:
b9:d6:7c:df:8a:4c:d9:40:6d:6b:7c:fb:65:d6:8d:e6:95:1f:
b2:91:44:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:10:03 2025 by rpki-client