Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZFRzG5ZtS9RiIzC4IxPJJnICiXE.roa
File: ZFRzG5ZtS9RiIzC4IxPJJnICiXE.roa (raw, json)
Hash identifier: oSXez8DiRY26rYoxG2PierEE6Qq8U5gd46HRs6oMzJo=
Subject key identifier: 64:54:73:1B:96:6D:4B:D4:62:23:30:B8:23:13:C9:26:72:02:89:71
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193BBD7CD7E261459C5174F9493467B1285
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZFRzG5ZtS9RiIzC4IxPJJnICiXE.roa
Signing time: Thu 12 Dec 2024 17:08:22 +0000
ROA not before: Thu 12 Dec 2024 17:08:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36666
IP address blocks: 185.141.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bb:d7:cd:7e:26:14:59:c5:17:4f:94:93:46:7b:12:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 12 17:08:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6454731b966d4bd4622330b82313c92672028971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:ba:84:31:82:65:36:5d:08:a6:d5:87:db:
47:f0:52:89:4d:65:37:8e:d9:62:aa:8c:59:71:c5:
90:29:be:d1:4b:1b:46:dd:c6:e0:ff:93:bf:a7:46:
34:55:0b:81:88:1c:a3:42:79:16:d5:ac:6f:b2:bf:
1a:e5:cc:b4:b1:c4:80:54:0b:73:c8:8b:17:62:b1:
e6:f6:f4:0c:7d:e0:a7:07:99:2c:f2:f9:01:0a:3d:
e5:3e:60:50:3b:20:89:d7:38:30:fd:2a:e5:23:9c:
66:f8:0f:df:36:62:66:af:a9:20:14:b4:6e:a0:e0:
21:1e:80:51:e4:52:47:9a:a1:92:5f:8d:99:a5:be:
15:2f:d3:fd:bc:02:c1:ff:e0:72:a7:73:7c:12:ab:
d8:f5:b0:6d:a9:d5:05:db:87:20:83:54:00:26:c8:
05:a8:82:af:20:98:ba:3f:2f:3e:79:19:f6:c3:3c:
90:b9:14:ac:14:1f:ef:5e:e0:db:be:14:94:9b:a0:
95:c0:1c:87:ca:2e:40:2c:84:17:9a:79:24:8b:3d:
ec:10:2c:03:e9:c6:cd:85:3a:cb:39:84:df:e3:73:
82:69:f9:06:e7:14:1f:cf:2b:84:15:de:0e:2e:f7:
96:6b:05:ba:41:7e:4c:8e:6a:a6:76:06:b8:6d:8f:
83:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:54:73:1B:96:6D:4B:D4:62:23:30:B8:23:13:C9:26:72:02:89:71
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZFRzG5ZtS9RiIzC4IxPJJnICiXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.218.0/24
Signature Algorithm: sha256WithRSAEncryption
04:7b:94:99:e5:05:ea:23:84:82:6b:fc:d6:30:d8:11:58:7b:
de:b4:69:6e:62:88:97:cd:9f:9c:84:ff:58:88:2f:0f:c9:92:
e1:68:fa:ed:d0:14:80:21:03:d9:06:6e:2e:4d:b6:65:23:19:
ca:17:d9:c9:e2:4c:1f:ae:e9:6a:f4:ce:16:c9:67:1c:db:aa:
9d:7b:dc:e0:46:60:14:10:5c:85:66:cc:a1:1d:76:a2:e1:58:
e0:9c:03:90:1e:9c:46:ea:bf:eb:1e:9c:fb:51:94:4f:4e:40:
f2:8b:37:a5:da:28:e2:54:20:d2:e4:1b:58:f5:f9:ed:70:c8:
45:6c:cd:63:37:9d:48:cd:97:9f:54:b6:a4:b0:40:5f:9f:d6:
8e:47:47:d6:88:38:59:18:5b:0c:e3:32:d9:c7:e0:be:d6:a0:
fb:32:94:1d:26:23:8e:84:3e:57:d7:9e:c2:a8:14:81:76:00:
0e:58:df:b0:f6:b9:25:6e:f7:8c:c5:90:8a:7a:3a:e8:8e:5d:
52:dd:c1:82:8e:bc:d6:9d:33:fb:3d:e1:7a:6d:f8:7c:18:66:
51:7b:54:87:96:21:fd:c6:38:8e:03:18:f4:4d:c5:c6:f0:b3:
1e:78:90:c3:dd:a2:72:2d:d2:e8:cc:6f:71:ca:98:e1:1d:c0:
b0:d6:2a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:46 2025 by rpki-client