Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZK8nnqpE2T03tdkD14ZQgDZbPHE.roa
File: ZK8nnqpE2T03tdkD14ZQgDZbPHE.roa (raw, json)
Hash identifier: oeRw6s+yHj53r1TqOzv/o5pPOfiyzLiwrbTxgs1UFsg=
Subject key identifier: 64:AF:27:9E:AA:44:D9:3D:37:B5:D9:03:D7:86:50:80:36:5B:3C:71
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0185BEFC8C7703F4C1675A091E9F84EA74C0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZK8nnqpE2T03tdkD14ZQgDZbPHE.roa
Signing time: Tue 17 Jan 2023 09:08:20 +0000
ROA not before: Tue 17 Jan 2023 09:08:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 188.241.136.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
93.114.244.0/24 maxlen: 24
185.112.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Jan 2023 12:44:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:be:fc:8c:77:03:f4:c1:67:5a:09:1e:9f:84:ea:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 17 09:08:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64af279eaa44d93d37b5d903d7865080365b3c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cb:18:e1:2b:e1:16:95:cc:10:5d:d3:96:fc:
0b:bb:4c:8f:82:ce:c9:92:8c:a9:33:54:3b:ab:cf:
b1:2a:fd:1b:b5:37:c1:e5:f9:aa:b4:5d:36:0f:75:
dc:1a:88:76:8e:64:8e:06:52:18:a0:bd:f9:92:ac:
63:bb:2e:78:4b:f2:54:4c:c8:82:ae:12:79:bd:1d:
4c:57:36:b2:b7:de:c5:26:05:72:92:b0:e1:ca:80:
61:93:7f:ad:d5:01:e8:7f:1f:24:01:5d:00:0f:57:
e1:ad:46:89:9a:17:f2:d7:ab:27:b4:6b:f9:82:df:
12:ce:8c:24:ec:c5:21:7c:98:86:f0:4f:41:8e:e4:
f0:43:de:ac:a1:e4:08:56:a4:55:66:32:b5:01:ae:
f3:5d:03:30:57:95:ae:ac:05:5d:8c:01:ee:5b:8a:
b0:18:53:e7:52:75:4b:17:c2:d1:de:a5:06:7a:4d:
3c:e5:eb:dc:04:1e:f5:8b:5b:f6:d9:a5:50:e0:a3:
f5:b9:a1:03:be:d3:f8:91:6b:ef:38:2c:d2:4b:16:
be:00:89:5c:bc:ea:00:89:d2:25:92:58:39:f3:18:
93:d9:16:d3:3d:8d:4c:b6:8c:5e:8d:8f:bb:fb:53:
43:ba:26:49:c0:c5:34:fc:20:cd:7f:63:d6:be:ac:
9b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AF:27:9E:AA:44:D9:3D:37:B5:D9:03:D7:86:50:80:36:5B:3C:71
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZK8nnqpE2T03tdkD14ZQgDZbPHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.244.0/24
185.112.249.0/24
188.241.136.0/23
Signature Algorithm: sha256WithRSAEncryption
40:18:f9:6e:47:a6:53:7b:ab:b8:ee:33:10:48:fd:c7:83:f8:
4f:70:ff:14:09:90:f2:85:d4:74:e1:a3:20:b6:66:6d:f2:83:
9f:1d:b3:45:f3:18:fd:a0:43:33:c8:82:df:63:b2:74:93:a7:
85:b6:76:6c:78:4e:d2:73:8e:4d:44:32:65:e4:dd:09:56:00:
4b:f6:77:52:9b:a3:8f:c2:2c:50:ab:89:66:ae:75:c5:86:60:
35:7b:4d:70:e2:3c:07:d3:3a:c2:af:db:b6:ef:a4:18:7d:57:
1b:82:66:4f:7c:f3:84:de:2f:ba:45:ca:2c:a2:ff:4e:01:cf:
24:6a:dc:f3:b0:0d:0d:d6:92:13:bf:eb:18:37:e1:ab:fb:4e:
ff:af:1a:c4:c5:09:bf:68:ff:82:50:69:d0:8a:b2:bf:33:da:
6a:f0:4e:07:d6:e4:c2:e1:6f:8e:cb:0a:d5:37:38:33:16:9e:
83:19:68:01:1e:c1:f2:33:57:7b:ce:5a:d2:0b:48:29:0f:4d:
60:e2:f0:25:1a:d0:41:87:33:2a:c5:f8:ba:da:0e:6a:54:d9:
e1:f7:5c:2b:10:f3:5b:c5:cb:16:df:53:83:79:90:7c:01:70:
e8:f5:74:2d:94:6e:05:1a:c9:13:2b:f1:dd:12:83:6d:7d:1f:
74:0a:dc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org