Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZzvRGZ4HMuXLUVOLfdPNn_qoxOM.roa
File: ZzvRGZ4HMuXLUVOLfdPNn_qoxOM.roa (raw, json)
Hash identifier: oPgXtMw7/grmijpWnvAuVyNJt0nbKam/h5dW2uITDuE=
Subject key identifier: 67:3B:D1:19:9E:07:32:E5:CB:51:53:8B:7D:D3:CD:9F:FA:A8:C4:E3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0188FBF7D1E7DE21D70D293671DF7A58C4EC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZzvRGZ4HMuXLUVOLfdPNn_qoxOM.roa
Signing time: Tue 27 Jun 2023 08:28:22 +0000
ROA not before: Tue 27 Jun 2023 08:28:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 86.107.51.0/24 maxlen: 24
37.153.158.0/24 maxlen: 24
89.47.55.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
89.35.131.0/24 maxlen: 24
89.45.162.0/24 maxlen: 24
93.90.74.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
188.213.216.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
77.81.65.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
92.114.32.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
45.88.13.0/24 maxlen: 24
45.88.14.0/23 maxlen: 23
77.81.88.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Jun 2023 03:55:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fb:f7:d1:e7:de:21:d7:0d:29:36:71:df:7a:58:c4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 27 08:28:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=673bd1199e0732e5cb51538b7dd3cd9ffaa8c4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f8:c8:94:bb:ce:1f:14:48:ca:d1:aa:32:b8:
40:04:af:cf:63:ae:71:96:fa:dd:3a:67:f6:bd:4c:
b0:f9:69:93:15:25:53:44:0f:f4:d4:cb:54:53:54:
76:ad:63:f0:47:0c:f1:fc:0a:28:7f:6f:80:25:11:
7d:9f:7d:40:a4:9f:51:55:3e:17:56:eb:62:4d:5c:
27:da:2b:1d:36:8c:13:ab:c3:a7:f6:15:a5:35:e6:
69:ce:84:55:ec:16:ff:ab:f2:e0:cf:e8:29:60:74:
a5:e7:6f:c3:3f:5c:ba:37:43:16:8a:38:74:50:70:
dc:5d:0e:92:d3:9d:4f:8f:f6:31:1f:90:e0:e6:89:
e2:06:fa:54:97:d5:6b:d8:15:69:04:9c:67:5c:98:
c0:31:5c:2f:6d:66:2f:eb:da:87:03:af:9a:e7:86:
58:a2:dd:dd:fc:43:29:f5:51:65:de:59:36:ae:75:
3c:c1:a7:5f:39:9d:76:70:57:cc:57:76:cf:4f:fd:
d2:79:e9:bc:7a:16:57:94:b5:e3:37:7d:58:86:ce:
ec:36:3d:92:f5:98:e4:8f:36:28:9a:f1:4a:87:d3:
63:d9:53:be:0b:f1:38:44:f6:2f:a6:f0:d1:c7:f0:
65:0e:fd:5f:51:4e:da:5d:77:a6:23:83:b7:0b:dd:
ca:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3B:D1:19:9E:07:32:E5:CB:51:53:8B:7D:D3:CD:9F:FA:A8:C4:E3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZzvRGZ4HMuXLUVOLfdPNn_qoxOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.158.0/24
45.88.13.0-45.88.15.255
77.81.65.0/24
77.81.88.0/24
86.107.51.0/24
86.107.100.0/24
89.34.106.0/24
89.35.130.0/23
89.40.215.0/24
89.45.162.0/24
89.47.36.0/24
89.47.55.0/24
92.114.32.0/24
93.90.74.0/24
176.223.188.0/24
188.213.216.0/24
188.214.107.0/24
188.241.137.0/24
Signature Algorithm: sha256WithRSAEncryption
94:16:05:bb:2e:21:be:8f:e9:2a:37:cc:a5:ab:62:c5:67:10:
fb:83:ca:dd:d7:4f:20:ff:d2:73:7d:07:ad:55:17:4a:d0:60:
ac:9a:2c:71:b9:05:ce:1e:29:15:24:c4:c1:d7:50:88:b8:7f:
0d:b4:56:b0:2f:0a:20:d3:2f:a8:99:8c:ec:05:b6:b3:64:d0:
c5:7a:44:30:c2:60:42:d0:14:f1:5e:a5:df:80:a8:eb:0d:59:
97:b9:3b:9c:45:28:7a:8f:b8:0c:c7:cc:50:12:2b:fa:52:48:
44:ce:c7:d3:b1:75:23:49:9b:49:53:11:b3:6b:27:77:8a:f4:
57:88:d4:28:aa:9d:19:67:1a:86:23:ad:17:50:30:47:13:f5:
f2:d0:29:52:12:0e:e6:0e:94:ef:23:76:88:e4:a6:f0:21:5c:
48:5d:7c:8e:89:1a:ec:65:90:f2:96:8c:2b:bb:b6:50:8c:60:
c4:b3:21:a1:24:27:cd:07:cf:ee:ca:b7:fd:34:05:9f:49:4b:
c9:b4:0a:b3:dc:41:f2:2b:30:1b:ad:33:07:39:19:6c:41:b8:
98:e0:72:93:18:fc:5a:9c:e5:5b:ad:da:4b:18:a4:95:a4:e6:
f3:76:2d:ac:24:a6:4e:46:a6:05:c3:a9:ea:8c:d7:76:c6:01:
a6:e0:17:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org