Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ZqLh7jC3xqVwoAcZocwAKZDEzTg.roa
File: ZqLh7jC3xqVwoAcZocwAKZDEzTg.roa (raw, json)
Hash identifier: 16RdHjvbc/YaY8MftWDPfEipnklPbVvW14qyzZXdGyE=
Subject key identifier: 66:A2:E1:EE:30:B7:C6:A5:70:A0:07:19:A1:CC:00:29:90:C4:CD:38
Certificate issuer: /CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Certificate serial: 019274FC1AD85E966ADDEBCA05AEDEAF364F
Authority key identifier: 8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ZqLh7jC3xqVwoAcZocwAKZDEzTg.roa
Signing time: Thu 10 Oct 2024 05:52:11 +0000
ROA not before: Thu 10 Oct 2024 05:52:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41549
IP address blocks: 185.37.72.0/22 maxlen: 22
194.11.218.0/23 maxlen: 23
195.20.64.0/19 maxlen: 19
213.159.144.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 14 Oct 2024 04:40:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:74:fc:1a:d8:5e:96:6a:dd:eb:ca:05:ae:de:af:36:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Validity
Not Before: Oct 10 05:52:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66a2e1ee30b7c6a570a00719a1cc002990c4cd38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:45:f1:eb:2c:8a:43:52:36:52:e4:7e:33:4f:
c8:76:63:f6:8f:da:e4:8f:76:f8:a6:a1:28:13:85:
78:15:99:d4:6d:06:e2:0e:cc:17:5b:15:41:db:f8:
b6:00:91:17:e8:4c:58:10:39:20:68:45:a8:27:95:
ca:27:b5:0c:c1:36:c0:09:ee:b2:7f:e5:f7:06:48:
3b:cc:a2:c2:cd:9f:b0:23:70:d7:1d:81:69:1c:bd:
6a:a3:fe:7a:2d:35:76:83:c1:ef:27:9a:67:80:94:
66:70:2c:d9:23:0f:90:a1:f1:4c:87:ad:39:55:96:
08:78:84:50:5c:50:be:0a:6f:d4:a3:c7:3f:ff:ce:
8f:1f:19:04:c8:0d:69:de:8c:eb:be:32:1f:9e:6b:
f4:59:71:9b:31:c4:af:59:f4:7f:0e:ae:d4:d3:60:
b8:2b:97:77:c4:f8:94:ef:91:de:0d:c4:6d:81:f8:
be:6a:52:8b:94:a8:0e:75:fb:83:f9:00:52:2e:6c:
39:ea:a4:c2:e3:f7:bd:36:b2:70:f5:d3:c3:f9:e1:
e0:92:1f:9d:3b:8f:55:61:73:47:37:06:d2:bb:3a:
4f:ee:0e:53:cf:f9:fc:1d:21:6f:f9:22:d4:bb:82:
a7:0d:7c:bf:7a:53:e1:16:3b:b4:b2:3a:6d:38:92:
9b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A2:E1:EE:30:B7:C6:A5:70:A0:07:19:A1:CC:00:29:90:C4:CD:38
X509v3 Authority Key Identifier:
keyid:8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ZqLh7jC3xqVwoAcZocwAKZDEzTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.72.0/22
194.11.218.0/23
195.20.64.0/19
213.159.144.0/20
Signature Algorithm: sha256WithRSAEncryption
b0:b2:d8:5f:60:99:29:26:bd:28:17:6f:92:ca:97:01:16:10:
7a:7c:a1:70:e8:fa:8f:a4:73:09:f9:13:50:13:89:a8:a4:2c:
d3:f6:e2:a0:34:45:8e:6b:3b:46:f9:25:82:fb:1d:5e:fb:a0:
21:8b:b7:c2:72:7f:7c:ac:66:49:67:b2:0b:1a:b8:6d:63:5e:
1b:b0:15:62:4b:d0:75:61:04:ed:20:c7:7c:f8:c4:c4:47:c1:
b5:60:2b:a2:56:04:4e:04:6d:6a:36:5c:7c:26:7a:73:05:b3:
06:ab:a5:08:a5:35:79:f7:aa:18:8f:b2:1e:d4:8e:55:3e:e0:
1a:e0:51:81:4b:3d:f4:15:2f:6f:43:10:5e:5d:46:d0:e8:56:
1c:4d:a9:91:2f:b1:9d:4e:9f:8f:c5:39:05:2b:c9:6a:60:11:
96:9d:bb:9b:bf:e3:e0:92:ef:e2:4c:ac:c0:7f:1a:81:e7:5a:
53:d7:d1:37:33:b7:f6:bf:69:17:7b:32:ea:81:b8:ee:b4:01:
a1:f1:51:66:23:ca:45:18:86:d4:e5:3d:3d:68:c3:d0:3c:c0:
42:4c:1f:9b:01:eb:4c:05:bb:fc:0e:5b:fc:cc:92:79:d5:16:
83:79:c8:b5:57:3c:31:f9:10:17:ec:f0:fc:5e:8c:88:3d:31:
ec:33:21:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:04 2025 by rpki-client