Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/zE-pPSEOaT91bLzUx3sNfSdMuQc.roa
File: zE-pPSEOaT91bLzUx3sNfSdMuQc.roa (raw, json)
Hash identifier: 8PF8CiSZcOGQntF13IPTzUF2MdVEaCX+BBflICGJAZ4=
Subject key identifier: CC:4F:A9:3D:21:0E:69:3F:75:6C:BC:D4:C7:7B:0D:7D:27:4C:B9:07
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 01856ED4E9E9B291D2D92EBC432F8062F58A
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/zE-pPSEOaT91bLzUx3sNfSdMuQc.roa
Signing time: Sun 01 Jan 2023 19:35:25 +0000
ROA not before: Sun 01 Jan 2023 19:35:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50149
IP address blocks: 62.122.216.0/22 maxlen: 22
94.154.128.0/22 maxlen: 22
45.150.188.0/22 maxlen: 22
89.104.107.0/24 maxlen: 24
89.104.125.0/24 maxlen: 24
89.104.119.0/24 maxlen: 24
185.228.90.0/23 maxlen: 23
185.228.88.0/23 maxlen: 23
185.228.88.0/22 maxlen: 22
185.240.48.0/22 maxlen: 22
2a00:ab01::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 07 Nov 2023 08:51:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:e9:e9:b2:91:d2:d9:2e:bc:43:2f:80:62:f5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Jan 1 19:35:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc4fa93d210e693f756cbcd4c77b0d7d274cb907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:72:37:33:ef:04:a9:62:df:1d:0f:36:4a:75:
8b:fc:47:16:c1:19:fa:74:ec:4b:c4:3f:26:42:38:
8e:03:21:58:39:03:6f:44:37:65:09:cd:49:63:f3:
c7:91:e7:a7:8c:d6:ab:03:f6:00:b2:f6:71:2a:5f:
27:be:68:fa:c4:8e:72:44:fd:f5:6f:8f:42:6c:6f:
55:00:83:70:a5:1e:de:4d:26:9c:70:fb:8d:d7:c7:
bb:77:78:5e:d4:3c:95:d8:78:e6:a0:16:8d:bc:45:
f8:48:ff:20:c1:4b:83:73:25:b1:a0:fe:15:1f:a0:
e1:ce:72:a4:b8:a0:b3:a3:36:cf:e7:f6:2a:1d:42:
05:cb:60:b1:2c:27:1f:65:e9:39:fd:1c:5b:77:db:
9f:ee:9a:c1:64:cf:4b:e3:5f:bc:05:dc:f1:06:e6:
b6:67:7b:46:b6:0d:19:75:88:b3:96:f3:cc:06:4d:
fa:14:a6:fa:57:62:78:6d:cc:15:16:79:fc:b3:e0:
f1:dc:d8:ad:15:09:be:cf:37:0b:0e:a7:88:d8:4b:
bd:57:da:1b:bb:f5:ce:ee:9f:ad:aa:22:6a:b1:b7:
1c:43:d9:ae:f5:80:4b:16:9b:26:62:f9:e3:74:7c:
4f:bc:ed:9e:b0:8b:54:ad:5f:7f:7e:c0:2f:41:0e:
62:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4F:A9:3D:21:0E:69:3F:75:6C:BC:D4:C7:7B:0D:7D:27:4C:B9:07
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/zE-pPSEOaT91bLzUx3sNfSdMuQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.188.0/22
62.122.216.0/22
89.104.107.0/24
89.104.119.0/24
89.104.125.0/24
94.154.128.0/22
185.228.88.0/22
185.240.48.0/22
IPv6:
2a00:ab01::/32
Signature Algorithm: sha256WithRSAEncryption
41:a8:63:39:cc:0e:b7:9c:a4:e5:f7:8c:a0:d2:aa:2e:25:e5:
7b:60:03:1e:ab:f2:0f:33:72:49:cf:4a:7d:80:14:85:fc:7b:
e5:6d:47:4c:32:66:e7:be:13:92:7a:f1:eb:93:33:c2:d6:c2:
af:26:2b:28:bf:73:56:c6:e8:6f:fe:72:35:2a:2a:0f:93:6a:
fe:23:95:a0:5b:a1:a2:01:6d:f7:16:60:d4:2f:19:95:ba:2b:
fd:9f:d9:45:b2:ab:96:44:96:62:06:02:20:7b:ea:61:86:ac:
89:24:d7:1e:7c:78:e6:72:b4:88:21:d3:4a:88:2f:d3:db:2e:
f0:f4:c3:76:75:cb:88:18:7f:20:0b:20:9d:67:86:f6:42:8e:
aa:d5:fc:50:e4:fe:c3:87:77:ea:b4:23:39:6b:1a:4b:0b:36:
a1:9f:c3:4c:cd:cd:20:8f:ed:7e:09:9a:64:2d:80:a5:8c:bc:
ac:8d:c3:bc:be:c8:e7:50:7c:33:c0:fd:9d:5d:6a:21:03:82:
73:f4:ef:2b:bd:2b:12:35:ff:94:df:c8:aa:fe:e9:a0:a7:3f:
a9:a1:4e:38:ed:ea:71:46:34:59:60:8f:fb:e7:87:fc:03:32:
88:e7:2d:bb:9e:93:cc:ab:f5:6b:1c:01:60:9d:18:2d:5a:90:
0a:52:a3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:19 2024 by rpki-client on console-ams.rpki-client.org