Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/zvfC3K8mpWLIo4bdQkkttu_urmM.roa
File: zvfC3K8mpWLIo4bdQkkttu_urmM.roa (raw, json)
Hash identifier: Ukv8hbdAvslpta+I8sF46eyLlwQR4by7XNcRtbDmOs8=
Subject key identifier: CE:F7:C2:DC:AF:26:A5:62:C8:A3:86:DD:42:49:2D:B6:EF:EE:AE:63
Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial: 018F716F88CD948AC11616FB30C9ECB086F6
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/zvfC3K8mpWLIo4bdQkkttu_urmM.roa
Signing time: Mon 13 May 2024 10:11:25 +0000
ROA not before: Mon 13 May 2024 10:11:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35199
IP address blocks: 178.219.16.0/22 maxlen: 22
185.214.67.0/24 maxlen: 24
193.19.164.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 15 May 2024 07:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:71:6f:88:cd:94:8a:c1:16:16:fb:30:c9:ec:b0:86:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Validity
Not Before: May 13 10:11:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cef7c2dcaf26a562c8a386dd42492db6efeeae63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:96:c9:ce:12:f3:01:08:3d:f6:14:50:ac:
cd:cf:03:7b:6d:a9:e1:ea:fd:a1:e4:ef:56:ea:86:
0a:ec:d2:38:0c:b4:37:73:37:77:c5:fe:09:c4:cc:
23:39:d6:4b:76:05:7b:9d:4a:fd:c1:76:e3:65:13:
5e:98:25:ca:96:46:1b:52:e4:e6:18:da:f2:a8:b1:
e5:d3:f9:8c:d7:1d:45:cb:94:36:85:f9:9d:6c:2b:
d9:4d:94:39:87:85:f5:07:3d:5a:5a:af:53:ce:62:
b9:bd:92:a5:be:c8:e3:06:01:16:16:54:9e:cb:26:
bc:66:cd:4e:ed:8f:8a:2a:31:01:86:4b:e4:ba:72:
0a:a9:3b:f2:6e:cf:8d:10:ef:dc:42:6e:5d:e7:45:
41:7a:42:e4:10:31:78:e4:4a:ca:30:d0:d8:12:b6:
51:35:23:0d:a4:15:80:56:69:80:a2:a7:65:ed:c5:
1a:86:70:e0:a7:c5:35:2f:87:c4:df:95:54:10:b3:
1b:ae:6c:a3:6d:19:f1:04:24:f4:61:3b:e8:07:e6:
13:48:6a:d3:7e:10:dd:29:00:e9:7d:9e:b0:4f:98:
5d:a7:7c:d7:7a:f2:6e:50:95:0c:d3:c0:89:5a:81:
be:35:10:4e:75:6f:39:2f:78:52:62:cf:36:d0:8d:
92:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F7:C2:DC:AF:26:A5:62:C8:A3:86:DD:42:49:2D:B6:EF:EE:AE:63
X509v3 Authority Key Identifier:
keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/zvfC3K8mpWLIo4bdQkkttu_urmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.16.0/22
185.214.67.0/24
193.19.164.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:37:0b:92:c9:93:f2:8e:71:69:2d:17:43:f3:2d:e3:30:c5:
e0:22:95:14:dc:65:1a:c0:fc:14:6e:a0:9e:f0:64:64:2c:84:
96:bc:47:23:24:57:d3:96:44:67:d9:21:f1:03:18:92:c6:72:
15:8b:b2:2d:6e:51:53:9a:c0:09:59:47:49:ca:3b:27:7c:f5:
c2:28:e3:fd:72:cc:42:0b:c5:9a:f6:1f:e2:73:6c:79:1a:48:
79:6c:00:e4:1e:ef:6c:1a:c8:21:17:ee:d7:a3:6e:b5:b8:93:
fd:03:4e:1a:aa:b3:e0:f6:2a:e3:dd:54:4b:14:9c:4e:d4:a5:
30:9f:59:cf:3c:32:f6:70:47:f5:a8:b8:fe:ef:e1:a2:e6:7b:
d5:69:df:2b:d1:60:e3:ff:21:0b:48:24:a7:30:23:16:ef:2b:
a0:18:5f:8f:20:87:1c:ac:e4:05:cc:36:07:b1:a7:a3:9c:77:
05:5b:d9:11:34:e7:90:df:7b:72:7d:c7:33:19:3f:02:0f:6c:
4d:0d:c2:10:9b:34:87:36:d7:f6:bc:88:fc:db:84:b2:a5:6e:
f4:5e:9d:57:cd:8a:c9:d4:54:31:e5:0c:22:57:a2:33:66:8b:
55:cb:a3:b8:95:91:7e:6d:65:5a:f8:9e:05:db:7f:d5:13:ba:
e6:81:69:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:00 2025 by rpki-client