Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/ZJNPCsmgt-Z0rQKAckPUzrWAitY.roa
File: ZJNPCsmgt-Z0rQKAckPUzrWAitY.roa (raw, json)
Hash identifier: fSbK7qmd2vzN1twZ8itJ04AMA0VzNQK6oIpu4nKIU7g=
Subject key identifier: 64:93:4F:0A:C9:A0:B7:E6:74:AD:02:80:72:43:D4:CE:B5:80:8A:D6
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01930031C3BC7162A477A11E7E8B75006BC0
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/ZJNPCsmgt-Z0rQKAckPUzrWAitY.roa
Signing time: Wed 06 Nov 2024 06:38:01 +0000
ROA not before: Wed 06 Nov 2024 06:38:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 92.114.40.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 07 Nov 2024 06:50:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:00:31:c3:bc:71:62:a4:77:a1:1e:7e:8b:75:00:6b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Nov 6 06:38:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64934f0ac9a0b7e674ad02807243d4ceb5808ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:53:a0:69:ee:6e:53:66:af:46:31:62:a9:6d:
3d:98:58:e6:64:cf:64:b0:0c:6e:93:04:a5:77:e5:
9c:04:b5:cb:5e:8e:99:ce:e3:46:32:18:5d:5b:02:
10:b8:8f:ce:04:4c:c2:a1:5f:1c:1a:03:5e:f1:36:
43:5d:a4:50:7e:3c:96:18:52:ed:51:0b:7c:3f:d2:
6f:a5:5d:4a:3f:d9:f1:76:65:bb:1b:e8:57:be:70:
19:43:f0:1b:9e:88:c7:0c:f5:06:fb:df:e4:38:69:
74:23:df:3b:d6:44:4f:bb:36:dd:04:58:75:d8:e4:
b8:e8:a4:f7:18:55:df:37:ae:1c:36:31:13:b6:7b:
a7:79:88:69:ad:a1:08:23:f1:74:62:2b:c8:a2:e3:
01:eb:8f:68:c7:f7:3c:a9:f0:55:c8:35:d3:57:4d:
d7:14:e0:06:ce:28:a8:7a:4c:f4:5a:7a:06:b2:81:
63:f4:ce:08:41:d8:4b:8b:32:17:13:64:19:76:d9:
ca:be:15:47:04:25:e8:48:7b:9e:7c:da:d9:1c:8b:
a4:30:48:f3:26:7b:b6:a0:d0:aa:9a:38:36:aa:2b:
c1:80:c4:5d:9a:e3:d8:ec:2c:6b:94:d4:24:14:ca:
05:f5:ec:e9:66:00:60:ca:35:5f:a8:dc:56:22:8a:
4a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:93:4F:0A:C9:A0:B7:E6:74:AD:02:80:72:43:D4:CE:B5:80:8A:D6
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/ZJNPCsmgt-Z0rQKAckPUzrWAitY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.40.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:90:30:3b:2e:69:ba:98:28:d2:53:68:3c:91:0f:26:26:46:
80:9a:32:db:fc:1e:13:35:a2:e9:36:4f:ea:0e:7d:98:ad:2e:
b0:0d:b2:b1:ac:06:d5:1e:c9:50:88:9a:c6:1d:dc:54:e2:bf:
1e:94:e3:02:3c:bb:2a:ce:3a:fc:66:64:7c:a5:80:35:51:56:
ca:cf:16:6a:7b:3d:3a:61:04:a3:0a:bf:0d:c4:ef:85:6a:27:
d7:73:4b:23:44:54:fb:f0:da:1f:6d:cb:aa:59:19:bf:ab:02:
f1:cc:5c:55:28:18:cf:58:c6:f8:6a:52:77:5e:6b:b1:34:b4:
c7:9e:6a:1e:67:53:68:26:60:34:11:25:d2:b5:0d:bb:13:1b:
67:5a:03:b7:93:82:30:77:37:bf:c2:c3:93:18:04:07:fd:45:
81:70:49:09:ec:f4:f4:27:1f:ab:a9:05:0b:d4:30:b3:5f:ff:
b3:57:4d:2d:c2:46:9e:cf:1b:2b:6b:97:2a:35:30:32:4b:d7:
36:0a:0f:42:ac:3b:fc:34:3a:41:fb:d3:4b:80:85:34:c2:ac:
08:a9:1c:ff:b0:81:d7:69:fd:51:af:52:cd:cc:2d:f5:af:ef:
c3:89:29:54:91:48:60:4c:47:13:09:b7:b3:91:c1:b2:c3:cc:
0d:5e:61:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 08:46:55 2024 by rpki-client on console-ams.rpki-client.org