Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1ZcaiK5pFfMepx_Q2tTXV_e1GXY.roa
File: 1ZcaiK5pFfMepx_Q2tTXV_e1GXY.roa (raw, json)
Hash identifier: ZkRiNk/WQmf76Z5CSJREUo98m18X1dAcAAQZjqKIVYc=
Subject key identifier: D5:97:1A:88:AE:69:15:F3:1E:A7:1F:D0:DA:D4:D7:57:F7:B5:19:76
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC79540D2F4B8936B1798B3ACAE0A052F
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1ZcaiK5pFfMepx_Q2tTXV_e1GXY.roa
Signing time: Tue 02 Jan 2024 00:31:36 +0000
ROA not before: Tue 02 Jan 2024 00:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5483
IP address blocks: 85.204.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:40:d2:f4:b8:93:6b:17:98:b3:ac:ae:0a:05:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5971a88ae6915f31ea71fd0dad4d757f7b51976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:35:7b:df:a0:d5:d6:4f:79:93:5d:37:e4:c3:
a5:ce:b9:1f:69:26:37:b3:a4:cb:18:be:a1:d3:28:
cc:04:42:01:9f:52:d4:a5:97:a4:5f:be:a2:49:68:
d5:06:aa:76:76:1d:6d:3b:3b:07:1e:91:1d:36:1d:
8d:8b:db:5c:b5:de:58:5e:a8:f6:9b:aa:fe:5c:98:
02:9a:b6:b6:55:cd:bf:99:2e:da:5e:cf:4d:9c:e8:
54:37:dd:c2:ac:b8:b2:98:25:06:b8:7c:2e:5b:fb:
a8:b0:fc:9e:d7:ca:82:9a:ab:0f:b3:29:9c:35:a2:
4e:55:54:94:f8:f8:86:14:26:c9:14:fa:51:0c:15:
6e:12:38:62:71:37:f4:9d:1a:c2:b9:a5:11:70:e1:
e3:42:7b:1f:8d:0a:6b:f3:36:cb:4a:38:82:71:3c:
9b:8d:a1:50:11:47:59:5e:d8:3c:67:64:b4:2c:18:
ed:3b:f7:fd:c8:87:ae:2e:86:59:13:92:fd:4a:ca:
19:3f:5c:58:06:90:0e:5b:a8:a8:3d:fc:27:80:16:
0c:f0:89:e4:ab:a1:9b:4c:51:41:8a:6a:c1:fc:ea:
45:50:62:19:83:a3:70:01:d2:53:4c:a9:16:6f:79:
e4:04:9f:cf:41:ac:61:c4:1a:1f:8c:7d:2b:52:85:
99:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:97:1A:88:AE:69:15:F3:1E:A7:1F:D0:DA:D4:D7:57:F7:B5:19:76
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1ZcaiK5pFfMepx_Q2tTXV_e1GXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.99.0/24
Signature Algorithm: sha256WithRSAEncryption
05:0c:ed:e0:3c:f9:af:ca:0e:5b:a0:9d:a2:e2:28:dc:54:fd:
42:0f:29:e4:28:32:d9:ac:39:d3:90:e4:1d:67:6c:db:82:0f:
5e:4a:5f:a2:31:ec:9e:89:27:87:00:ae:6c:3d:e7:f1:f6:7f:
c6:4c:aa:b8:1f:a0:93:70:bb:a1:95:87:d7:7a:37:65:ce:46:
f8:67:f0:f3:fd:18:ec:6d:f5:7d:f2:6a:2c:3c:7e:83:6c:be:
90:4c:60:2f:83:bf:c9:8c:ae:ca:2a:1f:38:ab:27:94:76:36:
e2:ea:8d:b4:b9:50:0e:3e:a0:56:08:8d:15:fe:da:23:3d:dc:
34:3a:c8:bb:74:34:23:6f:57:90:c0:89:45:a1:ec:fa:4c:c2:
c3:8c:ce:31:b7:0c:20:6e:02:02:50:4f:2c:2c:46:c9:d9:07:
89:d5:35:f4:80:5b:dd:27:ed:6b:33:7a:cc:73:dd:5d:7d:c7:
67:9e:cf:87:cb:1e:3c:69:39:8d:89:f6:ce:d8:7d:b4:43:58:
80:ee:a0:9a:82:e2:e1:f5:a2:66:e8:19:d7:7e:c5:79:67:a6:
c3:c3:93:00:94:37:3c:89:8e:f3:11:a3:22:31:06:8f:0a:80:
11:bd:d2:e0:76:99:73:f9:21:f9:30:e6:1d:bf:cf:21:69:a4:
45:ae:f7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:53 2025 by rpki-client