Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/ZxjueJYI4nOIWB93qHOKsHBak2M.roa
File: ZxjueJYI4nOIWB93qHOKsHBak2M.roa (raw, json)
Hash identifier: qsZM7pFG5gO3OFgbD79gdYH5gF8WU6IiMXfg/nDO/V8=
Subject key identifier: 67:18:EE:78:96:08:E2:73:88:58:1F:77:A8:73:8A:B0:70:5A:93:63
Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial: 018CC6B8C653AF6FB2472855B00E1CA56DCC
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/ZxjueJYI4nOIWB93qHOKsHBak2M.roa
Signing time: Mon 01 Jan 2024 20:30:47 +0000
ROA not before: Mon 01 Jan 2024 20:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57324
IP address blocks: 109.230.112.0/24 maxlen: 24
202.164.192.0/24 maxlen: 24
202.164.195.0/24 maxlen: 24
202.164.194.0/24 maxlen: 24
109.230.113.0/24 maxlen: 24
109.230.115.0/24 maxlen: 24
79.132.195.0/24 maxlen: 24
79.132.196.0/24 maxlen: 24
109.230.114.0/24 maxlen: 24
202.164.193.0/24 maxlen: 24
79.132.198.0/24 maxlen: 24
79.132.199.0/24 maxlen: 24
79.132.197.0/24 maxlen: 24
202.164.198.0/24 maxlen: 24
202.164.196.0/24 maxlen: 24
202.164.197.0/24 maxlen: 24
202.164.199.0/24 maxlen: 24
122.102.117.0/24 maxlen: 24
122.102.118.0/24 maxlen: 24
122.102.116.0/24 maxlen: 24
109.230.117.0/24 maxlen: 24
109.230.116.0/24 maxlen: 24
109.230.118.0/24 maxlen: 24
202.164.205.0/24 maxlen: 24
109.230.124.0/24 maxlen: 24
109.230.125.0/24 maxlen: 24
202.164.203.0/24 maxlen: 24
109.230.122.0/24 maxlen: 24
109.230.121.0/24 maxlen: 24
122.102.119.0/24 maxlen: 24
109.230.123.0/24 maxlen: 24
202.164.204.0/24 maxlen: 24
202.164.201.0/24 maxlen: 24
202.164.200.0/24 maxlen: 24
202.164.202.0/24 maxlen: 24
109.230.120.0/24 maxlen: 24
109.230.119.0/24 maxlen: 24
109.230.127.0/24 maxlen: 24
109.230.126.0/24 maxlen: 24
202.164.207.0/24 maxlen: 24
86.111.144.0/24 maxlen: 24
86.111.145.0/24 maxlen: 24
86.111.146.0/24 maxlen: 24
86.111.147.0/24 maxlen: 24
185.113.105.0/24 maxlen: 24
185.113.107.0/24 maxlen: 24
2a03:c340::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 15 Jan 2024 19:08:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:c6:53:af:6f:b2:47:28:55:b0:0e:1c:a5:6d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
Validity
Not Before: Jan 1 20:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6718ee789608e27388581f77a8738ab0705a9363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:58:e2:d6:86:5e:a3:f1:1e:bb:d9:c1:e2:b1:
c8:0e:a0:e4:0b:c2:be:ec:19:80:45:1d:f9:03:31:
cb:cf:cb:2e:29:8a:8c:dd:7c:31:e9:49:0f:e3:c3:
3b:37:90:dd:21:f5:c3:8a:56:61:13:f3:5b:f3:5d:
4f:7d:50:d7:1f:72:64:b9:18:2a:74:d3:d6:6d:aa:
f9:59:e1:02:c4:28:8d:fd:63:cc:8c:03:46:1e:cd:
6d:6a:86:7a:62:2a:52:05:e3:7c:fb:96:07:ec:92:
76:7b:55:9b:92:9a:cb:26:c4:a6:9d:c7:6a:57:51:
cc:6a:39:e1:86:d0:a5:78:db:83:8c:9c:f4:b9:e4:
21:7e:97:0d:fb:9f:22:ff:39:8c:63:15:58:a3:9e:
3d:9a:52:79:d2:a1:83:da:9a:00:97:c8:71:44:40:
91:cf:79:9b:5f:bd:71:58:9e:bf:d1:90:5e:d6:4d:
51:2c:50:44:2f:4d:ee:4e:22:ea:e6:37:7c:41:28:
bb:bf:c4:25:cd:0c:42:bc:22:ea:da:54:59:2d:34:
17:c8:c6:0c:fa:7c:5b:d3:22:99:56:4c:f0:8c:41:
53:e0:49:57:20:2a:92:4c:b0:8d:56:91:74:d1:4d:
fd:b9:94:fd:42:f2:5a:72:e2:6c:6e:75:8f:4c:14:
f4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:18:EE:78:96:08:E2:73:88:58:1F:77:A8:73:8A:B0:70:5A:93:63
X509v3 Authority Key Identifier:
keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/ZxjueJYI4nOIWB93qHOKsHBak2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.195.0-79.132.199.255
86.111.144.0/22
109.230.112.0/20
122.102.116.0/22
185.113.105.0/24
185.113.107.0/24
202.164.192.0-202.164.205.255
202.164.207.0/24
IPv6:
2a03:c340::/32
Signature Algorithm: sha256WithRSAEncryption
29:29:e9:e9:af:2e:08:0d:00:9a:f4:18:39:a2:00:57:ea:d9:
82:74:b4:26:60:15:9b:36:da:e9:e4:fc:dc:f3:c3:56:2e:9b:
a8:a7:53:78:74:12:93:06:1d:9e:aa:26:ec:f8:c0:2c:9b:82:
f5:dd:58:3a:f0:e7:4e:58:af:ce:86:c8:cd:fb:6c:a2:2e:1c:
2e:51:cd:0f:b8:c9:1e:14:2a:ce:5f:4d:e6:0b:08:a9:12:c4:
f7:a9:bc:e4:e5:4b:4a:be:41:28:4e:89:85:43:79:4d:ac:3b:
3d:2e:8e:e0:51:e5:26:42:aa:ce:62:53:bb:3c:b4:e3:c7:77:
69:2b:55:93:be:37:6b:30:0d:7e:c8:ff:92:10:aa:53:46:73:
e4:7b:bf:a3:46:d4:1b:92:bf:c1:ba:72:99:aa:7b:e3:fc:89:
f6:98:5f:67:bc:38:fd:75:04:7c:6d:a1:df:10:51:33:0f:d2:
33:2c:6e:c2:81:74:3d:5c:4c:ec:ad:c9:c1:52:6b:1c:f6:2b:
c1:68:c2:c6:45:e2:bb:70:ce:6b:75:51:5a:6b:ef:4a:33:7f:
79:b1:bd:57:68:75:79:39:13:fb:d8:42:9f:57:58:4b:ce:b6:
12:db:47:1e:03:a3:3c:c5:01:7c:ea:02:9b:3e:74:d8:b0:a6:
32:f7:d9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 22:54:31 2024 by rpki-client on console-ams.rpki-client.org