Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/ztekPyum-se1QGfS0i3ly80z1VQ.roa
File: ztekPyum-se1QGfS0i3ly80z1VQ.roa (raw, json)
Hash identifier: VSv7W8UDshCO0PAxHyKUnG726rfd1NAFhqFPeUko5aw=
Subject key identifier: CE:D7:A4:3F:2B:A6:FA:C7:B5:40:67:D2:D2:2D:E5:CB:CD:33:D5:54
Certificate issuer: /CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
Certificate serial: 019155A5DEF70739A597FC6158A04E28C016
Authority key identifier: A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/ztekPyum-se1QGfS0i3ly80z1VQ.roa
Signing time: Thu 15 Aug 2024 10:46:59 +0000
ROA not before: Thu 15 Aug 2024 10:46:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3285
IP address blocks: 93.100.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:a5:de:f7:07:39:a5:97:fc:61:58:a0:4e:28:c0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
Validity
Not Before: Aug 15 10:46:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ced7a43f2ba6fac7b54067d2d22de5cbcd33d554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:b5:4a:5e:ef:da:15:49:29:ef:23:a9:af:
ce:73:da:c8:dd:4e:d6:d9:69:c6:c7:4f:5d:6b:c9:
74:ca:34:2b:10:31:6f:ed:d0:37:93:a8:82:51:7f:
79:2d:d3:c4:b2:df:d3:ca:d4:6d:39:d7:ec:b2:bc:
27:5f:bb:23:7d:89:1e:b4:81:57:e1:66:86:67:cc:
24:9a:3e:c6:c9:6d:c7:d4:cf:75:a0:99:8a:65:d1:
cb:94:09:01:01:d2:a6:85:1f:b7:4a:ee:11:0d:08:
1f:f5:43:18:f1:f8:0d:61:df:de:44:0b:f8:e6:3f:
c7:b9:fa:f9:97:5b:b3:e9:e7:7d:2f:f9:de:c0:97:
76:11:9b:c5:bb:16:15:0d:3a:6a:b1:1e:19:e4:35:
50:cd:b4:40:dd:0c:e4:58:f2:4b:fa:a3:16:c3:17:
2e:c1:f4:8d:7a:0d:0e:5e:ee:2c:da:c4:b8:39:bd:
89:ca:b2:3a:0e:05:0b:fd:3a:01:9f:9a:b8:41:2b:
43:b8:ad:7c:b5:fa:71:a0:9d:72:66:3f:c3:aa:12:
42:78:69:51:8a:c8:bc:9f:07:94:7e:6c:2d:cb:01:
42:2b:b8:e1:c6:64:29:3c:b8:96:dc:c3:e5:9f:fd:
58:7c:ba:22:56:3d:49:69:4a:fb:18:2b:88:05:3f:
6d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D7:A4:3F:2B:A6:FA:C7:B5:40:67:D2:D2:2D:E5:CB:CD:33:D5:54
X509v3 Authority Key Identifier:
keyid:A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/ztekPyum-se1QGfS0i3ly80z1VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.100.195.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:0b:86:7d:13:a2:0c:0b:57:f5:41:41:e2:ca:30:ad:ef:48:
bf:c1:73:ce:6b:b8:d2:80:42:2b:e2:0e:bc:ca:83:ae:40:ba:
90:3b:5a:16:2d:c7:66:70:0d:0a:d7:88:e7:e0:b9:2d:53:fa:
b6:87:69:86:81:18:2b:41:ac:28:4a:b0:d7:e8:bb:16:0d:63:
32:dc:f8:8c:74:d1:48:9e:1a:a4:1f:db:98:2e:92:bf:b2:47:
c7:1a:3b:2e:32:b2:7b:76:02:3a:76:14:da:7a:06:5b:a1:f9:
ab:be:16:d1:c0:c3:2f:e9:f7:9a:b6:0e:32:85:3d:ee:9d:ec:
fc:00:0e:04:c8:1a:2c:7d:74:25:60:95:f2:cf:ed:35:43:c5:
ec:a9:f2:ac:e9:0e:31:f0:8f:08:62:05:17:b4:72:94:57:3f:
7b:31:34:b5:58:38:ef:98:ff:d6:b5:3a:22:77:e4:de:8c:26:
6e:52:66:c5:f2:f8:87:a1:11:5f:79:41:a9:5b:4c:1e:a1:14:
1b:2e:04:f6:b9:0e:26:51:38:c5:f7:c6:46:a0:5e:e8:a6:37:
1d:35:41:4c:0b:f0:77:6d:46:46:85:da:4e:8d:85:4e:7b:42:
78:6a:86:5c:f8:2e:07:e8:11:70:26:ce:ef:80:70:8b:94:37:
b3:70:d6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:59 2025 by rpki-client