Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/ZIuhE9D1pqeL7s-ce9nVk_9iLyw.roa
File: ZIuhE9D1pqeL7s-ce9nVk_9iLyw.roa (raw, json)
Hash identifier: zJIXVwWL+xjoUtWlhPEYz9hxAsk3im5TlicIuW0AJgE=
Subject key identifier: 64:8B:A1:13:D0:F5:A6:A7:8B:EE:CF:9C:7B:D9:D5:93:FF:62:2F:2C
Certificate issuer: /CN=a1ebf54d028ee4764f62f78ad871dbf026228788
Certificate serial: 0192335F7FB406272A2EB3C1C72B44304F48
Authority key identifier: A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/ZIuhE9D1pqeL7s-ce9nVk_9iLyw.roa
Signing time: Fri 27 Sep 2024 12:05:49 +0000
ROA not before: Fri 27 Sep 2024 12:05:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8708
IP address blocks: 185.137.132.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:33:5f:7f:b4:06:27:2a:2e:b3:c1:c7:2b:44:30:4f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ebf54d028ee4764f62f78ad871dbf026228788
Validity
Not Before: Sep 27 12:05:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=648ba113d0f5a6a78beecf9c7bd9d593ff622f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:24:05:28:f5:d5:3c:25:e8:51:51:7b:d6:
53:75:6d:92:d5:35:66:09:85:8b:2f:85:7e:51:4f:
0b:2b:11:c6:eb:e1:13:ca:2e:47:96:95:34:10:f4:
0d:1a:dd:bd:ed:37:a6:8a:f4:02:69:47:e9:93:9f:
f6:c9:87:08:15:47:ba:1b:45:30:38:34:c6:94:3e:
d5:1a:98:17:77:2c:22:26:41:d2:02:69:8f:1c:fa:
3f:98:c6:25:ba:d5:0c:ba:54:ac:55:8b:0d:4e:ac:
aa:8a:87:c0:6c:cd:3a:b3:f8:5c:af:fc:56:15:d1:
c3:7e:ec:37:a1:5c:dc:cf:25:cf:b9:3c:e8:7b:d7:
aa:0e:d7:31:3f:f2:b3:56:56:e1:70:ff:47:dd:ac:
d9:58:af:49:6d:9e:71:99:54:8e:22:eb:a6:89:c6:
86:de:ed:d4:b7:87:c7:9c:d7:63:ef:d9:24:8d:c7:
96:12:ab:dd:4e:76:4b:92:6d:5a:78:b9:15:21:ec:
a8:a4:64:e4:a8:64:a4:1d:97:58:6d:2d:4e:02:6d:
64:a5:8c:dd:da:0a:41:45:0f:2a:79:7d:70:77:66:
87:ca:81:d6:a8:e0:7c:9d:b4:32:d7:30:0d:b6:8b:
13:f1:c6:fb:8c:b4:71:9e:0f:3e:0f:09:d8:bf:9c:
7f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8B:A1:13:D0:F5:A6:A7:8B:EE:CF:9C:7B:D9:D5:93:FF:62:2F:2C
X509v3 Authority Key Identifier:
keyid:A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/ZIuhE9D1pqeL7s-ce9nVk_9iLyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.132.0/22
Signature Algorithm: sha256WithRSAEncryption
08:4a:bf:6a:aa:8e:70:33:f9:cc:de:94:10:9e:ee:29:8a:da:
6e:45:41:16:9a:8e:4b:59:1f:d8:2e:2d:db:bd:8f:8d:a9:e9:
8b:17:eb:2b:8d:5c:93:3e:29:7e:60:2b:14:5c:ba:99:3c:d7:
57:73:44:c5:64:39:01:b3:d2:e1:2c:62:2c:e7:ce:87:f3:70:
a8:fe:aa:2b:14:20:1c:d1:65:18:49:85:81:7b:a1:c8:09:bb:
65:b2:7d:99:1d:6a:67:e3:58:74:bb:43:90:83:7d:3c:46:5f:
7a:3c:df:89:42:c9:67:c7:86:a2:c3:63:78:83:7b:78:1d:c5:
f5:e7:32:6b:bb:ee:b5:75:ac:fc:52:22:14:17:c7:f1:49:55:
12:9a:85:42:24:7a:84:d3:53:62:60:77:d8:05:ee:67:81:aa:
46:cd:49:b9:bc:26:11:99:3c:1e:cf:39:72:27:50:a2:d0:c3:
21:af:f3:06:cb:3b:1e:f9:a9:6d:db:68:2a:4f:ec:ed:1c:18:
0e:13:74:94:63:94:da:e0:67:af:64:6f:ff:b1:c3:14:fe:ab:
47:09:f6:c3:01:03:ca:63:96:99:42:cd:01:87:a7:a4:5b:d4:
9d:24:51:2f:fd:71:14:60:76:9d:05:28:ef:5f:08:75:c8:08:
44:77:f2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:10 2025 by rpki-client