Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZGEcTiamZaNIJ7ZG66kt7eLCFac.roa
File: ZGEcTiamZaNIJ7ZG66kt7eLCFac.roa (raw, json)
Hash identifier: b5VzeR2BsMEXJ4Sde96gkY8eEzqzthUNkv5xRC8OXL8=
Subject key identifier: 64:61:1C:4E:26:A6:65:A3:48:27:B6:46:EB:A9:2D:ED:E2:C2:15:A7
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 019121AF56C1DE2A84EB0B33592316CF771F
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZGEcTiamZaNIJ7ZG66kt7eLCFac.roa
Signing time: Mon 05 Aug 2024 08:37:04 +0000
ROA not before: Mon 05 Aug 2024 08:37:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 213.182.196.0/24 maxlen: 24
213.182.197.0/24 maxlen: 24
213.182.198.0/24 maxlen: 24
213.182.200.0/24 maxlen: 24
213.182.203.0/24 maxlen: 24
213.182.204.0/24 maxlen: 24
213.182.206.0/24 maxlen: 24
213.182.208.0/24 maxlen: 24
213.182.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Aug 2024 11:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:21:af:56:c1:de:2a:84:eb:0b:33:59:23:16:cf:77:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Aug 5 08:37:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64611c4e26a665a34827b646eba92dede2c215a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:4a:3e:42:35:9c:8d:f1:66:82:98:4c:30:
fd:c9:9a:34:b3:75:17:a6:62:15:e4:9b:29:0a:1b:
54:63:a3:b5:38:69:71:53:f7:06:ef:fd:cf:f0:39:
ea:ec:f8:00:eb:bc:d5:b5:0c:3b:4d:aa:b4:57:11:
c5:d3:22:ef:ee:79:7a:c7:e9:eb:99:75:73:4b:1d:
11:15:1b:0a:04:8f:a4:66:69:f8:d8:79:8b:ac:c8:
33:a3:f5:55:00:2e:16:2a:0e:24:b0:d0:e0:f9:4a:
c1:5a:6f:72:dc:ce:35:ce:8a:fb:ad:c2:93:f8:e6:
68:69:65:55:52:cd:9c:2a:f8:af:b5:91:c5:0c:0c:
04:e3:9b:ca:4b:9e:d9:3f:a9:4e:05:8a:31:1e:0c:
c8:e2:36:33:63:3b:b7:19:49:2d:a5:30:6d:45:2a:
17:5a:90:f7:b8:45:04:b7:31:19:9e:09:d7:4e:6d:
6b:ea:37:a8:dd:f1:de:05:4d:c4:6d:d9:3e:c3:25:
24:52:83:5e:16:cf:b1:db:ff:26:78:fa:2a:8b:88:
39:3f:c2:b4:b7:1c:34:98:8a:6a:ab:59:a7:9c:c4:
7b:2b:6f:55:71:49:68:00:77:6c:b1:d4:a1:43:78:
67:dd:c6:66:7e:b1:90:d1:2f:ba:9c:27:d4:9f:87:
77:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:61:1C:4E:26:A6:65:A3:48:27:B6:46:EB:A9:2D:ED:E2:C2:15:A7
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZGEcTiamZaNIJ7ZG66kt7eLCFac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.196.0-213.182.198.255
213.182.200.0/24
213.182.203.0-213.182.204.255
213.182.206.0/24
213.182.208.0/23
Signature Algorithm: sha256WithRSAEncryption
89:d9:e5:69:38:7e:65:96:fb:4f:5f:f6:ec:f8:11:49:72:c6:
a9:6c:fb:56:3b:78:da:90:c5:fa:4c:2c:40:9a:82:92:f9:e3:
cb:95:4f:2f:a7:18:2e:a1:38:69:41:b0:cc:cf:ab:e3:a5:ec:
8c:f6:7d:91:44:21:a0:59:4f:d5:bd:3c:60:0e:2c:c1:48:fd:
26:5e:2d:81:79:c5:81:e3:4a:c3:af:03:c4:ab:c9:29:9b:3d:
ee:83:f4:c1:74:ad:d8:5b:74:4a:5d:99:f4:b3:22:be:3a:c8:
aa:3e:82:e3:06:b9:ee:03:90:9f:67:fa:4c:ae:b9:82:ce:c6:
c0:b3:5b:ba:c3:a0:74:d6:fa:c4:2b:4e:3f:79:01:28:63:b5:
9f:d2:d6:17:16:e4:0b:06:a3:94:99:df:37:31:a5:99:57:e7:
bc:dd:07:c1:ad:47:8a:81:c9:12:b9:46:98:e2:32:5c:5c:ef:
96:ce:12:dd:61:d6:d4:cf:3f:3d:fb:1c:cd:e3:82:50:dc:48:
64:86:c0:56:5b:d4:01:94:fd:e0:ba:31:98:b1:1b:b1:7f:d9:
c7:69:ae:3c:d7:dd:b9:f7:36:df:87:74:2d:40:c0:7a:bb:b1:
c7:f6:d9:7e:0f:f3:a0:b4:8e:fc:02:df:a9:66:ca:a4:41:81:
ce:30:fa:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 14:39:51 2024 by rpki-client on console-fra.rpki-client.org