Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/zaJIAUxhzCrxvEgoS5zKchAANJs.roa
File: zaJIAUxhzCrxvEgoS5zKchAANJs.roa (raw, json)
Hash identifier: NWWL6CjZ2TvXbRhCdkfuikea6EinMNl+AcqhTIVDIOM=
Subject key identifier: CD:A2:48:01:4C:61:CC:2A:F1:BC:48:28:4B:9C:CA:72:10:00:34:9B
Certificate issuer: /CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Certificate serial: 018CC6B911851F6C8277F7EE632FF3907B25
Authority key identifier: 89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/zaJIAUxhzCrxvEgoS5zKchAANJs.roa
Signing time: Mon 01 Jan 2024 20:31:06 +0000
ROA not before: Mon 01 Jan 2024 20:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203214
IP address blocks: 185.141.11.0/24 maxlen: 24
185.141.10.0/24 maxlen: 24
185.141.9.0/24 maxlen: 24
185.141.8.0/24 maxlen: 24
109.224.52.0/22 maxlen: 22
109.224.56.0/22 maxlen: 22
109.224.56.0/21 maxlen: 21
109.224.60.0/22 maxlen: 22
109.224.0.0/18 maxlen: 18
109.224.2.0/23 maxlen: 23
109.224.1.0/24 maxlen: 24
109.224.0.0/21 maxlen: 21
109.224.4.0/22 maxlen: 22
109.224.8.0/22 maxlen: 22
109.224.8.0/21 maxlen: 21
109.224.5.0/24 maxlen: 24
109.224.16.0/22 maxlen: 22
109.224.15.0/24 maxlen: 24
109.224.14.0/24 maxlen: 24
109.224.14.0/23 maxlen: 23
109.224.13.0/24 maxlen: 24
109.224.12.0/23 maxlen: 23
109.224.12.0/24 maxlen: 24
109.224.24.0/22 maxlen: 22
109.224.20.0/22 maxlen: 22
109.224.30.0/23 maxlen: 23
109.224.29.0/24 maxlen: 24
109.224.28.0/24 maxlen: 24
109.224.36.0/22 maxlen: 22
109.224.32.0/22 maxlen: 22
109.224.32.0/24 maxlen: 24
109.224.44.0/22 maxlen: 22
109.224.43.0/24 maxlen: 24
109.224.42.0/23 maxlen: 23
109.224.42.0/24 maxlen: 24
109.224.41.0/24 maxlen: 24
109.224.40.0/21 maxlen: 21
109.224.40.0/24 maxlen: 24
109.224.48.0/22 maxlen: 22
109.224.48.0/21 maxlen: 21
185.118.96.0/24 maxlen: 24
185.118.96.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 06 Jun 2024 08:18:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:11:85:1f:6c:82:77:f7:ee:63:2f:f3:90:7b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Validity
Not Before: Jan 1 20:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cda248014c61cc2af1bc48284b9cca721000349b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:55:52:13:3c:e5:32:3b:33:46:f9:87:c3:76:
62:73:96:ea:fb:d3:9a:27:ea:87:c4:c1:80:f8:b1:
7f:aa:24:c6:31:33:4a:16:65:15:c5:66:c4:8e:07:
3e:a9:5f:52:e8:88:d4:8b:ba:74:3c:36:6f:a5:fb:
2e:75:7c:d0:15:f8:0e:af:d1:76:70:5b:be:98:3c:
27:1f:c2:02:88:19:83:65:37:52:77:26:4d:ee:ac:
32:21:8b:9a:8d:7c:e1:c0:f0:53:da:3b:c7:bc:31:
57:f9:f5:35:e3:e0:3b:03:13:a2:71:db:d6:f4:cb:
28:a1:42:fe:be:80:14:56:ca:16:49:42:f4:eb:3d:
3a:33:b0:96:0a:b7:c3:af:80:35:5c:81:80:7e:ad:
74:ed:bb:dc:e1:46:79:44:ff:79:c0:ed:29:c9:10:
f3:77:08:3c:61:2f:03:2b:d0:92:86:c7:84:07:2e:
c3:d2:c2:9b:52:3a:f2:9b:26:87:e6:6b:11:28:17:
d3:73:71:c7:53:cf:c1:da:ae:bc:5a:78:94:fe:e1:
9b:c0:c8:fc:17:1a:93:c5:2f:f8:d7:df:9f:f9:37:
0d:65:d6:66:ee:84:d7:83:c9:40:5a:3a:e8:a6:da:
cf:70:fc:d3:61:08:dd:9f:11:ac:2a:78:98:37:ac:
72:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A2:48:01:4C:61:CC:2A:F1:BC:48:28:4B:9C:CA:72:10:00:34:9B
X509v3 Authority Key Identifier:
keyid:89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/zaJIAUxhzCrxvEgoS5zKchAANJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.224.0.0/18
185.118.96.0/22
185.141.8.0/22
Signature Algorithm: sha256WithRSAEncryption
06:df:1c:98:a9:02:a4:97:70:a8:d8:0c:03:7f:a6:ac:77:ff:
3e:d5:e1:63:87:37:a6:77:da:1e:1b:98:33:f3:dc:da:33:05:
90:65:5a:a2:33:35:0a:cb:89:76:25:dc:b2:31:e6:0e:d1:90:
1b:13:ac:d8:73:76:5c:38:c6:bd:c0:eb:88:bf:05:cb:98:ab:
59:6a:93:e0:1d:ff:05:8a:41:2c:07:e3:b9:fb:29:66:3f:b9:
e8:ef:3a:62:94:f9:8b:74:1c:ab:c0:c3:eb:8c:09:fe:af:1c:
20:a9:10:61:de:b3:18:a3:f6:cf:7f:1f:f3:28:20:cf:8b:7d:
91:4b:0f:75:d9:61:36:da:a1:fa:f0:cf:85:db:d0:04:b0:2e:
fb:9a:e2:62:ef:00:49:cc:ac:26:f2:6b:c8:67:19:72:c5:31:
f1:b8:7d:d8:65:f0:66:54:3e:2f:ac:f9:b1:d9:d2:95:13:5a:
28:4c:ad:38:09:59:8c:28:6d:aa:eb:44:47:0e:74:11:bb:94:
5b:52:86:34:f4:90:75:f3:ce:a4:d6:d5:41:9f:c4:63:76:f9:
4a:d1:04:3f:7e:1d:9d:8b:a4:d1:7a:0c:62:7d:09:31:bc:c3:
bb:d5:f9:9c:94:4a:c7:03:26:43:e7:bf:b4:a6:ef:68:47:63:
23:f8:37:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:08 2024 by rpki-client on console-ams.rpki-client.org