Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/ZOJHCYJVmwIQ7uqxfTMH4wTOl7s.roa
File: ZOJHCYJVmwIQ7uqxfTMH4wTOl7s.roa (raw, json)
Hash identifier: hiT2Jl6Cf0idGItTTpfA6cfrmBKqKLiZ+iOGMpfkT2U=
Subject key identifier: 64:E2:47:09:82:55:9B:02:10:EE:EA:B1:7D:33:07:E3:04:CE:97:BB
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 018E38EE4D55A7B197CE1F821EBDEBC9A93B
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/ZOJHCYJVmwIQ7uqxfTMH4wTOl7s.roa
Signing time: Wed 13 Mar 2024 17:48:45 +0000
ROA not before: Wed 13 Mar 2024 17:48:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 217.147.166.0/24 maxlen: 24
217.147.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Apr 2024 12:20:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:38:ee:4d:55:a7:b1:97:ce:1f:82:1e:bd:eb:c9:a9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Mar 13 17:48:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64e2470982559b0210eeeab17d3307e304ce97bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:56:16:bd:cf:31:25:9c:0f:e9:16:a1:ed:87:
18:5f:68:8c:ed:36:f8:fb:a5:6f:67:76:eb:84:f3:
3b:31:b3:3d:32:b3:b4:38:4b:47:27:f8:d6:18:3c:
35:95:83:ae:f5:ea:70:6c:e0:f7:76:df:55:23:24:
ba:0d:91:2c:38:2d:14:ce:b4:1c:a5:02:1e:35:23:
4b:e0:56:c0:12:4c:5c:e9:de:5c:73:5d:f0:c0:3b:
a4:e5:33:39:da:6c:df:94:ad:1f:46:7c:aa:be:36:
59:36:ea:23:f9:56:8b:b3:29:1a:29:37:c9:23:4e:
d1:e2:f8:ac:c0:e1:58:a7:4f:3b:bf:40:ed:4b:59:
dd:6e:62:5b:92:84:9e:b6:38:3a:82:dc:7c:c6:3a:
38:4d:e6:29:7d:1a:bd:8e:b8:27:02:70:e6:80:7d:
6a:12:dc:0f:90:13:e6:a3:e5:a9:66:dc:d1:35:e8:
19:71:df:de:f5:b9:67:8e:04:9f:76:61:ff:0a:ce:
1d:94:c8:ba:9c:bf:ba:bd:10:1a:1f:69:e4:40:63:
86:ac:80:5c:9e:b0:be:14:50:7e:83:f4:3e:a5:d3:
5d:e9:6c:1a:f9:58:bc:8a:52:6d:51:e9:c4:6f:6a:
43:65:cf:68:2a:00:c1:02:62:67:44:df:8c:7b:22:
75:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E2:47:09:82:55:9B:02:10:EE:EA:B1:7D:33:07:E3:04:CE:97:BB
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/ZOJHCYJVmwIQ7uqxfTMH4wTOl7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.166.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:22:c8:21:62:15:e5:52:ad:0b:22:ee:5b:ab:74:60:e9:e9:
4f:e9:22:27:36:07:82:d2:ba:bc:2b:a6:6f:28:ca:e2:d3:0a:
a8:9f:ef:61:fa:c1:c9:6d:e8:ea:ec:68:b3:4b:93:54:a1:bb:
e2:a9:18:84:bd:96:de:7c:4e:3d:48:dd:92:fd:81:56:80:7f:
6d:4c:b9:30:be:df:39:3f:ac:d8:36:92:5f:8b:c3:2f:0f:ff:
6c:dc:5d:c5:07:d1:d1:44:b8:f1:f5:44:0d:ec:e1:86:9c:7c:
6b:21:17:8e:94:58:5f:da:6f:4a:a9:c8:1d:c8:39:15:1f:52:
bb:41:8a:a1:64:a4:af:31:d1:a2:65:bc:39:53:e9:7c:4b:9c:
9b:b6:ea:e8:ae:28:5b:f4:ad:48:fe:c0:e0:ac:db:7a:8c:25:
16:a4:a7:cc:db:dd:64:80:ea:e7:ab:11:35:ff:a3:a3:df:60:
8c:58:7a:c4:f8:a7:5c:58:dc:b9:90:8b:1e:66:4f:62:92:4f:
67:f0:a6:22:52:71:a5:ec:54:74:4c:02:f3:af:a8:a3:62:e8:
07:45:c5:d5:98:3b:9a:09:54:17:3f:5d:81:83:66:94:b2:b3:
86:6f:b5:af:e0:8c:b7:bd:1e:54:b8:9f:2d:c1:76:eb:4b:a3:
2a:66:30:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:20 2025 by rpki-client