Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/zDG460XQ-Jz8c1E_YHKPfpxsko0.roa
File: zDG460XQ-Jz8c1E_YHKPfpxsko0.roa (raw, json)
Hash identifier: UMxfohGIfbr5I8l/ce+dX77Nko1exEgFDABiAnjH/L0=
Subject key identifier: CC:31:B8:EB:45:D0:F8:9C:FC:73:51:3F:60:72:8F:7E:9C:6C:92:8D
Certificate issuer: /CN=567ac9bf0be91e0a48664ec8b6a6770957a21020
Certificate serial: 018C0D781107C89E7D9F91F475C268616CA1
Authority key identifier: 56:7A:C9:BF:0B:E9:1E:0A:48:66:4E:C8:B6:A6:77:09:57:A2:10:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/zDG460XQ-Jz8c1E_YHKPfpxsko0.roa
Signing time: Sun 26 Nov 2023 21:10:21 +0000
ROA not before: Sun 26 Nov 2023 21:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 185.118.69.0/24 maxlen: 24
185.118.70.0/24 maxlen: 24
185.118.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0d:78:11:07:c8:9e:7d:9f:91:f4:75:c2:68:61:6c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567ac9bf0be91e0a48664ec8b6a6770957a21020
Validity
Not Before: Nov 26 21:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc31b8eb45d0f89cfc73513f60728f7e9c6c928d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:39:02:2d:55:13:2c:12:a7:22:47:2f:5d:5f:
56:10:98:9d:b6:60:76:8b:5f:c9:94:61:52:43:c6:
fd:68:67:aa:2c:94:1c:e8:53:20:fd:6a:25:a3:75:
d2:7c:7c:dc:af:eb:c5:8e:4d:32:f9:18:db:9e:3e:
86:7b:78:a0:4e:77:64:57:0a:6d:c1:d4:86:9d:cd:
0f:66:93:9f:a8:74:d9:c4:2d:c5:e5:6f:c0:ac:1c:
4f:d2:78:79:1a:d2:4a:bb:c3:ef:54:9d:71:2f:58:
1c:4d:09:55:8d:28:2b:23:db:9c:1a:5a:44:b8:b9:
74:79:36:97:2c:f8:73:7d:b0:76:7e:e2:e5:4a:62:
e3:78:e6:37:36:05:c6:bc:7c:ff:dc:92:3b:f6:70:
26:ff:f9:5b:93:5b:2d:a8:c8:b6:9a:05:55:54:de:
09:e3:8d:07:3e:53:7e:aa:7a:f7:04:0f:46:e2:0b:
c9:66:88:60:25:75:b1:07:12:b5:96:ba:a4:4a:d0:
13:88:50:09:0c:d2:87:a8:63:e2:eb:f9:3a:23:34:
19:55:28:0e:97:dd:64:03:55:18:35:a7:6e:54:82:
60:76:1f:50:36:70:d2:29:0a:45:a7:99:d8:9a:98:
44:f3:27:a8:de:c0:10:35:af:cb:41:07:6b:63:a5:
20:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:31:B8:EB:45:D0:F8:9C:FC:73:51:3F:60:72:8F:7E:9C:6C:92:8D
X509v3 Authority Key Identifier:
keyid:56:7A:C9:BF:0B:E9:1E:0A:48:66:4E:C8:B6:A6:77:09:57:A2:10:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/zDG460XQ-Jz8c1E_YHKPfpxsko0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.69.0-185.118.71.255
Signature Algorithm: sha256WithRSAEncryption
17:5a:69:fa:b5:27:d5:db:c3:20:25:a6:62:6e:97:16:70:52:
20:c2:d3:31:58:95:93:70:16:b9:4d:57:b1:4f:28:d1:df:e9:
6b:c6:04:2c:50:30:21:0d:f0:69:a2:08:b2:21:1e:c7:29:f7:
46:d6:20:50:1a:50:08:9d:8c:c8:2f:66:73:e4:62:03:4f:d8:
06:fb:50:d0:24:ad:d5:6c:79:3f:df:4a:2e:03:c2:b3:c6:79:
9f:38:60:35:c3:bc:bc:39:a4:18:3c:94:d9:c1:4b:71:62:5f:
c1:37:47:4b:61:c4:72:03:9a:8d:1e:a0:0d:a7:41:ee:86:8a:
57:be:78:31:70:ea:50:9e:aa:6b:1a:5b:5d:3b:83:70:32:87:
18:f5:a1:6e:49:58:33:d1:d1:8f:40:c0:8a:3e:68:f1:d5:70:
b1:47:4b:39:a2:4d:5d:41:83:85:14:df:9a:03:b4:ce:c4:e3:
e9:1d:d6:63:56:32:d7:eb:df:38:43:5c:e8:ec:30:50:44:e0:
a8:f1:af:10:18:aa:57:a2:53:65:ed:cb:0a:41:25:72:75:a6:
4e:1e:3d:94:28:d1:d0:60:d7:ce:50:c6:55:3c:ca:53:53:08:
67:46:37:62:96:96:77:6e:20:e8:60:7f:1c:42:cb:a0:73:3b:
45:81:71:4e
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYwNeBEHyJ59n5H0dcJoYWyhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2N2FjOWJmMGJlOTFlMGE0ODY2NGVjOGI2YTY3NzA5NTdh
MjEwMjAwHhcNMjMxMTI2MjExMDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzMxYjhlYjQ1ZDBmODljZmM3MzUxM2Y2MDcyOGY3ZTljNmM5MjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzkCLVUTLBKnIkcvXV9WEJidtmB2
i1/JlGFSQ8b9aGeqLJQc6FMg/Wolo3XSfHzcr+vFjk0y+Rjbnj6Ge3igTndkVwpt
wdSGnc0PZpOfqHTZxC3F5W/ArBxP0nh5GtJKu8PvVJ1xL1gcTQlVjSgrI9ucGlpE
uLl0eTaXLPhzfbB2fuLlSmLjeOY3NgXGvHz/3JI79nAm//lbk1stqMi2mgVVVN4J
440HPlN+qnr3BA9G4gvJZohgJXWxBxK1lrqkStATiFAJDNKHqGPi6/k6IzQZVSgO
l91kA1UYNaduVIJgdh9QNnDSKQpFp5nYmphE8yeo3sAQNa/LQQdrY6UgEQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMwxuOtF0Pic/HNRP2Byj36cbJKNMB8GA1UdIwQY
MBaAFFZ6yb8L6R4KSGZOyLamdwlXohAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm5ySnZ3dnBIZ3BJWms3SXRxWjNDVmVpRUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNTFkMDgtODU3NS00YmZiLWFmNmUt
MDE4ODljYzAzZWJhLzEvekRHNDYwWFEtSno4YzFFX1lIS1BmcHhza28wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jNTFkMDgtODU3NS00YmZiLWFmNmUtMDE4ODljYzAzZWJh
LzEvVm5ySnZ3dnBIZ3BJWms3SXRxWjNDVmVpRUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5dkUD
BAO5dkAwDQYJKoZIhvcNAQELBQADggEBABdaafq1J9XbwyAlpmJulxZwUiDC0zFY
lZNwFrlNV7FPKNHf6WvGBCxQMCEN8GmiCLIhHscp90bWIFAaUAidjMgvZnPkYgNP
2Ab7UNAkrdVseT/fSi4DwrPGeZ84YDXDvLw5pBg8lNnBS3FiX8E3R0thxHIDmo0e
oA2nQe6Gile+eDFw6lCeqmsaW107g3Ayhxj1oW5JWDPR0Y9AwIo+aPHVcLFHSzmi
TV1Bg4UU35oDtM7E4+kd1mNWMtfr3zhDXOjsMFBE4KjxrxAYqleiU2XtywpBJXJ1
pk4ePZQo0dBg185QxlU8ylNTCGdGN2KWlnduIOhgfxxCy6BzO0WBcU4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:15 2024 by rpki-client on console-ams.rpki-client.org