Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/zAGM_7Q-zcA4sTAbf__emE-hR70.roa
File: zAGM_7Q-zcA4sTAbf__emE-hR70.roa (raw, json)
Hash identifier: rPArSctn2XbNyTpNjeEWVKulsHW4iH3xRXrX1vmSqyA=
Subject key identifier: CC:01:8C:FF:B4:3E:CD:C0:38:B1:30:1B:7F:FF:DE:98:4F:A1:47:BD
Certificate issuer: /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Certificate serial: 01856E8B3D7283BB5609976AD73F149FF113
Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/zAGM_7Q-zcA4sTAbf__emE-hR70.roa
Signing time: Sun 01 Jan 2023 18:14:57 +0000
ROA not before: Sun 01 Jan 2023 18:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39294
IP address blocks: 45.82.219.0/24 maxlen: 24
45.82.218.0/24 maxlen: 24
45.82.216.0/24 maxlen: 24
195.88.135.0/24 maxlen: 24
195.88.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:3d:72:83:bb:56:09:97:6a:d7:3f:14:9f:f1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Validity
Not Before: Jan 1 18:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc018cffb43ecdc038b1301b7fffde984fa147bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:76:ff:43:16:2c:cc:de:bd:8c:38:4c:2c:2b:
2c:0d:52:5b:8e:72:58:c3:0f:0d:45:95:a4:77:38:
09:c2:a3:9b:db:cd:50:f4:c7:f2:80:a6:af:a6:3e:
fe:51:da:bb:24:6a:fd:c0:86:3a:fb:35:a4:d7:76:
cf:7b:f0:58:67:e7:07:a3:ad:ad:50:c3:77:5d:47:
68:d1:3d:0a:3e:96:b7:60:31:90:c6:f4:a1:5c:10:
dd:9c:ba:66:14:2c:12:45:2f:17:aa:1b:49:0b:a3:
a1:ec:35:44:1e:b5:ec:9e:3b:b7:0a:28:21:eb:f3:
ef:06:fc:f2:5b:99:88:7e:91:2c:69:7f:66:e7:1c:
c9:24:b2:bd:46:8c:07:87:dd:c3:8b:b9:e7:47:bd:
54:07:ef:29:83:3c:39:ff:ef:91:89:97:8c:4d:38:
0c:05:a0:3d:2a:07:33:ff:aa:dd:77:ad:4a:7f:c6:
6e:75:e3:6b:5b:02:8f:e8:95:7d:b3:b4:6a:ff:a0:
3b:97:a8:c9:14:3b:b4:04:e6:93:87:d1:2c:74:a8:
c2:3f:2a:77:f1:94:7e:8b:71:c1:e1:ea:4b:d6:32:
1e:cb:38:e4:c0:2d:d6:35:f5:ef:50:93:a0:c4:93:
8c:5c:04:21:8e:e7:94:7f:14:22:fd:53:7b:cf:60:
e4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:01:8C:FF:B4:3E:CD:C0:38:B1:30:1B:7F:FF:DE:98:4F:A1:47:BD
X509v3 Authority Key Identifier:
keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/zAGM_7Q-zcA4sTAbf__emE-hR70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.216.0/24
45.82.218.0/23
195.88.134.0/23
Signature Algorithm: sha256WithRSAEncryption
59:0a:23:06:98:4d:f3:f3:ab:62:4d:c9:f7:13:a2:1d:d7:5f:
a5:be:28:32:f3:49:0e:6e:86:06:81:a8:12:ca:31:c9:1b:0c:
f9:68:f8:aa:bd:71:64:1f:61:51:5c:98:e9:4f:19:7c:d3:eb:
bc:9d:7f:9b:91:30:8f:de:35:b1:12:51:37:ae:ef:73:d3:d1:
40:50:90:5f:e4:4e:c9:d6:39:c8:be:e9:af:b5:d1:ca:51:a6:
d8:1d:e8:b7:29:26:7c:5a:50:37:e5:38:83:3f:ed:74:de:34:
ae:eb:f5:0f:d9:44:b0:bf:d7:92:04:65:0f:34:f5:9d:f4:ac:
22:12:37:d5:a8:9b:d9:bf:5a:50:de:b6:22:b4:09:c8:97:25:
83:49:10:a6:be:ff:50:e9:2e:89:20:94:e0:c6:ec:b5:99:4b:
da:6f:e4:04:f3:75:07:c4:bf:6e:c8:5b:e5:f7:aa:71:25:47:
39:7f:4c:06:e2:1d:6e:f6:6c:fe:1c:a0:e1:98:26:34:95:af:
14:60:82:d1:de:66:92:b0:a9:54:09:53:ee:2f:40:e0:b9:94:
a0:b7:19:3a:8c:db:ef:c9:e4:e3:ee:26:54:21:1d:60:5b:b5:
1d:90:73:7e:76:06:e8:c1:12:5e:70:00:20:48:c7:00:fb:4a:
1a:e7:07:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:27 2024 by rpki-client on console-fra.rpki-client.org