Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/zkIC9QXHMxI7AtreJ6a5H2ITL-Y.roa
File: zkIC9QXHMxI7AtreJ6a5H2ITL-Y.roa (raw, json)
Hash identifier: 2vmR52M3yV/oR77Gyj7/JpBz1dE8tvBmvelO5Z/DwPA=
Subject key identifier: CE:42:02:F5:05:C7:33:12:3B:02:DA:DE:27:A6:B9:1F:62:13:2F:E6
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018FE933A8687ABEB8236DCCED8F47C8BD2A
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/zkIC9QXHMxI7AtreJ6a5H2ITL-Y.roa
Signing time: Wed 05 Jun 2024 16:20:27 +0000
ROA not before: Wed 05 Jun 2024 16:20:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 401084
IP address blocks: 185.177.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 03:51:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e9:33:a8:68:7a:be:b8:23:6d:cc:ed:8f:47:c8:bd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jun 5 16:20:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce4202f505c733123b02dade27a6b91f62132fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:5a:f8:f7:a9:12:0b:38:8a:e1:d0:46:8d:
9e:2a:79:3d:ed:0d:3e:2e:81:51:a5:95:d5:b9:68:
f5:ed:4d:42:df:7a:31:42:46:75:0f:6c:e2:45:6b:
ef:21:8c:e3:d3:77:4a:7b:6e:dc:16:e8:86:a9:38:
55:29:58:69:81:0f:ee:25:09:b3:b7:34:41:51:99:
c1:8d:7f:9f:cd:86:cc:dc:20:0a:14:26:51:72:12:
12:0a:d7:0a:2b:95:f2:9d:9f:ff:0c:04:24:c4:77:
ea:a8:4d:c4:25:14:8e:b2:9f:11:7c:47:ac:90:62:
51:50:ac:8b:3c:ad:c6:c2:0f:4b:18:6f:bf:1d:98:
78:a9:80:3b:80:47:4c:16:e8:18:1a:85:ee:cb:dc:
41:56:44:ee:77:a7:50:62:2c:32:47:1c:62:5d:a7:
0c:51:d6:6a:80:4d:4a:83:5c:b6:7e:7e:32:9c:6b:
12:b7:9f:aa:31:6c:f5:9f:20:48:bc:f1:4f:46:5c:
62:cb:72:4f:52:c9:67:e2:a3:6c:0f:39:f9:69:09:
c2:82:31:f7:a4:73:24:4f:3c:f1:0b:e5:ec:2b:42:
e8:f0:07:22:d3:a0:a8:3e:74:65:39:53:c1:5c:b5:
00:8c:98:57:68:bb:92:45:27:85:15:83:87:44:e8:
a0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:42:02:F5:05:C7:33:12:3B:02:DA:DE:27:A6:B9:1F:62:13:2F:E6
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/zkIC9QXHMxI7AtreJ6a5H2ITL-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.25.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c8:19:ab:a5:e6:56:08:11:b1:5a:79:e3:2d:c2:fc:b2:72:
80:f6:61:33:ef:dd:2c:07:6e:e4:16:64:1e:40:e7:3b:9d:83:
4b:82:d0:ac:3c:1e:8d:9b:02:77:d8:d1:a4:8b:b0:bb:19:34:
89:b9:a3:3d:24:67:fe:1d:7e:0e:df:e6:0c:9e:ad:12:ed:cb:
be:7f:df:b5:df:10:1e:46:c3:a7:a2:f8:87:d2:ca:83:a0:37:
ee:a6:ae:8d:c3:c4:52:d3:96:88:fb:bf:4d:05:69:c9:f4:e2:
53:ed:8c:8d:c9:fd:b5:46:60:e2:94:a4:84:ff:d6:56:31:4a:
44:e7:2d:b6:01:01:71:57:c8:3d:fb:ac:8f:08:e6:72:69:f0:
48:9f:45:7d:10:e1:a9:1f:db:78:a5:52:1a:51:d5:1c:a8:08:
01:23:36:f2:8f:a9:07:3e:5e:b1:dd:f6:e0:88:6f:f0:26:25:
ab:5c:ce:74:70:56:32:35:5d:3d:e3:14:87:fe:cb:ea:ab:34:
04:f0:1e:b3:8c:07:73:ad:2b:f8:30:e1:de:7a:da:5c:a4:9b:
a3:f1:53:36:b0:ad:43:8e:f8:57:29:61:dc:98:3f:06:46:6c:
a4:9b:33:50:5d:a4:db:2c:67:4f:64:7d:a1:df:3b:0c:1f:67:
27:f0:a5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:49 2024 by rpki-client on console-ams.rpki-client.org