Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/ZDur_u6a-RamIM5CXHdwlsheWgQ.roa
File: ZDur_u6a-RamIM5CXHdwlsheWgQ.roa (raw, json)
Hash identifier: uujjEPr9+UCamtIYP3kThmtMoVlTlUs9ffHTCNgIO3s=
Subject key identifier: 64:3B:AB:FE:EE:9A:F9:16:A6:20:CE:42:5C:77:70:96:C8:5E:5A:04
Certificate issuer: /CN=f826ffe96cdc41efaa8bfb3125862d6594be9827
Certificate serial: 018CC349312739BEFC099DB8EB2637036823
Authority key identifier: F8:26:FF:E9:6C:DC:41:EF:AA:8B:FB:31:25:86:2D:65:94:BE:98:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/ZDur_u6a-RamIM5CXHdwlsheWgQ.roa
Signing time: Mon 01 Jan 2024 04:30:02 +0000
ROA not before: Mon 01 Jan 2024 04:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207592
IP address blocks: 134.76.0.0/16 maxlen: 16
195.12.38.0/24 maxlen: 24
134.76.175.0/24 maxlen: 24
2a06:93c0:1::/48 maxlen: 48
2a06:93c0::/29 maxlen: 29
2a06:93c0:2::/48 maxlen: 48
2a06:93c0::/48 maxlen: 48
2a06:93c0:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 14 Mar 2024 14:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:31:27:39:be:fc:09:9d:b8:eb:26:37:03:68:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f826ffe96cdc41efaa8bfb3125862d6594be9827
Validity
Not Before: Jan 1 04:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=643babfeee9af916a620ce425c777096c85e5a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3f:82:74:ef:98:5e:19:4b:7b:b1:a8:73:04:
b9:bc:d1:e2:ee:72:de:23:f4:b6:45:df:1c:c9:9c:
9c:01:fa:1d:67:72:bc:e6:f5:c6:ed:87:71:eb:ef:
42:1f:56:0e:b9:32:82:ca:88:9d:f5:90:d8:55:bc:
33:fa:90:14:cb:9c:cf:b4:43:e5:44:76:e6:65:16:
4b:f3:e3:aa:74:34:66:ed:02:71:a9:f8:a1:34:4d:
10:be:7a:0a:8f:31:55:24:97:53:17:e5:c5:45:1f:
b6:69:f4:c8:76:d6:d3:37:77:0f:b6:53:77:4f:aa:
eb:cf:eb:58:eb:dd:8a:52:db:58:9d:0c:d6:44:67:
24:86:51:2b:ac:a4:d0:15:bf:e8:0b:cf:ee:bb:0e:
c9:69:5a:bc:b5:b8:d9:31:d8:24:7f:bd:a8:91:69:
85:79:2a:d4:15:ec:b9:9e:ed:b0:2d:af:fa:cf:05:
2c:a2:0d:56:0e:70:83:e6:12:a4:24:aa:b5:14:8e:
e3:43:82:9e:1f:86:72:f7:c8:26:e7:ea:f6:2b:ba:
b2:d3:19:9d:ef:cb:85:e3:a4:72:fa:19:15:2c:59:
62:78:07:cd:41:8c:30:4a:52:d0:1c:c7:91:7a:78:
74:fc:0b:c3:3a:98:a0:4a:98:9d:9f:57:07:58:f4:
ff:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3B:AB:FE:EE:9A:F9:16:A6:20:CE:42:5C:77:70:96:C8:5E:5A:04
X509v3 Authority Key Identifier:
keyid:F8:26:FF:E9:6C:DC:41:EF:AA:8B:FB:31:25:86:2D:65:94:BE:98:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/ZDur_u6a-RamIM5CXHdwlsheWgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.76.0.0/16
195.12.38.0/24
IPv6:
2a06:93c0::/29
Signature Algorithm: sha256WithRSAEncryption
9c:7a:ef:a1:d6:3d:75:a4:33:4d:8d:88:7f:3a:48:ea:df:b2:
28:a3:d4:c1:35:5d:e7:b8:9a:ae:de:b0:3a:63:7d:45:c4:ed:
bb:dd:85:0e:02:c0:a7:ae:b8:cf:ba:36:46:71:09:34:c7:45:
b4:53:e4:d2:cc:88:fe:26:fe:9d:cc:bb:15:70:f0:95:e6:8a:
82:29:a5:28:f8:a6:f6:c8:26:71:bd:73:8e:c4:3f:f6:1f:eb:
1c:5c:54:08:89:f0:82:bc:ea:89:e0:0c:24:2e:58:3a:a1:ae:
9e:07:6a:45:43:17:c6:f0:23:76:85:d5:e3:6d:dd:ce:ca:d1:
f4:13:ac:e2:6c:1b:82:b9:e1:f6:82:bc:16:23:47:45:52:70:
4a:ec:0e:12:c8:97:65:5b:ef:ca:57:d0:5a:52:ca:12:60:ed:
11:f8:c5:46:c4:e0:57:1d:64:8e:73:26:ae:d2:a2:3a:aa:2d:
9a:23:f5:b1:de:a4:94:31:0c:d7:48:eb:af:84:48:f7:ef:31:
d7:78:cb:25:df:a8:e6:7b:03:dc:8b:4c:fb:d7:e5:35:c1:cc:
2f:1e:45:1f:61:5f:4f:0a:5e:de:14:2d:4b:7a:b2:82:6d:5f:
43:07:d3:e1:f4:e2:d6:42:7d:2a:21:b7:f2:f1:a7:67:3f:53:
8a:9d:a1:63
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYzDSTEnOb78CZ246yY3A2gjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MjZmZmU5NmNkYzQxZWZhYThiZmIzMTI1ODYyZDY1OTRi
ZTk4MjcwHhcNMjQwMTAxMDQzMDAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDNiYWJmZWVlOWFmOTE2YTYyMGNlNDI1Yzc3NzA5NmM4NWU1YTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT+CdO+YXhlLe7GocwS5vNHi7nLe
I/S2Rd8cyZycAfodZ3K85vXG7Ydx6+9CH1YOuTKCyoid9ZDYVbwz+pAUy5zPtEPl
RHbmZRZL8+OqdDRm7QJxqfihNE0QvnoKjzFVJJdTF+XFRR+2afTIdtbTN3cPtlN3
T6rrz+tY692KUttYnQzWRGckhlErrKTQFb/oC8/uuw7JaVq8tbjZMdgkf72okWmF
eSrUFey5nu2wLa/6zwUsog1WDnCD5hKkJKq1FI7jQ4KeH4Zy98gm5+r2K7qy0xmd
78uF46Ry+hkVLFlieAfNQYwwSlLQHMeRenh0/AvDOpigSpidn1cHWPT/SwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFGQ7q/7umvkWpiDOQlx3cJbIXloEMB8GA1UdIwQY
MBaAFPgm/+ls3EHvqov7MSWGLWWUvpgnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1DYl82V3pjUWUtcWlfc3hKWVl0WlpTLW1DYy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvNmY2ODI2LTFhYWQtNGMzYy1iZDkx
LWNjYTM3ZTJmMjcyOS8xL1pEdXJfdTZhLVJhbUlNNUNYSGR3bHNoZVdnUS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjIvNmY2ODI2LTFhYWQtNGMzYy1iZDkxLWNjYTM3ZTJmMjcy
OS8xLzEtQ2JfNld6Y1FlLXFpX3N4SllZdFpaUy1tQ2MuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUHAQcBAf8EJDAiMBEEAgABMAsDAwCGTAME
AMMMJjANBAIAAjAHAwUDKgaTwDANBgkqhkiG9w0BAQsFAAOCAQEAnHrvodY9daQz
TY2IfzpI6t+yKKPUwTVd57iart6wOmN9RcTtu92FDgLAp664z7o2RnEJNMdFtFPk
0syI/ib+ncy7FXDwleaKgimlKPim9sgmcb1zjsQ/9h/rHFxUCInwgrzqieAMJC5Y
OqGungdqRUMXxvAjdoXV423dzsrR9BOs4mwbgrnh9oK8FiNHRVJwSuwOEsiXZVvv
ylfQWlLKEmDtEfjFRsTgVx1kjnMmrtKiOqotmiP1sd6klDEM10jrr4RI9+8x13jL
Jd+o5nsD3ItM+9flNcHMLx5FH2FfTwpe3hQtS3qygm1fQwfT4fTi1kJ9KiG38vGn
Zz9Tip2hYw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:19 2024 by rpki-client on console-ams.rpki-client.org