Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Z2stD3cnVyF_BDYDQQzkYCZaFlo.roa
File: Z2stD3cnVyF_BDYDQQzkYCZaFlo.roa (raw, json)
Hash identifier: qtB8zWvO/gWWI6nwAxku8HDAirSncmRr9lyHyaT10jM=
Subject key identifier: 67:6B:2D:0F:77:27:57:21:7F:04:36:03:41:0C:E4:60:26:5A:16:5A
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01925E1A36C0ADF58A537DE00977D0E65E5F
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Z2stD3cnVyF_BDYDQQzkYCZaFlo.roa
Signing time: Sat 05 Oct 2024 19:13:49 +0000
ROA not before: Sat 05 Oct 2024 19:13:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 19:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:5e:1a:36:c0:ad:f5:8a:53:7d:e0:09:77:d0:e6:5e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 5 19:13:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=676b2d0f772757217f043603410ce460265a165a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:85:52:f3:8a:41:45:e8:55:e7:62:d3:25:35:
de:b6:ac:92:27:e4:69:3d:6c:a2:4e:03:bc:32:14:
9f:f0:46:8c:74:e7:79:e1:b3:a8:3a:40:1a:b7:37:
08:05:f5:11:cc:83:70:c0:18:be:f3:60:52:17:02:
a2:98:cd:a5:54:50:c9:8a:da:05:5e:0d:db:3e:b0:
97:41:a2:d5:82:25:b8:3b:2c:bd:c8:ce:58:94:b2:
1d:60:8f:1f:ba:a9:d2:7e:3b:6a:d6:3d:91:38:ae:
f8:6f:76:e9:fb:7a:94:ef:fe:7b:bd:83:f2:85:fb:
a1:ea:44:e2:1f:0b:19:77:9e:10:56:7a:29:80:ef:
d4:b7:6a:83:04:92:ab:08:c1:01:e3:7d:ec:42:e3:
74:b5:f0:ea:83:56:9a:d6:a0:52:2b:ac:f4:2b:fe:
51:6e:8c:d8:35:11:d6:ee:69:02:4c:34:fd:6b:72:
18:4d:57:0f:b7:d0:fe:af:03:d1:db:cb:37:4f:d7:
c2:f2:39:ac:c2:a2:53:9b:b9:9f:9d:37:68:49:7a:
7e:d1:a4:c3:00:f0:8c:5a:11:71:f7:6b:cc:d3:a4:
2d:5e:92:86:aa:6b:0f:a0:16:de:94:aa:20:b5:14:
79:f1:be:71:fd:9b:04:fc:2d:24:7c:44:22:89:9c:
fe:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6B:2D:0F:77:27:57:21:7F:04:36:03:41:0C:E4:60:26:5A:16:5A
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Z2stD3cnVyF_BDYDQQzkYCZaFlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.205.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:06:11:05:87:91:40:f1:c8:25:78:2e:fd:7e:e3:6f:17:b4:
eb:46:93:20:9f:05:2b:34:16:7c:23:67:b1:fd:5c:b1:c2:0a:
85:03:bf:fa:54:5b:2a:96:da:9d:43:af:84:fe:d1:0f:37:2b:
04:1c:f8:ea:52:fa:88:47:4a:bd:5f:0c:67:4b:74:9f:67:51:
50:70:e8:e5:26:85:81:76:61:d8:99:5a:e7:5e:ec:b7:17:20:
41:97:23:22:67:ab:2f:40:a0:99:4a:7b:f8:e6:a1:12:e9:d7:
a3:9d:1a:c0:f6:92:69:26:92:75:b2:8d:85:79:84:c2:13:e7:
d7:73:e0:ff:2f:42:58:22:f1:ec:be:2c:dd:2a:44:8d:3b:d2:
a0:0e:28:c5:be:79:36:79:1e:27:f8:82:e0:61:ea:57:bb:5c:
7e:0d:35:9e:4e:7f:b7:81:1f:32:f5:7a:9a:f2:d9:f9:2e:5e:
f5:ea:bd:61:60:78:4e:3a:dd:e6:06:d6:c0:71:b6:00:e0:ee:
b6:8a:fb:0e:7a:b2:9d:45:16:f4:7b:7f:e0:8f:28:46:e9:f1:
b0:03:9a:f1:75:5a:89:cc:2f:61:c1:2a:9a:18:2d:d5:a8:32:
a9:95:36:e0:31:1a:82:0b:8e:6b:4b:e2:ca:4e:0b:39:5a:06:
79:ff:99:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:29 2025 by rpki-client