Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/ZYXlSC4OETg-pvqmVZeGyjqC2CU.roa
File: ZYXlSC4OETg-pvqmVZeGyjqC2CU.roa (raw, json)
Hash identifier: mU54uiDNZa10ZsTvzI55xwf/jocFIE0Adh/BZiWopP8=
Subject key identifier: 65:85:E5:48:2E:0E:11:38:3E:A6:FA:A6:55:97:86:CA:3A:82:D8:25
Certificate issuer: /CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
Certificate serial: 0191C28B1EA9483E692933E7C1CB215E18CB
Authority key identifier: B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/ZYXlSC4OETg-pvqmVZeGyjqC2CU.roa
Signing time: Thu 05 Sep 2024 14:16:22 +0000
ROA not before: Thu 05 Sep 2024 14:16:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209220
IP address blocks: 185.104.122.0/24 maxlen: 24
2a06:3000:1000::/36 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c2:8b:1e:a9:48:3e:69:29:33:e7:c1:cb:21:5e:18:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
Validity
Not Before: Sep 5 14:16:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6585e5482e0e11383ea6faa6559786ca3a82d825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:f4:68:9c:6f:0b:de:79:b2:53:5c:e8:c3:
19:50:7e:76:8e:93:75:0d:9b:3a:a3:79:4b:b6:e2:
03:ad:4f:82:8d:e1:aa:bb:da:5a:c3:5b:8f:3c:45:
8c:25:89:77:6a:24:39:b5:5a:e1:35:e1:fa:53:4d:
52:f6:43:36:d9:5e:df:5d:54:e3:7d:75:a7:07:c6:
3a:b3:37:cf:46:a8:77:cd:b1:19:de:9b:18:e8:7b:
fe:1c:9e:8d:83:3a:14:c9:d5:4d:0c:0d:7e:e6:0e:
ad:f6:a6:57:72:1d:55:e3:1d:eb:25:44:c8:4d:8a:
08:0b:44:a8:eb:83:eb:73:70:1f:d8:7d:4a:32:b8:
5b:e4:3e:fc:2f:1b:a9:59:ff:48:5c:b3:a3:44:d8:
91:4d:cc:80:29:33:f3:a0:1a:58:d5:8f:ba:31:57:
c5:81:a7:6a:b8:55:58:a1:da:55:b0:b8:84:4c:71:
b6:2e:ed:56:9e:27:bb:4e:35:56:85:12:ad:1f:7b:
74:2e:39:5d:77:14:1e:ba:21:9c:27:e7:9a:17:02:
17:57:d7:8d:1d:4c:ed:6f:6d:2f:bb:23:17:fd:3a:
66:9c:d0:21:a3:f7:e6:a8:52:6e:16:f1:79:4b:29:
3b:72:ca:dd:e5:80:85:14:98:9f:18:4a:fd:73:6b:
0a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:85:E5:48:2E:0E:11:38:3E:A6:FA:A6:55:97:86:CA:3A:82:D8:25
X509v3 Authority Key Identifier:
keyid:B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/ZYXlSC4OETg-pvqmVZeGyjqC2CU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.122.0/24
IPv6:
2a06:3000:1000::/36
Signature Algorithm: sha256WithRSAEncryption
92:e7:3c:c8:ed:e3:89:7f:bb:39:e5:e3:bd:31:c6:0f:1b:9a:
64:a1:ac:36:e1:c4:29:96:bf:0d:02:94:8a:68:55:a2:bc:de:
f6:9c:47:76:b2:e7:95:ab:dc:13:92:4d:ee:34:15:66:0b:bb:
22:cf:8e:0f:82:f5:f2:1c:a2:71:19:d2:bc:eb:21:d2:83:3a:
aa:c6:c0:3b:40:1d:51:63:9f:7d:09:9b:eb:24:a2:cd:01:9a:
a6:e7:4c:b7:b8:74:3b:51:c6:cb:14:b1:92:e9:27:be:ce:ba:
1b:75:eb:22:37:73:c0:51:35:eb:33:13:85:87:a3:ca:f0:1f:
fd:53:4c:bb:12:0e:6d:c1:87:9e:4a:57:f8:77:69:29:e4:0b:
c7:49:db:be:25:99:5a:e6:75:1f:c2:f6:72:24:96:3f:45:f0:
4a:a9:0c:fc:13:5b:78:3b:12:10:c6:87:80:fb:15:ad:8f:3f:
70:23:6d:f9:24:58:b7:13:01:8d:06:4b:39:16:a1:53:a2:2f:
14:bc:25:39:06:aa:98:85:4a:66:d9:c4:60:26:66:de:68:13:
3f:fc:04:bd:e6:97:fe:5f:e8:5a:03:95:40:01:7b:1b:c3:34:
08:85:03:9c:93:c6:08:05:a5:93:e1:bf:28:72:09:46:bb:52:
61:d0:e1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:34 2025 by rpki-client