Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/ZBifZ2N8ElsU95KiDVjdkqX2kIw.roa
File: ZBifZ2N8ElsU95KiDVjdkqX2kIw.roa (raw, json)
Hash identifier: R97AXRE0nBx7yAzY/EG05k52TAbObpxAnMo12JpEg+k=
Subject key identifier: 64:18:9F:67:63:7C:12:5B:14:F7:92:A2:0D:58:DD:92:A5:F6:90:8C
Certificate issuer: /CN=2cc25ff32918f0b49306259d483afb9e381a3915
Certificate serial: 018570674E3403035CC0980543497409F4F1
Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/ZBifZ2N8ElsU95KiDVjdkqX2kIw.roa
Signing time: Mon 02 Jan 2023 02:54:56 +0000
ROA not before: Mon 02 Jan 2023 02:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44400
IP address blocks: 185.158.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Jul 2023 11:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:4e:34:03:03:5c:c0:98:05:43:49:74:09:f4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915
Validity
Not Before: Jan 2 02:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64189f67637c125b14f792a20d58dd92a5f6908c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d3:36:4a:a1:7a:56:4c:b0:e8:6a:91:de:74:
4f:90:30:bb:26:1f:de:2d:91:93:2f:40:fc:ba:5b:
0c:ca:45:b9:57:9b:c1:3a:30:ad:ea:1f:bf:b8:d5:
00:53:be:52:ab:0a:a2:cd:41:be:5f:31:e6:c8:6b:
86:2c:33:72:d8:dc:1f:e7:73:6d:6d:39:00:34:e1:
98:12:5b:71:db:ec:31:2b:92:76:d6:c7:ea:89:a4:
98:95:38:ad:35:9a:97:16:f9:57:9d:a9:93:5d:c9:
c3:ea:27:b9:90:83:89:19:07:01:e1:84:ae:a9:14:
1b:a9:ec:6f:74:20:3d:4c:5e:17:2b:01:5f:93:f3:
cb:3c:ff:de:51:28:ce:b1:93:e4:30:12:34:ae:6d:
20:d5:a0:ad:a9:c9:ab:33:a9:52:95:f6:6a:33:7c:
60:21:4c:09:e6:7a:41:50:b0:f2:66:46:7d:31:cf:
14:be:01:20:0d:b4:3c:b2:b2:47:66:1c:c4:fc:47:
79:3f:26:69:10:80:83:d2:59:f4:45:0b:73:c0:d5:
70:9d:91:12:88:9f:6e:65:8e:7d:ee:4f:3d:a5:29:
bb:8e:4b:52:20:b6:9a:1e:ef:c4:07:99:60:4e:3c:
b9:36:ac:78:7f:db:b6:82:e3:00:9d:65:74:53:a6:
2d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:18:9F:67:63:7C:12:5B:14:F7:92:A2:0D:58:DD:92:A5:F6:90:8C
X509v3 Authority Key Identifier:
keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/ZBifZ2N8ElsU95KiDVjdkqX2kIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.175.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:af:d0:94:d1:0a:0c:13:45:eb:6d:f0:67:95:3d:8c:d6:92:
fa:4f:a2:35:47:90:ca:5f:bb:3d:66:78:00:19:dd:c4:fa:e2:
c1:2f:8d:c6:59:47:a9:98:a9:2d:72:ec:de:56:7b:d9:71:40:
4e:1c:88:5e:77:c5:80:14:44:63:ff:de:14:d3:8a:47:93:0b:
95:3a:49:b4:21:64:11:2e:ba:67:33:1f:0b:aa:6b:12:48:97:
3a:4b:d1:9e:03:c8:54:20:2c:77:b1:ac:da:7c:6d:a3:43:0e:
85:75:b8:9d:3f:45:86:f8:2c:98:35:ad:d3:4a:69:f6:04:6f:
15:c8:70:ac:8b:8a:10:d6:f4:4a:60:7d:09:7e:a6:01:e3:cb:
a4:5a:b3:ad:09:84:b6:9f:59:dd:08:15:8f:7d:f5:21:6a:db:
db:24:27:2a:d8:6c:0b:0a:77:58:0e:10:bf:ae:f7:93:d0:0d:
21:84:4b:10:cd:5e:c0:e3:03:96:1b:45:36:54:e5:b2:99:69:
55:0a:6b:b7:c1:33:69:18:ee:ab:43:c9:57:20:92:8d:13:81:
49:f1:ec:43:a1:14:1a:fc:57:5e:67:1d:13:88:37:e6:6e:40:
85:53:49:02:da:e7:66:70:5e:cd:0d:d1:cb:08:cf:d7:1d:03:
d6:1c:aa:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:15 2024 by rpki-client on console-fra.rpki-client.org