Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZTHRveIRE4HHhiJsa_9VDsbiTlI.roa
File: ZTHRveIRE4HHhiJsa_9VDsbiTlI.roa (raw, json)
Hash identifier: K0Q2CeYmZR6wEQhrQWP0lXR9ulgv9XUB23kItGxAqu0=
Subject key identifier: 65:31:D1:BD:E2:11:13:81:C7:86:22:6C:6B:FF:55:0E:C6:E2:4E:52
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018DEAA1CC30957BC639828F5D58573149C1
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZTHRveIRE4HHhiJsa_9VDsbiTlI.roa
Signing time: Tue 27 Feb 2024 12:54:48 +0000
ROA not before: Tue 27 Feb 2024 12:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8038
IP address blocks: 46.229.255.0/24 maxlen: 24
185.150.0.0/24 maxlen: 24
185.165.44.0/24 maxlen: 24
185.217.118.0/24 maxlen: 24
203.25.124.0/24 maxlen: 24
203.159.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 15:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ea:a1:cc:30:95:7b:c6:39:82:8f:5d:58:57:31:49:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 27 12:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6531d1bde2111381c786226c6bff550ec6e24e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:21:28:57:f3:69:5d:f6:b1:68:9c:f1:62:cb:
f7:0d:79:fa:4d:87:ab:40:4f:69:6a:0e:d5:41:26:
01:52:e1:3e:aa:5d:dd:76:3f:44:cd:16:fa:cf:78:
7f:35:4b:cf:b8:b6:d3:15:f9:40:0e:26:70:c4:08:
fe:15:ac:1e:0d:25:a9:f3:58:44:51:82:2d:62:66:
30:1c:65:5f:d8:a5:68:1a:a0:42:53:ff:e7:37:3e:
39:4d:58:1d:63:8f:96:6d:88:6e:81:51:61:d8:9a:
db:91:cd:03:f8:a7:b9:df:4d:bf:73:80:a0:eb:78:
12:a8:e3:24:31:7e:2d:fe:d4:a6:4d:5b:87:25:7e:
18:0c:07:30:76:6b:5e:84:52:08:09:70:02:95:e3:
8d:40:eb:64:ca:71:71:d1:30:a6:7b:e3:6e:f8:dc:
1f:45:cc:91:a5:23:ee:67:39:00:27:57:a3:df:b7:
16:ed:52:95:ff:6c:45:78:17:79:8b:ee:5c:d1:43:
82:48:61:14:fd:92:4c:03:d4:a6:eb:81:7f:f4:c7:
b9:15:81:f4:e2:20:f0:4a:52:a4:cd:a7:6d:8e:a1:
3b:08:3d:07:b6:60:c9:9f:df:00:df:5e:16:88:eb:
c8:4f:c0:02:d3:f4:a9:a8:9f:22:4c:c3:b3:16:7e:
0c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:31:D1:BD:E2:11:13:81:C7:86:22:6C:6B:FF:55:0E:C6:E2:4E:52
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZTHRveIRE4HHhiJsa_9VDsbiTlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.255.0/24
185.150.0.0/24
185.165.44.0/24
185.217.118.0/24
203.25.124.0/24
203.159.82.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:1e:11:55:68:3b:c1:a2:49:ed:6c:05:12:87:54:91:23:38:
b2:65:22:ba:bf:05:11:21:ce:11:46:81:9d:a1:6a:33:e4:ea:
97:07:c5:24:6b:c2:c1:24:30:b4:1e:75:29:1d:3f:7b:e0:95:
4b:b6:1d:8d:d9:60:4f:4d:29:c6:11:25:b7:43:89:a9:65:7a:
9f:77:46:a0:03:68:54:1b:5a:6c:1c:2f:3b:53:82:ae:2c:a6:
a5:40:85:49:6f:c6:de:04:86:e7:f0:0e:d7:77:cc:8e:2b:af:
07:bf:84:c7:7e:07:3a:d4:e1:ba:a2:bb:d1:1c:58:1f:55:6a:
7d:8c:39:53:f0:5d:04:3e:31:8d:bf:c9:e4:53:07:80:ee:e2:
c7:a4:b6:1f:60:84:00:a5:7f:0e:72:8b:70:db:a6:ee:f8:cc:
bb:64:ba:33:14:4c:f7:56:b3:33:92:42:3e:da:dd:49:2a:fe:
f2:ae:90:1d:ef:6b:69:fa:d3:15:65:61:7c:7d:4d:6f:df:e4:
ff:e8:e5:93:b1:65:9e:7f:26:68:f6:34:dc:4e:da:7f:94:9f:
82:6f:f3:64:90:db:db:dc:14:02:9e:d5:a4:07:5a:80:5f:05:
7a:a0:e7:ff:0f:f7:42:21:74:1c:cb:9c:89:c3:49:51:7b:96:
c6:a6:08:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 18:42:08 2024 by rpki-client on console-fra.rpki-client.org