Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/ZTEvAgZx9Xg-dwIeutOPBBf7hy4.roa
File: ZTEvAgZx9Xg-dwIeutOPBBf7hy4.roa (raw, json)
Hash identifier: 7m8pscdrwKtqbaG93cE9+exZI6oM0wtrke9N+nG+Mxc=
Subject key identifier: 65:31:2F:02:06:71:F5:78:3E:77:02:1E:BA:D3:8F:04:17:FB:87:2E
Certificate issuer: /CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Certificate serial: 0193AFFAFF82B8C290BDED1D124629B0FF00
Authority key identifier: 97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/ZTEvAgZx9Xg-dwIeutOPBBf7hy4.roa
Signing time: Tue 10 Dec 2024 09:51:22 +0000
ROA not before: Tue 10 Dec 2024 09:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34380
IP address blocks: 185.162.148.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Dec 2024 11:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:af:fa:ff:82:b8:c2:90:bd:ed:1d:12:46:29:b0:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Validity
Not Before: Dec 10 09:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65312f020671f5783e77021ebad38f0417fb872e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ad:f8:79:1f:e9:f1:af:f9:b3:a5:e3:a2:80:
c8:02:cc:f3:65:b4:cb:0f:9d:0a:d0:34:80:be:1d:
9a:ca:81:90:96:70:66:2f:cc:88:3c:84:41:71:86:
3c:d5:1b:88:bd:72:37:44:c3:bf:5e:c4:96:ef:98:
74:a1:b6:fc:4f:d2:6f:a5:a0:05:4d:71:38:85:a2:
8e:69:14:f1:f3:54:3a:ca:79:42:de:e6:75:ad:ec:
ed:65:4b:e2:55:d6:92:af:48:10:eb:f7:df:0a:32:
ac:90:12:81:ff:68:bd:4c:f0:3f:d8:c1:8d:8b:41:
ac:fd:e2:d9:f9:05:c2:c4:66:49:68:dc:00:c9:f9:
74:e4:93:6b:68:72:7b:74:10:6e:01:94:f7:9c:ef:
14:78:c2:33:6f:26:45:73:c3:0b:6f:43:57:8d:b9:
ed:22:62:8e:72:cc:13:35:9c:74:53:3b:7b:a2:ed:
df:e1:76:24:7f:3a:5d:d7:a2:50:24:7e:5a:09:e3:
21:eb:c3:2c:f1:cd:2e:67:6b:8f:36:e3:e3:d9:41:
20:24:8f:4d:a7:4e:01:31:7b:23:d9:4c:be:02:3d:
37:c2:b2:98:97:99:ad:cb:68:6c:b7:e3:08:35:38:
d2:bd:d2:1a:44:31:d1:5a:5e:96:18:51:bc:bb:8a:
66:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:31:2F:02:06:71:F5:78:3E:77:02:1E:BA:D3:8F:04:17:FB:87:2E
X509v3 Authority Key Identifier:
keyid:97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/ZTEvAgZx9Xg-dwIeutOPBBf7hy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.148.0/22
Signature Algorithm: sha256WithRSAEncryption
71:63:3b:76:bb:df:6c:e2:ea:6d:5f:45:cd:d2:7d:eb:ce:59:
01:93:4f:d3:a9:ab:0a:81:fa:ec:71:07:df:0e:6c:9a:8b:4a:
a3:ac:1e:3d:dd:0c:ad:ca:04:48:59:43:f0:95:d7:9a:b2:e6:
34:58:c9:62:52:0d:0c:c7:c9:34:34:4b:d8:b6:3f:92:18:ef:
67:38:ef:df:0e:5f:75:08:2e:5c:5c:ef:38:4a:74:eb:c2:08:
c3:96:41:ba:5d:18:24:03:b1:c0:4e:d5:ac:da:a2:ef:dd:ad:
4d:6f:42:96:31:41:3c:4f:63:e9:d7:02:78:93:ba:77:32:91:
96:11:3a:f9:33:17:66:b0:07:56:24:99:eb:cc:33:35:80:35:
ee:81:f9:8d:33:87:af:23:2a:95:d1:8b:5b:d4:db:17:59:1f:
de:18:69:98:5f:08:e4:7b:5d:01:65:54:40:b6:03:44:f8:3f:
32:eb:1c:a8:8c:01:17:da:17:24:56:bb:b5:1e:1d:09:43:6d:
bc:1e:f1:dd:30:d3:1f:64:fb:10:c6:35:4b:fb:f3:8a:ac:ac:
19:00:5e:84:a1:0e:f3:de:80:ae:e8:bd:97:c3:fd:80:73:58:
22:66:50:88:b9:ac:c6:06:d3:6a:69:cf:3d:ba:34:b6:55:1d:
8d:e0:4e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:38:55 2025 by rpki-client