Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/ZBlIbQcGI_iYAdNriW4LiOuavMw.roa
File: ZBlIbQcGI_iYAdNriW4LiOuavMw.roa (raw, json)
Hash identifier: Ey5N+Mavd8x0raBXK5nQyAb6MUhwtfItWf0no8uge6M=
Subject key identifier: 64:19:48:6D:07:06:23:F8:98:01:D3:6B:89:6E:0B:88:EB:9A:BC:CC
Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Certificate serial: 019427B51F9CBA7941AD3B9BB594FD6216D1
Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/ZBlIbQcGI_iYAdNriW4LiOuavMw.roa
Signing time: Thu 02 Jan 2025 15:49:29 +0000
ROA not before: Thu 02 Jan 2025 15:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 185.239.176.0/24 maxlen: 24
185.239.177.0/24 maxlen: 24
185.239.178.0/24 maxlen: 24
185.239.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 09:08:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:1f:9c:ba:79:41:ad:3b:9b:b5:94:fd:62:16:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Validity
Not Before: Jan 2 15:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6419486d070623f89801d36b896e0b88eb9abccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:a7:7c:23:0c:9a:ba:05:55:f3:20:7b:79:
bf:23:b1:b2:36:3c:dd:fa:86:82:b5:78:15:aa:aa:
c8:10:05:5d:20:98:dc:23:20:68:ab:1c:9c:7a:d9:
70:37:44:bf:7d:f7:47:93:b6:67:36:00:43:58:16:
3b:95:b8:18:b9:ba:7e:9a:d0:b4:8f:db:87:3e:37:
45:12:a9:c0:d3:bb:35:08:c7:10:bc:aa:ad:55:3d:
c6:4d:e1:e4:b6:1e:49:62:31:27:7e:48:94:8f:03:
27:a1:e9:41:e7:81:6e:45:da:d4:39:90:8d:52:1e:
8d:6c:bd:4f:7b:82:61:cd:94:58:0e:4d:2b:83:8b:
cb:be:13:7a:9b:d5:49:64:63:15:38:67:cc:44:5b:
65:b0:5b:30:3f:66:b2:e4:3f:00:27:fb:0d:d4:91:
6e:43:99:94:78:75:41:e6:2a:d0:48:01:1b:85:61:
83:c3:41:ad:8a:0d:af:1d:bd:b8:01:08:10:2b:d5:
d4:1c:23:66:cb:1b:e1:ba:30:a9:5e:53:f5:bb:7e:
f3:18:3b:ee:be:7d:ef:4e:08:f8:b3:e4:ae:e8:ce:
39:1d:3d:67:8b:5a:23:85:10:02:1c:45:a5:58:20:
2a:a7:2f:81:dc:2d:df:e6:f4:15:b9:c8:ff:a0:70:
52:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:19:48:6D:07:06:23:F8:98:01:D3:6B:89:6E:0B:88:EB:9A:BC:CC
X509v3 Authority Key Identifier:
keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/ZBlIbQcGI_iYAdNriW4LiOuavMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.176.0/22
Signature Algorithm: sha256WithRSAEncryption
12:ad:41:76:c5:43:6d:53:9a:a8:45:d6:59:3b:4b:30:80:65:
21:48:c6:f4:31:81:c4:ce:0b:bc:9f:17:e7:be:4b:4c:f3:94:
ec:c5:18:8d:f2:71:57:2a:aa:9c:dc:69:52:6e:ef:90:68:75:
7c:a9:11:5a:79:22:c8:0f:75:98:2a:36:f0:b4:22:35:14:95:
fb:67:ff:a3:a1:42:81:17:7c:16:fc:2d:ca:15:bf:7e:85:cb:
73:13:10:10:7a:b8:10:a2:a6:14:c4:3a:de:ca:c9:18:53:04:
c6:4c:18:2e:d9:f0:28:d5:10:d5:d6:98:d2:14:86:69:db:a7:
99:e2:5a:e9:df:d2:27:32:56:30:db:18:fb:c8:25:b7:2e:9f:
b7:26:e7:49:c9:90:a6:bb:89:8e:e8:4e:9a:0f:8e:d3:b8:e2:
2b:10:a9:a7:1a:dc:0d:b3:ff:91:96:bb:02:16:99:f9:55:3c:
9f:9d:c6:1e:7e:e8:73:43:44:8a:8e:1b:68:cb:40:f1:f9:c5:
c3:7c:7a:e3:21:48:9a:69:f4:3d:b9:3d:55:5c:cb:c9:5b:ab:
b6:8a:b4:bd:e4:76:46:76:66:8c:d2:e4:e3:a5:11:0e:56:b0:
ff:a8:93:c4:1b:cd:ff:32:63:97:3e:fb:95:ef:62:74:2e:01:
29:9c:b7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:10:35 2025 by rpki-client