Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/ZFDUOKSHvCk-6lQYMwu8RKTCFXI.roa
File: ZFDUOKSHvCk-6lQYMwu8RKTCFXI.roa (raw, json)
Hash identifier: 4wAii/GzN1K2B5RaO4Rzid1Ew5GGuFcLiTdZmsG7A1I=
Subject key identifier: 64:50:D4:38:A4:87:BC:29:3E:EA:54:18:33:0B:BC:44:A4:C2:15:72
Certificate issuer: /CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Certificate serial: 019294FEAF1EE19CE010AEB6C81452FCB7CA
Authority key identifier: 83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/ZFDUOKSHvCk-6lQYMwu8RKTCFXI.roa
Signing time: Wed 16 Oct 2024 11:02:51 +0000
ROA not before: Wed 16 Oct 2024 11:02:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13030
IP address blocks: 37.17.232.0/21 maxlen: 21
45.80.136.0/22 maxlen: 22
77.74.80.0/21 maxlen: 21
77.109.128.0/18 maxlen: 18
77.109.128.0/19 maxlen: 19
77.109.160.0/19 maxlen: 19
80.253.88.0/21 maxlen: 21
81.6.32.0/20 maxlen: 20
82.197.160.0/19 maxlen: 19
82.197.160.0/20 maxlen: 20
82.197.176.0/20 maxlen: 20
85.195.192.0/20 maxlen: 20
85.195.208.0/20 maxlen: 20
85.195.224.0/19 maxlen: 19
85.195.224.0/20 maxlen: 20
85.195.240.0/20 maxlen: 20
109.202.192.0/19 maxlen: 19
141.195.80.0/20 maxlen: 20
185.72.64.0/22 maxlen: 22
185.72.67.0/24 maxlen: 24
185.137.172.0/22 maxlen: 22
185.183.192.0/22 maxlen: 22
185.201.248.0/22 maxlen: 22
185.246.104.0/22 maxlen: 22
193.47.153.0/24 maxlen: 24
193.223.80.0/20 maxlen: 20
195.134.128.0/19 maxlen: 19
212.51.128.0/19 maxlen: 19
212.51.128.0/20 maxlen: 20
212.51.144.0/20 maxlen: 20
213.144.128.0/19 maxlen: 19
213.144.128.0/20 maxlen: 20
213.144.144.0/20 maxlen: 20
2001:1620::/32 maxlen: 32
2a02:168::/30 maxlen: 30
2a02:168::/32 maxlen: 32
2a02:169::/32 maxlen: 32
2a07:600::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 23 Oct 2024 14:08:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:fe:af:1e:e1:9c:e0:10:ae:b6:c8:14:52:fc:b7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Validity
Not Before: Oct 16 11:02:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6450d438a487bc293eea5418330bbc44a4c21572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:37:b9:43:83:c0:14:93:f5:11:e9:85:d3:d5:
34:67:8b:9e:49:9c:ad:62:1a:d4:0f:f6:9f:d0:2f:
5e:71:82:c1:25:0b:14:9b:9c:7a:7e:47:c9:02:0f:
e5:2e:d8:03:6f:ba:ff:37:f5:f4:5d:54:3f:12:b6:
5f:0a:6d:46:35:e9:2c:43:d8:58:c2:cd:db:ec:62:
0f:ea:08:3c:f3:ed:d6:f7:d2:5e:33:ca:73:fe:ec:
ee:a4:bc:f4:c9:f3:a9:43:99:08:d4:17:a3:92:a2:
42:d1:21:ec:67:9f:bf:44:55:dd:94:b7:ac:fb:72:
61:38:b1:2b:d0:36:d1:19:dc:a6:59:77:01:32:39:
2e:c3:f2:ca:70:36:0b:4e:bb:bd:ce:e2:f7:64:a1:
8b:0f:63:1a:32:6c:3d:6e:89:fd:71:38:97:a2:cd:
da:94:1f:7a:27:d2:13:e2:e9:6c:5c:f0:cf:82:75:
58:21:89:d4:49:b5:b8:4f:1f:6a:63:50:bf:62:e7:
38:5c:8b:c9:ee:f4:f7:0a:65:6a:b2:d6:61:8f:b3:
ef:ba:12:f1:cb:66:72:01:ee:0b:7f:01:0d:35:59:
a3:71:fd:62:5a:fb:2b:91:62:fe:ec:c5:ab:64:49:
ef:6f:f0:2a:29:a5:9a:c6:3b:5a:01:3c:ee:d0:a2:
a9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:50:D4:38:A4:87:BC:29:3E:EA:54:18:33:0B:BC:44:A4:C2:15:72
X509v3 Authority Key Identifier:
keyid:83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/ZFDUOKSHvCk-6lQYMwu8RKTCFXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.232.0/21
45.80.136.0/22
77.74.80.0/21
77.109.128.0/18
80.253.88.0/21
81.6.32.0/20
82.197.160.0/19
85.195.192.0/18
109.202.192.0/19
141.195.80.0/20
185.72.64.0/22
185.137.172.0/22
185.183.192.0/22
185.201.248.0/22
185.246.104.0/22
193.47.153.0/24
193.223.80.0/20
195.134.128.0/19
212.51.128.0/19
213.144.128.0/19
IPv6:
2001:1620::/32
2a02:168::/30
2a07:600::/29
Signature Algorithm: sha256WithRSAEncryption
c4:15:c8:d9:cc:6b:59:f1:44:ac:25:ff:05:5a:f1:b3:2f:da:
e0:2b:02:d8:d9:6a:69:81:24:48:8d:15:97:50:26:9c:b0:3e:
bd:3f:2d:bd:d7:d7:ca:36:d8:79:07:61:df:76:80:25:b8:6d:
3e:bb:5f:34:31:7b:f6:70:ad:db:cf:49:b4:c6:62:66:ae:4e:
3a:e6:b0:8e:5e:5f:de:ed:3d:2c:26:8c:46:d7:ea:e4:30:5b:
ad:cc:c9:63:06:e7:85:41:28:23:b4:af:f7:98:99:8f:75:77:
5d:af:89:71:4f:1f:80:50:66:76:e8:f7:8e:62:7e:4e:96:5a:
5d:3d:d7:53:8d:c8:22:19:37:33:b6:f2:47:d9:60:3d:58:f2:
3f:56:d0:c4:69:e7:ea:0a:41:ec:fb:30:e8:6e:90:44:08:a1:
a9:fb:da:b3:77:f7:a2:31:70:be:43:e8:c3:67:0a:4b:06:72:
0d:7f:51:ed:b2:87:03:48:c2:18:fa:d3:2f:2e:f9:80:dd:66:
53:74:6d:9b:75:17:62:a8:8b:93:38:14:5b:de:de:05:99:69:
ec:79:7a:3d:b7:24:b4:79:93:4a:71:7d:dc:b7:5c:b7:3e:8f:
73:8d:61:3a:a6:13:14:da:a4:76:d9:85:45:c9:89:02:68:ff:
e5:b9:e8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 16:24:29 2024 by rpki-client on console-fra.rpki-client.org