Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/zbjXEMmOFm8ChfeKv4UDOBQfPzo.roa
File: zbjXEMmOFm8ChfeKv4UDOBQfPzo.roa (raw, json)
Hash identifier: 0xky4Ac9XWpqTKFbOPQzBl66BYY5yj719RuA0jUM8SI=
Subject key identifier: CD:B8:D7:10:C9:8E:16:6F:02:85:F7:8A:BF:85:03:38:14:1F:3F:3A
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01937D4EB362CCEE6316CABB9EBF86CBDBC6
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/zbjXEMmOFm8ChfeKv4UDOBQfPzo.roa
Signing time: Sat 30 Nov 2024 13:42:09 +0000
ROA not before: Sat 30 Nov 2024 13:42:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198154
IP address blocks: 45.11.185.0/24 maxlen: 24
2a05:9080::/48 maxlen: 48
2a05:9080:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:7d:4e:b3:62:cc:ee:63:16:ca:bb:9e:bf:86:cb:db:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Nov 30 13:42:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdb8d710c98e166f0285f78abf850338141f3f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:17:83:b7:22:52:5b:fb:84:64:f1:40:2b:a4:
02:d8:3c:e3:0e:43:b7:d0:2d:90:18:90:41:5a:42:
2f:7f:a8:cf:fe:98:68:50:fe:9e:94:ea:91:e6:1e:
cf:8a:41:dc:23:ca:16:64:f5:e6:78:8d:3e:b2:ff:
a8:a0:8e:b8:60:5b:51:47:98:62:02:cb:a2:57:52:
87:df:72:05:da:99:e4:48:ca:e7:98:3c:53:b0:6d:
5f:32:4a:2c:df:dc:c9:93:d0:b3:a0:3d:87:61:a9:
59:1f:77:f5:ad:da:2f:f9:9f:61:a7:4c:88:38:24:
ed:1a:36:c7:b6:5d:3f:e2:da:88:32:da:46:a3:01:
cc:32:a6:59:56:a1:ba:7a:8b:58:ba:d0:73:bc:80:
83:3d:12:39:21:63:ac:3e:4e:f3:39:a1:a9:b3:d7:
66:7a:2c:ce:78:c6:88:f6:cb:13:a1:4f:e6:6a:b5:
fb:56:4d:4c:11:83:0a:96:da:80:53:e2:d4:88:1f:
f4:40:10:95:0a:df:da:54:a5:fe:17:71:82:af:0d:
5e:bc:06:ed:68:31:5f:2f:17:ef:bd:69:f5:e4:d2:
26:7f:78:a2:54:26:c9:ad:5a:c5:98:cd:57:af:5d:
1a:96:64:2c:f8:8a:8d:7e:98:67:d6:f8:10:bd:17:
17:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B8:D7:10:C9:8E:16:6F:02:85:F7:8A:BF:85:03:38:14:1F:3F:3A
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/zbjXEMmOFm8ChfeKv4UDOBQfPzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.185.0/24
IPv6:
2a05:9080::/48
2a05:9080:4::/48
Signature Algorithm: sha256WithRSAEncryption
ac:c8:d5:9e:c2:1e:c3:cf:42:74:29:06:d9:ca:08:69:56:36:
6f:da:5f:4b:49:72:b7:75:fa:df:c0:10:7a:b4:64:4c:06:05:
d0:5d:db:f4:bb:00:bb:ab:74:2f:0f:30:9d:20:bd:e8:32:0d:
f3:3b:b4:d2:a2:18:41:ce:93:ae:fc:f3:a9:7b:bb:ef:54:7b:
25:c0:fe:84:82:ba:4d:09:cd:77:d8:f1:84:ca:26:dd:e7:0b:
78:94:d9:f8:ca:af:4a:76:c5:32:54:32:1d:b0:3a:23:9f:bf:
1a:0d:b6:8b:92:a1:95:bc:8d:57:21:84:57:32:e2:27:fc:7b:
a8:4c:19:6d:87:31:0a:48:3e:79:60:cb:d4:26:01:f5:19:c9:
dc:f1:f9:73:c3:1a:c6:4f:59:2f:35:b5:bb:1a:e4:d6:71:dc:
80:dc:52:18:7d:bd:c4:89:ce:3d:6c:68:47:f6:b2:b5:33:3c:
64:f5:c5:4e:b1:4c:9a:15:48:14:52:11:b7:2a:ca:9c:5c:5d:
09:a7:8f:29:54:3a:f1:7a:4a:0a:c5:dc:d8:6d:fa:e3:be:cc:
4a:45:32:b0:86:12:83:be:db:87:49:30:d3:f8:c0:4a:4e:e8:
94:46:95:b7:03:93:f1:5d:f7:46:89:31:49:c7:7c:bb:9d:74:
4e:af:67:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:52:47 2025 by rpki-client