Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zn15KrEzAxWZeWJECMNROrhPLMY.roa
File: zn15KrEzAxWZeWJECMNROrhPLMY.roa (raw, json)
Hash identifier: RuOJrSqfSerVDYMR8BjXWWmPC13JdiJJmCFy8DpPbh0=
Subject key identifier: CE:7D:79:2A:B1:33:03:15:99:79:62:44:08:C3:51:3A:B8:4F:2C:C6
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01880106E6A52E7447FEEC8F93076926E08E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zn15KrEzAxWZeWJECMNROrhPLMY.roa
Signing time: Tue 09 May 2023 15:00:09 +0000
ROA not before: Tue 09 May 2023 15:00:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.147.224.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
185.251.229.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 10 May 2023 10:40:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:01:06:e6:a5:2e:74:47:fe:ec:8f:93:07:69:26:e0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 9 15:00:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce7d792ab13303159979624408c3513ab84f2cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:99:43:96:c0:32:7c:b2:2e:20:84:0a:01:08:
ff:66:66:2e:c9:6e:15:75:46:d8:8b:62:e9:44:8b:
da:e9:cd:e4:e5:5d:53:ae:cf:7f:ef:6c:00:ed:01:
10:f9:19:72:e2:0f:ef:eb:3f:fd:92:34:96:29:b6:
d1:66:59:df:0e:88:38:18:9b:0b:d6:50:dc:83:00:
5a:68:b4:9d:2e:94:c9:58:22:57:d6:0a:b6:90:4e:
9a:bf:a7:cf:bb:16:a1:ba:f5:e3:d1:b8:85:3f:f4:
7c:14:e6:8d:4e:25:5d:ee:33:d4:85:1d:96:e4:d8:
b8:e0:9d:f6:2b:43:f3:d5:c3:bd:0a:57:31:e2:43:
89:12:56:e7:70:a8:fd:c4:ca:91:62:c2:3e:a8:27:
3c:80:b5:cc:bf:db:8e:c6:34:2a:91:a7:17:f9:fd:
de:5a:f0:19:db:b9:cd:a9:6c:68:2b:59:9b:22:68:
72:cf:98:37:78:2b:58:43:09:b9:d7:a4:49:55:f9:
3a:fe:c0:27:e5:32:d7:72:aa:77:9c:9c:49:3b:79:
65:ec:87:76:7d:f5:7c:ea:61:19:59:1c:57:b8:e7:
51:d0:14:a0:a3:8c:d1:ca:e1:49:52:00:fa:f0:78:
58:a9:97:13:39:48:4d:8c:59:48:e4:0b:65:bf:06:
4c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7D:79:2A:B1:33:03:15:99:79:62:44:08:C3:51:3A:B8:4F:2C:C6
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zn15KrEzAxWZeWJECMNROrhPLMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.147.224.0/24
185.225.0.0/23
185.246.112.0/24
185.246.115.0/24
185.251.229.0/24
185.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
66:8a:0e:e6:73:46:0d:cc:8d:d8:2c:5c:8f:f6:6a:75:8d:c3:
16:a8:43:d9:7f:9f:73:1f:14:04:5c:c3:2f:f1:07:82:f0:37:
19:88:dc:5e:84:8f:45:58:45:38:df:f1:29:02:a0:91:c5:14:
f5:2b:9e:cb:aa:65:42:90:80:60:d9:bd:b4:0b:b4:9f:b3:79:
1f:3c:cf:d1:fa:b7:38:ef:c0:93:f8:a5:d9:92:e3:69:77:ab:
18:af:73:48:2f:b8:64:39:20:c0:ed:33:8e:32:f1:30:75:17:
9b:27:1e:06:2d:43:6b:73:ff:63:22:6f:26:2c:89:bd:4f:08:
84:f7:27:50:49:d8:58:84:dd:a1:17:ad:ae:49:eb:e8:b4:34:
ef:d5:33:ec:9c:a6:1e:21:39:00:bc:00:74:e9:05:48:5d:b7:
c5:12:5d:c3:dc:e4:42:b0:9b:d7:7e:72:25:99:00:88:8d:08:
a0:d2:da:b1:dd:83:47:f0:76:fb:1c:68:6f:ea:84:02:c7:5f:
16:a1:57:84:fc:bc:ce:54:b6:1d:8d:e9:b5:06:19:51:38:14:
bf:6c:f4:55:9f:bb:13:5d:4a:aa:75:12:12:ca:4c:07:bc:63:
5a:b0:32:30:ff:a2:60:1c:9a:12:28:60:53:bf:26:6a:f1:82:
53:8d:b6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:30 2024 by rpki-client on console-ams.rpki-client.org