Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zsYMoELENtiAATFrhYAVd25tizs.roa
File: zsYMoELENtiAATFrhYAVd25tizs.roa (raw, json)
Hash identifier: NpTPmKa94/SezNAccNTA7kpJe3myee14c7iTkOyFPBU=
Subject key identifier: CE:C6:0C:A0:42:C4:36:D8:80:01:31:6B:85:80:15:77:6E:6D:8B:3B
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01869C59F1B9FA88CA8EDBC6BBF8AAB7CAD0
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zsYMoELENtiAATFrhYAVd25tizs.roa
Signing time: Wed 01 Mar 2023 08:46:25 +0000
ROA not before: Wed 01 Mar 2023 08:46:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 45.147.227.0/24 maxlen: 24
194.147.17.0/24 maxlen: 24
185.251.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Jun 2023 09:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:59:f1:b9:fa:88:ca:8e:db:c6:bb:f8:aa:b7:ca:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 1 08:46:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cec60ca042c436d88001316b858015776e6d8b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:25:f3:78:2e:0d:c8:65:95:de:b4:65:a6:
53:ff:5b:66:02:8b:24:c6:a2:82:c9:77:41:41:5f:
91:58:74:25:54:68:dc:ba:30:46:ad:02:e2:a9:45:
de:fc:5e:a1:e0:83:80:c4:18:77:f6:58:b1:c5:50:
66:98:a6:ea:b0:d2:d5:94:50:ef:5f:51:40:98:36:
3b:db:c7:5e:0c:21:9a:6e:2b:23:b0:33:52:a6:a1:
32:ec:49:62:a1:02:8d:99:73:3f:e9:35:55:9c:a9:
c8:20:00:0b:7a:37:39:a8:98:d8:5e:8f:2c:56:06:
7a:3a:ae:58:49:ca:d3:f7:04:f4:b7:66:e3:98:48:
c0:bd:59:fb:f4:2e:bf:fd:8c:95:33:ec:28:dd:fa:
26:1c:a6:64:3d:36:66:f6:73:a6:16:db:74:87:8a:
0c:cb:a0:97:88:2e:7d:69:8d:e2:73:82:e4:eb:5f:
61:40:6a:43:36:bd:3f:64:a7:96:70:ab:43:91:1b:
56:d5:17:6f:83:2b:b1:fe:5e:59:ea:dc:6e:47:13:
d7:16:d2:b7:3c:59:31:6d:1c:81:18:28:bd:c8:2c:
45:3d:16:38:8f:a7:24:46:bc:33:31:87:03:16:4c:
ca:b1:02:7a:0d:e9:60:18:28:d9:25:4b:fb:06:62:
a1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C6:0C:A0:42:C4:36:D8:80:01:31:6B:85:80:15:77:6E:6D:8B:3B
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zsYMoELENtiAATFrhYAVd25tizs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.227.0/24
185.251.228.0/24
194.147.17.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:19:c9:c3:7e:4c:f1:3c:46:f0:bd:2d:93:9c:91:44:99:82:
4f:92:73:36:7e:64:19:5b:44:bc:d4:01:2c:05:78:93:81:34:
44:66:3c:89:71:2d:6c:97:7e:41:76:5d:9c:71:35:70:c0:47:
9b:54:1a:30:4d:57:ce:fd:b0:ae:8a:e2:a0:38:d3:a6:71:bf:
0f:5e:31:dd:f9:b5:50:39:7b:a2:7e:ea:6c:04:fd:10:84:3b:
26:fc:a4:5d:36:4f:6a:7c:38:aa:a5:db:97:d4:65:f1:3e:cf:
71:a5:c7:12:ac:04:fe:2a:8f:cb:08:1d:60:bb:27:86:5a:c8:
b2:b8:89:a1:6b:85:7a:c9:b8:75:62:43:b6:84:48:fc:52:88:
50:2a:7b:0d:66:d7:a0:a0:23:fb:b4:22:65:2a:a8:45:39:65:
93:26:2b:19:2c:c9:09:2a:96:bb:9f:bb:4c:82:8a:11:d2:22:
8b:e9:c0:15:5b:30:31:07:8a:f4:f4:e0:99:2f:61:cb:7c:9a:
61:84:58:2b:ce:16:3e:d1:a0:73:5a:46:1f:25:57:6a:96:5d:
dc:03:1c:23:11:0a:f9:90:fc:bc:45:7f:b7:37:42:db:25:8d:
8d:65:af:20:40:60:71:bc:7f:ea:8b:82:1a:32:bc:7e:12:e8:
5a:b0:6b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:30 2024 by rpki-client on console-ams.rpki-client.org