Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Z0JqYYmgECiC8gXETAZVO0Nz2j4.roa
File: Z0JqYYmgECiC8gXETAZVO0Nz2j4.roa (raw, json)
Hash identifier: 6J60UkZBVOuDCzFYQ15coj0Sw5xoMmWfb7JOJ/PuJGk=
Subject key identifier: 67:42:6A:61:89:A0:10:28:82:F2:05:C4:4C:06:55:3B:43:73:DA:3E
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018B3817CF0E9F18B312854111C5FEF86DD2
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Z0JqYYmgECiC8gXETAZVO0Nz2j4.roa
Signing time: Mon 16 Oct 2023 10:46:06 +0000
ROA not before: Mon 16 Oct 2023 10:46:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 92.61.109.0/24 maxlen: 24
92.61.106.0/24 maxlen: 24
185.112.240.0/24 maxlen: 24
185.112.243.0/24 maxlen: 24
185.112.242.0/24 maxlen: 24
185.112.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Nov 2023 07:43:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:17:cf:0e:9f:18:b3:12:85:41:11:c5:fe:f8:6d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Oct 16 10:46:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67426a6189a0102882f205c44c06553b4373da3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:c4:61:04:6d:a2:9c:d9:b8:dc:ca:6f:62:
4d:1a:35:ad:82:f7:b4:cd:bb:47:3f:68:88:a6:77:
41:ce:dc:b5:30:11:a3:b1:b0:fb:a6:f3:18:82:93:
bc:3d:f0:78:c8:19:0b:05:42:9d:71:bf:6a:ba:a9:
16:cc:0e:9b:90:ee:63:45:b5:ff:ef:3c:86:5f:17:
8c:7d:26:5b:9f:77:2d:7a:fb:e3:26:02:a8:29:f4:
11:51:4f:00:23:3e:f9:2b:ac:6b:0d:15:ca:75:cf:
69:e1:29:12:b2:47:60:02:ac:e8:75:20:1e:6f:17:
fc:99:92:1f:68:00:48:9e:c4:08:7d:96:6b:90:74:
7d:56:a6:c3:a4:28:d2:5a:19:83:ec:79:1d:17:6d:
db:96:b3:b5:71:ba:5d:04:75:51:bc:8b:f4:d9:db:
25:b0:79:52:42:52:3a:59:08:b8:30:8b:31:b4:f2:
24:c9:a0:06:77:26:fa:68:dc:50:8d:70:4c:b7:90:
9a:e3:1c:9c:37:a0:f8:8c:ab:a2:cf:18:2d:b8:c5:
6f:60:70:30:7b:79:66:6a:59:c2:fd:54:01:b1:79:
89:71:7a:70:c1:4b:83:9a:6d:b9:31:0d:04:80:67:
1b:57:22:29:f1:0f:e0:dc:9f:d3:e1:0e:bf:cd:e9:
8d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:42:6A:61:89:A0:10:28:82:F2:05:C4:4C:06:55:3B:43:73:DA:3E
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Z0JqYYmgECiC8gXETAZVO0Nz2j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.106.0/24
92.61.109.0/24
185.112.240.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:8a:e1:f2:3f:80:3c:ea:18:9e:63:c9:a2:13:bd:ab:a4:56:
7b:ff:a0:db:79:2a:84:bb:6a:b0:ff:0f:c2:fc:ce:28:dd:f9:
74:d7:2d:9e:73:c3:bb:0a:65:dc:e5:3e:6b:00:cb:7d:a5:3b:
69:fa:a7:bb:94:e2:13:08:2b:c3:fb:37:6c:77:a4:8b:41:fa:
37:9b:85:b4:bc:ce:f4:46:b6:a3:c3:e2:3b:c0:43:1f:4d:71:
99:dc:d3:e4:a3:d4:dc:58:07:2d:15:82:96:c3:0b:7e:c0:74:
81:21:1c:0f:3f:3a:4a:de:e1:8e:44:22:4e:90:4c:56:af:86:
4e:f9:2a:c3:f0:ec:1f:bc:69:38:45:77:06:94:f5:1e:3a:3d:
5e:40:1d:d0:e2:b4:99:20:12:b1:bc:8f:7f:d8:bd:e3:4e:25:
9c:f8:57:81:0f:c6:33:9c:35:c4:9c:0a:d0:f8:15:e9:e7:ed:
6f:80:cd:b0:4e:10:ae:df:b6:89:f1:4e:76:9a:f9:25:81:d0:
59:f6:d2:d3:65:37:0e:62:48:ed:43:c0:da:6e:d6:10:14:6f:
2f:cf:5f:04:50:74:3c:af:36:1f:05:1c:db:7e:a1:d8:37:b7:
e9:99:f2:3d:d3:63:cb:76:cf:e7:0c:6a:25:9d:cd:4b:0b:94:
1a:c0:52:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:21 2024 by rpki-client on console-ams.rpki-client.org