Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/zCkd_rWQyls6RgqZdaCQWmfMZJs.roa
File: zCkd_rWQyls6RgqZdaCQWmfMZJs.roa (raw, json)
Hash identifier: 8C3sreqICBriKxvBOwlWd+acGPzZvX7jBZ9gcIhPMo4=
Subject key identifier: CC:29:1D:FE:B5:90:CA:5B:3A:46:0A:99:75:A0:90:5A:67:CC:64:9B
Certificate issuer: /CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Certificate serial: 0192F6B134F5ECFD843A74F1A6D585032202
Authority key identifier: B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/zCkd_rWQyls6RgqZdaCQWmfMZJs.roa
Signing time: Mon 04 Nov 2024 10:21:01 +0000
ROA not before: Mon 04 Nov 2024 10:21:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61213
IP address blocks: 94.140.17.0/24 maxlen: 24
185.206.4.0/22 maxlen: 23
2a02:d60::/48 maxlen: 48
2a02:d60:1::/48 maxlen: 48
2a02:d60:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 15 Nov 2024 07:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f6:b1:34:f5:ec:fd:84:3a:74:f1:a6:d5:85:03:22:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Validity
Not Before: Nov 4 10:21:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc291dfeb590ca5b3a460a9975a0905a67cc649b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7e:11:c1:ac:b8:10:fa:1c:89:ec:23:7d:d8:
21:fc:39:e9:00:f0:f9:3d:b2:e2:14:07:ee:80:a7:
09:5b:ca:6b:8a:8a:20:c7:5d:89:3b:13:36:ac:00:
09:56:ff:69:34:c6:a4:aa:4f:58:63:65:26:73:82:
76:2e:6e:56:77:1a:99:b5:ef:f5:37:d9:2a:22:d7:
3e:e9:ef:86:27:aa:67:97:6c:11:cf:66:30:02:61:
67:0f:74:73:d7:13:49:14:48:16:9a:f3:67:19:8e:
82:49:04:fd:c0:6b:82:4a:33:2e:48:95:7e:46:02:
34:b3:bd:7a:b9:d1:5d:a8:75:fd:b1:2d:d3:79:57:
22:c4:58:26:92:7d:f8:5e:b0:51:c3:c1:78:29:0d:
e2:5e:6f:a3:d7:ee:be:e6:55:03:04:c5:8c:e7:7c:
9d:ff:a6:99:95:c1:39:f6:59:a0:f0:af:17:e8:00:
1d:2d:3b:66:73:b7:ab:b0:67:cd:a2:e6:b4:16:a6:
f1:5f:e6:c2:4c:5d:d9:a0:a1:af:06:97:8f:0d:8c:
c9:b5:dd:75:ca:ad:7d:3a:8c:8a:a7:7c:33:3d:a2:
a7:b1:de:92:2e:27:0d:3a:85:87:5e:1d:b1:26:16:
6a:49:ef:fc:d9:a3:3c:e0:a0:74:70:13:32:2b:69:
68:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:29:1D:FE:B5:90:CA:5B:3A:46:0A:99:75:A0:90:5A:67:CC:64:9B
X509v3 Authority Key Identifier:
keyid:B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/zCkd_rWQyls6RgqZdaCQWmfMZJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.140.17.0/24
185.206.4.0/22
IPv6:
2a02:d60::-2a02:d60:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
66:62:a0:27:bd:27:95:6a:5c:33:74:2e:4c:c6:d4:5a:3e:e6:
5d:d1:85:1a:16:63:cf:ed:14:1a:ca:57:3d:c7:73:a8:42:48:
c4:58:0c:3f:64:78:49:63:65:36:0c:19:7f:2e:e1:f3:ed:37:
1e:10:55:35:1c:e3:d6:f5:a5:6e:af:77:5a:8e:ef:e4:f9:dd:
99:6e:36:c4:9f:cf:1e:54:ce:d7:c3:39:33:ed:ac:1d:88:75:
a4:b8:a9:ca:03:ec:4f:a7:ac:6a:c3:b2:ea:ab:96:22:44:96:
e9:fb:d0:c1:9e:27:ee:b1:c1:51:cd:61:95:6d:c5:29:8d:ef:
98:d6:68:9e:f0:4a:89:bf:bf:10:78:a6:82:18:13:2b:1e:f2:
5b:4d:d1:d7:5d:4b:4c:51:43:0b:e5:d4:55:fd:51:47:7e:0c:
ae:de:8b:df:f7:1f:59:45:30:84:db:e5:16:f2:8b:8a:3e:20:
98:1b:8f:65:b4:3d:f6:22:ac:40:f7:19:7b:6c:a4:85:76:40:
c7:da:92:5f:c1:25:25:9b:e4:d2:0f:b2:35:ed:d6:58:7d:ce:
2a:c1:54:0e:72:3f:04:9e:d9:5e:47:0b:98:7f:9f:d7:e1:58:
b5:74:2e:ce:e0:2b:e9:72:9b:18:03:74:3d:f3:dd:8c:1c:9d:
0c:2f:09:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 08:20:12 2024 by rpki-client on console-fra.rpki-client.org