Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/ZXRHDLAkFYx9ZlPK5zbr8BATF0Y.roa
File: ZXRHDLAkFYx9ZlPK5zbr8BATF0Y.roa (raw, json)
Hash identifier: iAoxaf7yQyjSiFJFEItW5mgYsspQhiAuh2zJpM2tHD4=
Subject key identifier: 65:74:47:0C:B0:24:15:8C:7D:66:53:CA:E7:36:EB:F0:10:13:17:46
Certificate issuer: /CN=c0f92571108958786b65ffa241b1f11f6d058b56
Certificate serial: 018BD9E7FD3CD547501B58CF6A082DF89202
Authority key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/ZXRHDLAkFYx9ZlPK5zbr8BATF0Y.roa
Signing time: Thu 16 Nov 2023 20:52:21 +0000
ROA not before: Thu 16 Nov 2023 20:52:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.79.75.0/24 maxlen: 24
185.79.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Nov 2023 21:37:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d9:e7:fd:3c:d5:47:50:1b:58:cf:6a:08:2d:f8:92:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f92571108958786b65ffa241b1f11f6d058b56
Validity
Not Before: Nov 16 20:52:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6574470cb024158c7d6653cae736ebf010131746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:81:1c:1b:de:82:a5:97:1f:08:6d:71:98:78:
91:55:25:69:b5:00:fd:fa:0e:26:9a:41:02:5d:54:
29:36:3f:38:a6:bb:92:e9:8f:d6:cd:15:33:d2:75:
d1:08:32:0b:a8:64:b4:90:f8:c7:b7:6f:c9:6a:6e:
69:78:2d:ca:75:d7:3d:ab:33:cc:16:ac:44:1c:6e:
a3:98:c0:9f:c1:45:0d:ef:6f:cb:21:c2:73:01:5b:
a1:d3:ff:9e:5e:c7:6c:00:65:9f:36:fb:dd:eb:93:
48:bf:da:46:c6:9e:69:b9:d7:3b:31:ba:6e:2a:ce:
4f:35:8b:29:a7:71:93:d9:f0:5e:7b:7e:c6:11:d0:
3c:bf:79:7f:21:37:f0:c5:64:93:be:26:e9:b0:09:
97:57:1b:89:ac:eb:4a:9e:d7:be:16:30:fb:17:24:
a9:16:ca:74:9e:ca:0d:08:4d:aa:ae:80:df:be:21:
a5:d1:1e:ed:77:ef:0b:b7:a5:0b:31:5b:96:07:0a:
32:3c:88:78:3f:f6:35:88:d5:e3:a9:9e:d4:79:24:
e6:93:5e:68:ce:65:f4:9f:75:8e:50:78:f6:0a:77:
12:74:44:85:9e:ae:6d:2b:4c:a9:8c:0b:d6:b9:93:
91:83:c4:2b:74:b9:89:a9:78:38:bd:56:63:39:0d:
6b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:74:47:0C:B0:24:15:8C:7D:66:53:CA:E7:36:EB:F0:10:13:17:46
X509v3 Authority Key Identifier:
keyid:C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/ZXRHDLAkFYx9ZlPK5zbr8BATF0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.72.0/24
185.79.75.0/24
Signature Algorithm: sha256WithRSAEncryption
32:bd:48:34:60:04:14:a3:07:95:43:f6:d3:aa:57:ca:c9:32:
7f:ac:3f:6c:ca:37:48:b2:bb:17:a6:98:e8:ce:20:43:e7:dd:
9c:05:e0:50:2e:30:3e:9f:2e:c7:fd:d6:7c:c0:c6:90:07:85:
77:71:8e:d1:78:e6:53:5e:5e:7d:36:96:6e:ec:97:3c:ef:65:
95:6f:8b:31:4b:5f:7f:dd:9b:09:f9:49:4c:54:93:4f:7f:92:
72:ea:21:59:84:69:47:03:52:71:c8:31:d3:c2:80:32:b9:c2:
d6:f0:e7:f1:04:33:d1:87:68:f1:4a:57:08:b9:ff:0f:fc:aa:
f6:62:00:df:0c:e5:f6:3e:67:91:0b:ee:1b:61:8e:9b:08:c3:
9c:a8:2d:ec:96:0c:8a:73:c2:e0:fe:19:48:54:49:25:e1:ad:
a4:8a:66:43:64:b2:80:ae:ae:d6:a1:c3:cf:0f:f2:a8:97:d8:
04:d9:8f:40:0a:a8:84:26:dc:53:1e:d1:ac:4c:90:cf:c4:4a:
d2:03:26:eb:3d:f2:5e:1f:05:66:1f:8d:7f:8a:f6:c2:b0:43:
3e:89:47:c8:d3:5c:dc:51:5c:90:5e:17:f4:b5:cb:60:ad:0b:
e0:87:12:68:cd:ba:38:1b:20:2f:de:3f:01:03:48:19:34:76:
db:be:3a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:01 2024 by rpki-client on console-fra.rpki-client.org