Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/Z7j3re33s46AelltYVigOLh9tTk.roa
File: Z7j3re33s46AelltYVigOLh9tTk.roa (raw, json)
Hash identifier: D4s8MNiq9zET1+spTuhbT/XbW+GEEfH/ChLBw/q89pE=
Subject key identifier: 67:B8:F7:AD:ED:F7:B3:8E:80:7A:59:6D:61:58:A0:38:B8:7D:B5:39
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 018C4904CE21BBD3EC15ADE695B931FC2A71
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/Z7j3re33s46AelltYVigOLh9tTk.roa
Signing time: Fri 08 Dec 2023 10:41:40 +0000
ROA not before: Fri 08 Dec 2023 10:41:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29062
IP address blocks: 31.223.224.0/21 maxlen: 32
195.177.72.0/22 maxlen: 32
185.16.228.0/22 maxlen: 32
2a00:6180::/29 maxlen: 128
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:49:04:ce:21:bb:d3:ec:15:ad:e6:95:b9:31:fc:2a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Dec 8 10:41:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67b8f7adedf7b38e807a596d6158a038b87db539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f3:14:a5:84:ab:86:4d:fa:4b:63:7f:5e:dc:
6b:6b:4b:3a:f1:2e:3e:b0:84:dd:b9:07:5c:35:df:
88:d9:b0:52:9c:f9:64:75:61:d7:22:77:33:61:5b:
4f:13:63:d0:82:77:0b:f8:12:34:32:b7:0d:36:a2:
b4:7e:98:a2:e7:5f:d5:5a:8e:bc:83:79:b8:4d:f5:
0a:4c:2a:24:26:39:dd:7b:88:a9:6d:9f:7f:90:9b:
3b:e2:7f:09:18:cd:05:cf:f4:83:9f:3d:a3:af:8a:
66:12:ee:5d:7d:b0:ad:c8:ec:20:d5:b1:38:d6:75:
8c:f5:8a:29:fa:3a:5a:0d:96:3d:05:9e:58:43:4a:
0f:9b:f0:3c:d7:bb:5d:43:ec:b6:66:64:cb:4e:e6:
f5:04:07:c1:1a:f5:98:30:ce:08:95:a2:12:e4:75:
d6:0b:7f:12:0c:16:1e:40:b5:42:99:df:73:05:a2:
70:bd:f8:08:dd:0b:ca:23:35:0a:6b:3f:9b:81:6a:
82:e3:44:12:07:2f:85:b8:03:49:ed:44:a7:9f:a5:
24:ca:fe:d5:60:f7:94:43:da:ca:5c:1f:82:23:bb:
90:42:48:f0:a3:f4:1a:9e:4b:ac:96:70:12:90:9a:
ec:ad:9d:38:f1:c1:8c:b8:a0:f3:75:7a:40:3c:26:
37:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B8:F7:AD:ED:F7:B3:8E:80:7A:59:6D:61:58:A0:38:B8:7D:B5:39
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/Z7j3re33s46AelltYVigOLh9tTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.224.0/21
185.16.228.0/22
195.177.72.0/22
IPv6:
2a00:6180::/29
Signature Algorithm: sha256WithRSAEncryption
12:3c:f0:2e:0d:7f:15:6e:ad:1c:b2:25:30:1a:bc:43:00:ce:
4c:e7:54:37:1d:c0:18:5a:e2:03:71:29:31:df:fd:dc:66:93:
ae:13:2d:07:fd:df:d2:fd:57:fe:d5:48:2b:3d:1f:06:47:ea:
27:a7:87:12:91:67:00:61:b2:3d:da:f8:d4:eb:14:89:c6:3b:
a9:37:7a:b5:2c:c7:8f:e9:9c:0f:19:53:31:cc:ee:a6:0b:dc:
91:6c:f5:91:8a:08:d0:39:5a:51:89:d3:80:22:dc:af:9c:7a:
e4:20:a3:13:2d:0f:c4:fe:e4:b9:a5:3d:1e:bf:8b:3c:bd:10:
d3:b2:9b:6c:54:ba:34:df:3b:6b:36:42:bf:c9:d5:9a:c1:a9:
7c:07:96:10:46:95:17:1d:85:92:6c:96:66:59:e4:a8:30:80:
7c:53:55:52:0e:36:6b:6c:87:2e:23:a9:c5:05:8e:ef:70:23:
3d:5f:f9:36:35:ec:44:bc:d5:af:32:05:30:80:93:38:0e:4b:
40:1a:87:0a:35:1e:ad:8f:eb:e8:49:83:c5:72:ab:9e:88:93:
eb:8e:31:b5:53:75:ee:6a:c4:95:4f:7c:be:d4:73:2d:28:28:
91:dd:1d:bb:8d:a7:c1:f7:a8:1d:0d:b9:04:cc:7f:88:b4:a3:
08:ed:22:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:46 2024 by rpki-client on console-fra.rpki-client.org