Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ZWE23eglhmBcxMKoWWYCpBQDLNg.roa
File: ZWE23eglhmBcxMKoWWYCpBQDLNg.roa (raw, json)
Hash identifier: +64YU5cQnE9kDR785du+UY7gValStcd7dzdcxXwX0mI=
Subject key identifier: 65:61:36:DD:E8:25:86:60:5C:C4:C2:A8:59:66:02:A4:14:03:2C:D8
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01857295FDAC2449E4E167BFE260D52440C3
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ZWE23eglhmBcxMKoWWYCpBQDLNg.roa
Signing time: Mon 02 Jan 2023 13:05:10 +0000
ROA not before: Mon 02 Jan 2023 13:05:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212578
IP address blocks: 195.114.192.0/24 maxlen: 24
195.114.196.0/24 maxlen: 24
195.114.197.0/24 maxlen: 24
195.114.198.0/24 maxlen: 24
195.114.193.0/24 maxlen: 24
195.114.194.0/24 maxlen: 24
195.114.195.0/24 maxlen: 24
195.114.203.0/24 maxlen: 24
195.114.204.0/24 maxlen: 24
195.114.205.0/24 maxlen: 24
195.114.206.0/24 maxlen: 24
195.114.200.0/24 maxlen: 24
195.114.201.0/24 maxlen: 24
195.114.202.0/24 maxlen: 24
45.155.240.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
45.155.243.0/24 maxlen: 24
45.155.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Feb 2023 08:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:fd:ac:24:49:e4:e1:67:bf:e2:60:d5:24:40:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 2 13:05:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=656136dde82586605cc4c2a8596602a414032cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:45:95:17:11:07:76:87:04:10:59:3c:86:03:
4b:7a:48:dc:c0:a9:5b:6a:a9:1b:01:d2:01:e4:f9:
a4:d3:98:b8:a8:9b:fc:6b:d1:bc:47:1f:3e:1f:dc:
2d:e6:e0:7c:c3:29:df:a6:11:01:60:b9:25:c2:8e:
b4:79:72:7a:90:a7:81:e8:7d:0c:f1:15:ad:cb:b2:
fb:14:af:e5:89:0d:ea:2c:ac:26:9d:5e:fd:e1:82:
23:3a:1e:cc:78:de:ac:e6:06:43:7c:68:2f:ac:e5:
e6:cb:35:35:65:9e:71:90:47:60:2c:3d:8f:b2:0b:
0c:83:40:7a:ac:6d:a0:a1:30:f4:ff:0d:fd:9d:97:
f3:e9:aa:d4:5f:27:7c:3d:9e:00:b2:a6:3f:2c:c8:
b2:26:6e:93:62:2b:b5:66:9b:b1:1d:75:4e:00:94:
c3:54:ba:77:03:44:e4:ea:ad:bd:bb:85:86:7c:dd:
51:0c:09:8d:3b:5a:6b:d4:a7:ff:2e:13:98:5f:63:
99:f2:cc:92:f7:a2:a5:0a:36:01:ec:2b:4e:9b:08:
a5:5e:3e:d4:48:85:91:c9:6a:bb:61:28:7a:48:10:
2b:d6:c3:eb:05:97:f3:ac:ba:ac:91:25:01:f7:43:
c8:cf:35:d6:b7:6e:98:94:ad:23:2a:2e:55:e2:f2:
1e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:61:36:DD:E8:25:86:60:5C:C4:C2:A8:59:66:02:A4:14:03:2C:D8
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ZWE23eglhmBcxMKoWWYCpBQDLNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0/22
195.114.192.0-195.114.198.255
195.114.200.0-195.114.206.255
Signature Algorithm: sha256WithRSAEncryption
a9:9b:2d:b8:f9:78:56:7c:9f:bd:07:0a:09:5f:e8:c3:ff:da:
31:29:22:7a:4a:69:82:ba:1d:3a:1c:7a:96:16:6e:eb:5d:3b:
78:ce:1a:0b:10:f1:dd:45:ee:8c:9b:b0:62:fe:c7:8e:57:ef:
8f:86:f7:c1:22:6d:c2:7d:86:93:2b:6a:cc:d2:86:a5:52:fd:
2f:e2:8e:d8:7b:81:0d:6f:a8:d2:fa:3f:80:3d:6b:37:bc:0f:
4c:87:3b:bc:71:a7:15:1b:11:dc:2f:6d:0a:ce:b6:5f:67:95:
f2:ef:8c:7e:1d:ce:1f:10:cb:38:ac:a9:9c:ad:52:82:72:66:
87:36:2d:37:ed:c4:72:e8:27:f6:af:66:21:f6:f7:69:df:fc:
49:a7:55:a0:b4:00:ad:ee:b3:d5:19:80:19:d8:22:0d:51:80:
dc:2f:50:1d:20:dc:58:c3:89:27:5b:08:2f:c5:c9:37:fa:92:
3e:58:02:a2:46:67:c8:ce:15:8f:b3:8f:ca:ef:62:90:27:3e:
e9:92:7c:01:3d:63:09:2a:5c:36:2d:64:77:85:1a:16:bf:a9:
9e:04:dd:bc:d1:15:67:2d:de:2a:b8:7a:2e:2d:58:b0:59:31:
d3:9a:2e:59:00:21:38:d5:b9:cc:2d:03:c4:76:e6:dd:8f:fb:
b5:3e:b2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:18 2024 by rpki-client on console-fra.rpki-client.org