Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/ZpdmpTeuP3fzIf4fg6kXZvK0_04.roa
File: ZpdmpTeuP3fzIf4fg6kXZvK0_04.roa (raw, json)
Hash identifier: QPbHTmbEKXCLKVXyGUMsxIGIclZjGRt2RhCcOYJW09Y=
Subject key identifier: 66:97:66:A5:37:AE:3F:77:F3:21:FE:1F:83:A9:17:66:F2:B4:FF:4E
Certificate issuer: /CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
Certificate serial: 01856D818345E8725535047078991C26E860
Authority key identifier: C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/ZpdmpTeuP3fzIf4fg6kXZvK0_04.roa
Signing time: Sun 01 Jan 2023 13:24:42 +0000
ROA not before: Sun 01 Jan 2023 13:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49106
IP address blocks: 62.122.192.0/24 maxlen: 24
62.122.192.0/21 maxlen: 21
62.122.192.0/22 maxlen: 22
62.122.198.0/24 maxlen: 24
46.150.160.0/20 maxlen: 20
46.150.160.0/21 maxlen: 21
46.150.160.0/24 maxlen: 24
46.150.160.0/22 maxlen: 22
46.150.160.0/19 maxlen: 19
46.150.160.0/23 maxlen: 23
46.150.176.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:83:45:e8:72:55:35:04:70:78:99:1c:26:e8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
Validity
Not Before: Jan 1 13:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=669766a537ae3f77f321fe1f83a91766f2b4ff4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:4f:60:00:32:6a:07:17:37:91:19:28:d7:
3f:53:a0:21:25:37:88:17:7f:0a:98:da:d8:46:ab:
52:0e:40:46:d1:93:ed:07:f7:19:b0:51:05:a6:68:
df:11:02:5b:09:60:93:cf:2e:72:5d:6f:22:05:b2:
92:03:f5:ff:cc:fa:6c:ef:35:b6:00:f6:a6:b2:e7:
f5:1d:d0:7b:d2:ed:82:5c:d4:54:a3:e8:f6:a3:e5:
ca:12:b8:ae:bc:f3:3b:90:62:11:10:a4:18:1a:93:
d2:ee:9c:b3:c5:6f:d2:99:b5:a6:7d:c8:17:2a:46:
61:d7:e0:7c:b2:b3:82:92:e3:9e:42:7e:a8:11:95:
f4:47:b1:5a:23:95:18:05:f0:9c:32:d9:53:45:fd:
cc:6c:05:31:ee:d6:cb:e4:e3:45:87:67:23:00:36:
d6:65:9e:ff:7d:81:47:0f:07:52:ee:61:86:5d:b3:
32:57:44:48:4a:f3:1f:db:c9:af:78:22:d6:54:a7:
ef:a5:d6:89:95:62:8d:cb:79:71:d3:1e:21:6c:82:
4f:ff:a1:c3:eb:f1:28:a4:e2:6c:e0:7f:63:d0:a4:
fb:5f:f4:0c:c7:ec:55:87:a1:ce:7a:ea:35:48:94:
ef:4a:d5:e9:97:af:a8:bb:2c:f7:32:92:a0:b5:c7:
3b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:97:66:A5:37:AE:3F:77:F3:21:FE:1F:83:A9:17:66:F2:B4:FF:4E
X509v3 Authority Key Identifier:
keyid:C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/ZpdmpTeuP3fzIf4fg6kXZvK0_04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.150.160.0/19
62.122.192.0/21
Signature Algorithm: sha256WithRSAEncryption
44:87:df:69:85:ca:36:7a:50:6c:09:00:dd:2e:16:4e:8e:8f:
7c:eb:b9:9c:14:88:ba:de:19:03:4f:5d:64:3e:c7:3b:98:ef:
ee:59:d0:1c:60:d0:28:4d:96:a1:84:30:9e:d4:25:32:3b:ac:
dd:3b:c7:38:4b:b7:53:75:c2:4e:77:78:d1:5a:65:e6:46:f0:
ab:a3:0c:c3:90:72:06:a3:4b:63:14:cd:1a:24:01:08:e4:16:
42:00:64:5a:ac:f4:c2:07:52:2c:fb:8e:26:51:24:2e:52:6d:
e8:74:e5:18:5b:e7:b3:db:f2:06:6d:16:5a:20:1e:62:3b:4d:
2d:10:41:a1:b2:ec:44:ae:ae:b4:64:d3:53:02:b4:57:6a:63:
f7:a2:75:89:af:35:76:18:8b:d4:5e:33:2b:65:71:bf:86:bc:
c9:e7:6f:1a:91:0a:7d:6d:98:9a:30:62:ba:1b:90:bc:b5:28:
73:27:50:69:4f:0d:2f:72:f5:89:22:24:7b:ee:24:3a:ef:3a:
fe:82:d6:0a:8e:ed:4a:8c:d7:f7:24:52:c3:c5:ef:6d:39:b8:
1e:81:35:6d:64:f9:4d:d2:3f:94:c0:ee:ac:7a:2d:bd:da:7f:
1b:03:2a:62:88:bb:ba:6d:ec:54:31:2a:4f:d0:55:ae:9e:c8:
c2:84:f4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:12 2024 by rpki-client on console-ams.rpki-client.org