Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/zocwuRt-agkNHE_X7cxGoTBO8G8.roa
File: zocwuRt-agkNHE_X7cxGoTBO8G8.roa (raw, json)
Hash identifier: IkKiclCf71/e4guIzOlBYpp7QBbJbxtOTK91yY9sTBo=
Subject key identifier: CE:87:30:B9:1B:7E:6A:09:0D:1C:4F:D7:ED:CC:46:A1:30:4E:F0:6F
Certificate issuer: /CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Certificate serial: 01936385BF68FA9BED52DB9A6CA7C0CF66A8
Authority key identifier: 0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/zocwuRt-agkNHE_X7cxGoTBO8G8.roa
Signing time: Mon 25 Nov 2024 13:32:09 +0000
ROA not before: Mon 25 Nov 2024 13:32:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 109.245.96.0/24 maxlen: 24
109.245.97.0/24 maxlen: 24
109.245.98.0/24 maxlen: 24
109.245.99.0/24 maxlen: 24
109.245.100.0/24 maxlen: 24
109.245.101.0/24 maxlen: 24
109.245.102.0/24 maxlen: 24
109.245.103.0/24 maxlen: 24
109.245.112.0/24 maxlen: 24
109.245.113.0/24 maxlen: 24
109.245.114.0/24 maxlen: 24
109.245.115.0/24 maxlen: 24
109.245.116.0/24 maxlen: 24
109.245.117.0/24 maxlen: 24
109.245.118.0/24 maxlen: 24
109.245.119.0/24 maxlen: 24
109.245.192.0/24 maxlen: 24
109.245.193.0/24 maxlen: 24
109.245.194.0/24 maxlen: 24
109.245.195.0/24 maxlen: 24
109.245.196.0/24 maxlen: 24
109.245.197.0/24 maxlen: 24
109.245.198.0/24 maxlen: 24
109.245.199.0/24 maxlen: 24
109.245.200.0/24 maxlen: 24
109.245.201.0/24 maxlen: 24
109.245.202.0/24 maxlen: 24
109.245.203.0/24 maxlen: 24
109.245.204.0/24 maxlen: 24
109.245.205.0/24 maxlen: 24
109.245.206.0/24 maxlen: 24
109.245.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Dec 2024 14:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:63:85:bf:68:fa:9b:ed:52:db:9a:6c:a7:c0:cf:66:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Validity
Not Before: Nov 25 13:32:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce8730b91b7e6a090d1c4fd7edcc46a1304ef06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:99:8f:e0:dc:22:b0:37:35:c0:52:3b:c3:
9e:42:3b:d6:d4:49:12:76:8a:53:35:4c:9a:c6:8b:
4e:1f:c2:78:6c:01:0a:3c:70:a9:6d:6a:dd:79:8c:
ae:25:87:5e:84:16:36:a1:dd:71:5a:4f:f5:b2:75:
c5:59:9c:a8:b4:ba:03:d6:37:14:24:75:ab:69:04:
8a:19:c0:fe:5f:22:12:71:ce:ad:38:68:1a:fd:7c:
cc:e5:df:26:7f:dc:0e:f1:07:76:84:d8:6e:d3:3d:
1a:bd:79:e3:d5:d6:f4:4e:98:92:0c:3c:6a:15:de:
dc:8e:0c:f7:c7:61:46:61:88:20:78:66:07:4b:77:
ac:8b:9f:16:c8:a9:89:bb:1a:2c:15:24:35:d3:ea:
79:79:fa:e0:fe:0e:09:bc:71:26:73:0d:f5:b7:71:
97:fe:79:1a:31:24:6a:3b:42:01:b9:9c:e7:8d:23:
7f:45:65:35:9a:63:04:25:ce:88:da:89:8b:dc:d8:
8e:b6:1d:1a:7e:73:c0:1c:37:5d:e3:06:8a:03:8b:
cb:f5:27:37:a6:da:d8:77:e1:75:19:6f:2c:a2:ef:
e3:52:4a:ee:ef:c4:c7:37:b4:a8:01:d3:63:6c:08:
7a:db:c7:00:2d:c9:17:9f:b0:91:d6:d9:90:3a:e3:
4a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:87:30:B9:1B:7E:6A:09:0D:1C:4F:D7:ED:CC:46:A1:30:4E:F0:6F
X509v3 Authority Key Identifier:
keyid:0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/zocwuRt-agkNHE_X7cxGoTBO8G8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.245.96.0/21
109.245.112.0/21
109.245.192.0/20
Signature Algorithm: sha256WithRSAEncryption
14:3b:4d:fa:ce:0c:10:b3:38:07:51:b0:55:45:ec:61:a9:df:
c1:5c:df:14:aa:06:2e:c9:bd:84:17:94:46:55:6d:f1:be:93:
34:c0:5e:35:9a:0a:6c:6d:ef:bb:c6:50:6e:87:a6:ed:ce:2d:
a9:0e:fd:45:93:91:4a:ff:cd:50:6f:bb:e2:6f:75:83:2b:48:
f6:de:80:db:93:e7:aa:43:7b:d1:2d:b5:85:0c:c3:0d:cc:bb:
00:42:58:e8:b0:94:a2:1c:57:ee:d3:46:64:80:96:a0:e2:ee:
bf:f4:95:46:61:87:8a:86:74:89:8d:ff:3f:0f:84:56:6e:9d:
22:cc:a9:1b:1e:fe:db:6d:94:54:1f:dc:0b:f7:e9:33:de:3c:
a7:bf:fb:29:75:f2:90:d1:ae:88:17:48:a3:99:75:18:cd:99:
34:1a:2d:73:af:8b:e0:e3:fd:be:5d:a9:15:41:b5:ab:c8:7b:
0a:6f:05:11:e2:b5:f7:4a:bd:3a:88:ed:6d:b7:4f:fe:6f:45:
a9:b2:82:dc:33:77:dd:44:08:6e:d7:2a:aa:62:76:54:68:01:
d1:93:c9:34:15:f9:65:a5:c5:7f:90:13:94:79:23:90:b0:1d:
ae:1c:c5:e4:a9:f0:47:27:da:b7:da:6d:83:6e:d1:88:80:00:
fd:69:8f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 12 20:33:18 2024 by rpki-client on console-fra.rpki-client.org