Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/3zcAASfRb1Nyrsgz2Rt729Zfpww.roa
File: 3zcAASfRb1Nyrsgz2Rt729Zfpww.roa (raw, json)
Hash identifier: u+uiE4jsstObRpF6lb/AA664D8Kn5C8QfD4xUFbGfsA=
Subject key identifier: DF:37:00:01:27:D1:6F:53:72:AE:C8:33:D9:1B:7B:DB:D6:5F:A7:0C
Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial: 018CC94CEEFF33705E6000EAE7141278BC80
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/3zcAASfRb1Nyrsgz2Rt729Zfpww.roa
Signing time: Tue 02 Jan 2024 08:31:51 +0000
ROA not before: Tue 02 Jan 2024 08:31:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60695
IP address blocks: 185.228.108.0/22 maxlen: 22
45.88.4.0/24 maxlen: 24
155.133.33.0/24 maxlen: 24
185.225.100.0/22 maxlen: 22
155.133.60.0/23 maxlen: 23
2a06:1e00::/29 maxlen: 48
2a0d:b400::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 06 Mar 2024 08:25:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:ee:ff:33:70:5e:60:00:ea:e7:14:12:78:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Validity
Not Before: Jan 2 08:31:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df37000127d16f5372aec833d91b7bdbd65fa70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:61:e0:5d:ae:47:b6:f6:0a:99:37:30:99:f9:
db:18:91:98:74:84:ea:26:a1:51:9f:2e:f0:23:49:
52:5b:1a:7b:86:40:b2:50:af:ad:d2:0e:07:e6:5b:
ba:2a:69:72:cf:35:09:bc:e7:a1:86:cf:c4:19:60:
80:83:b4:e0:14:cd:f1:f9:d3:b4:31:81:35:49:02:
3c:ca:76:b7:49:2c:d6:f8:66:84:62:be:03:9b:c0:
88:b2:28:1e:b8:42:81:bf:e9:4b:71:8b:63:28:6b:
18:12:4e:7d:0b:ba:69:74:65:00:8c:ca:54:de:5b:
77:19:b0:94:47:8f:d5:73:1c:fe:34:12:5c:3e:9e:
33:e6:66:3d:4c:a3:d0:66:1b:00:5b:9c:f9:b6:13:
81:ef:20:01:02:73:5d:59:d2:6a:06:73:a0:d9:30:
f2:8b:32:a2:eb:f7:d4:15:e1:37:36:51:d3:a8:b5:
c5:17:3b:89:58:ea:d0:c9:fd:fa:91:e6:af:00:ba:
71:f6:0f:07:3a:6c:ac:a6:9a:23:af:d4:30:bc:38:
c4:7a:c3:ad:50:90:a7:04:e6:65:ae:a4:f2:f2:50:
01:98:34:d2:88:6b:d6:9d:da:e7:c6:78:3d:30:03:
5b:ce:94:94:d3:cb:de:17:d8:8e:ea:16:bc:02:8f:
a5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:37:00:01:27:D1:6F:53:72:AE:C8:33:D9:1B:7B:DB:D6:5F:A7:0C
X509v3 Authority Key Identifier:
keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/3zcAASfRb1Nyrsgz2Rt729Zfpww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.4.0/24
155.133.33.0/24
155.133.60.0/23
185.225.100.0/22
185.228.108.0/22
IPv6:
2a06:1e00::/29
2a0d:b400::/29
Signature Algorithm: sha256WithRSAEncryption
39:d1:7a:a2:d4:34:f7:2a:76:c3:4c:fc:5c:ef:9d:08:32:a7:
a6:56:04:54:af:ac:e3:5e:67:8c:23:e6:35:ad:46:82:91:ec:
fa:45:1c:03:3c:1e:8e:05:89:d9:fd:5a:f8:4d:bd:a6:33:b4:
e3:96:99:28:91:89:d9:cd:e0:6b:3d:66:38:a2:1f:93:36:d9:
0c:75:8a:92:af:10:5d:26:9c:ad:e4:16:a0:04:bd:7b:30:98:
0a:6f:db:35:65:90:f8:df:9a:e8:e7:08:ee:e6:d9:b5:23:d4:
2f:ba:67:f8:0a:a1:0c:b6:90:a4:80:ea:e2:86:63:36:5b:50:
f3:3b:2d:92:93:38:ae:23:60:02:d1:e4:e5:9f:80:d6:b7:56:
6f:07:a6:26:eb:fe:28:35:b7:97:00:84:b0:3e:de:93:86:e2:
a6:ff:db:98:24:b6:41:98:77:bb:d2:69:9b:35:c8:78:1b:71:
18:59:72:71:66:f7:64:f6:4e:91:f1:d4:37:05:31:f3:b1:10:
fb:0d:5a:a0:15:f3:a5:0d:38:ee:6e:4e:e4:11:b9:21:cb:f4:
30:71:f5:ba:7d:56:f4:6c:c3:ef:af:86:b4:f5:99:72:48:28:
96:2c:da:c6:c7:3f:dc:3b:08:c0:99:03:11:1a:1f:ab:d5:e6:
99:40:0a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 11:45:51 2024 by rpki-client on console-fra.rpki-client.org