Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/ZK3zK0Igw9BmC6GroZplarx3QKo.roa
File: ZK3zK0Igw9BmC6GroZplarx3QKo.roa (raw, json)
Hash identifier: z4tsy2adtvIcocwCdFMUBXok/m/Db4AHLSpy+kmdMtQ=
Subject key identifier: 64:AD:F3:2B:42:20:C3:D0:66:0B:A1:AB:A1:9A:65:6A:BC:77:40:AA
Certificate issuer: /CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Certificate serial: 0190C640810CD12C201FAD663C1823EE7FC1
Authority key identifier: 0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/ZK3zK0Igw9BmC6GroZplarx3QKo.roa
Signing time: Thu 18 Jul 2024 14:30:34 +0000
ROA not before: Thu 18 Jul 2024 14:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29030
IP address blocks: 87.121.152.0/21 maxlen: 21
94.156.194.0/24 maxlen: 24
94.156.195.0/24 maxlen: 24
94.156.198.0/24 maxlen: 24
94.156.199.0/24 maxlen: 24
185.217.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jul 2024 17:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c6:40:81:0c:d1:2c:20:1f:ad:66:3c:18:23:ee:7f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Validity
Not Before: Jul 18 14:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64adf32b4220c3d0660ba1aba19a656abc7740aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e7:48:7e:13:83:dd:ea:7e:c2:eb:97:30:84:
53:09:d4:23:dd:ee:85:1c:d3:6f:1d:9a:91:e3:f2:
a9:cf:2c:ea:c4:ba:ef:55:a8:21:06:14:c9:02:dc:
10:fe:8a:44:7a:74:12:6d:20:6a:0f:f0:5e:af:25:
8c:85:ae:d1:91:30:93:15:90:62:c3:58:53:bf:d5:
26:51:09:5c:55:05:12:7b:a0:10:38:03:cc:25:e9:
c9:dc:16:14:7b:43:d6:39:c3:0c:31:dd:e0:43:f0:
3c:1e:77:06:e7:65:71:04:a1:1e:81:ec:11:c7:9a:
a4:c1:f6:a9:19:bd:05:f3:1c:2c:51:9b:26:f4:f4:
38:de:5c:72:82:b5:6d:ba:d1:f0:f8:d6:e1:15:86:
83:37:b9:9c:3a:54:22:d1:bc:45:38:6c:c3:5a:2b:
a9:e7:0b:db:07:62:29:df:25:e9:90:46:23:f1:13:
83:7b:c1:44:7c:f2:48:ab:f4:bd:3b:90:e9:4f:ea:
94:de:0d:7d:7b:85:74:1b:59:8c:c5:48:5b:3b:9a:
cf:80:c2:f9:d2:ab:6c:23:7d:71:29:9c:b0:51:45:
f0:e1:87:0b:2c:db:9b:c2:74:87:10:5f:5e:3b:f7:
fb:59:5e:51:7d:2c:00:f8:d1:34:84:5f:0c:2b:8b:
b0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AD:F3:2B:42:20:C3:D0:66:0B:A1:AB:A1:9A:65:6A:BC:77:40:AA
X509v3 Authority Key Identifier:
keyid:0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/ZK3zK0Igw9BmC6GroZplarx3QKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.152.0/21
94.156.194.0/23
94.156.198.0/23
185.217.38.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:2f:52:d5:34:7b:c6:86:92:18:bd:d1:47:5c:ac:db:0a:f0:
18:da:9e:48:69:49:67:86:e1:47:42:2d:01:d6:a0:a7:dd:b0:
b9:f9:2d:2b:ac:fc:ea:36:cd:06:9c:17:97:1b:9e:24:9e:f2:
fe:e8:f1:98:27:dc:f5:ef:b1:54:a5:80:cd:27:3c:51:07:53:
e7:e0:f4:53:70:c9:5c:40:0b:47:d0:b1:1a:81:56:8c:30:3b:
9a:17:17:83:98:38:80:4e:79:47:fc:a2:42:11:c8:72:5f:49:
d8:22:86:ab:38:a7:e2:d8:ae:0b:fe:fa:6c:38:db:1f:e6:ff:
f2:11:37:45:5b:a5:54:8d:db:34:1a:5f:4d:59:36:24:01:07:
0a:38:1b:08:d3:f7:75:2a:de:6b:6c:3b:db:1b:fb:68:be:45:
af:7f:08:d8:1d:92:28:b9:b5:7e:61:48:97:ef:3e:e2:e1:b6:
97:97:9e:b2:52:60:99:fa:cd:2f:01:d0:2a:cb:d5:cc:02:26:
5e:e9:0b:65:fb:d0:88:41:6a:3d:3c:74:66:16:50:f0:e5:dd:
ef:01:45:63:3e:f7:66:1b:7c:38:91:e0:bb:e2:67:c9:a8:a6:
07:6f:4f:e8:e1:84:2d:50:0a:31:1e:0f:37:01:23:0e:8b:35:
2e:ef:13:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 20:10:51 2024 by rpki-client on console-fra.rpki-client.org