Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/ZU0ytjnnZ5j-9wiol8H1YwPiQy0.roa
File: ZU0ytjnnZ5j-9wiol8H1YwPiQy0.roa (raw, json)
Hash identifier: Kj3LHR7kCDYI2/D9AtdhjBry2T6GwR12M+e+IIj7tDo=
Subject key identifier: 65:4D:32:B6:39:E7:67:98:FE:F7:08:A8:97:C1:F5:63:03:E2:43:2D
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 0190138275BE0A6DB7BB32E661D48392B406
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/ZU0ytjnnZ5j-9wiol8H1YwPiQy0.roa
Signing time: Thu 13 Jun 2024 21:30:34 +0000
ROA not before: Thu 13 Jun 2024 21:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209464
IP address blocks: 212.138.180.0/24 maxlen: 26
Validation: Failed, certificate revoked on Mon 24 Jun 2024 07:38:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:13:82:75:be:0a:6d:b7:bb:32:e6:61:d4:83:92:b4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Jun 13 21:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=654d32b639e76798fef708a897c1f56303e2432d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:72:31:81:f3:66:d6:9d:44:04:fa:f4:2c:
1f:3b:0b:dd:bb:c0:86:76:af:a7:52:0e:62:8d:4c:
12:52:53:41:ec:be:c4:b8:29:b4:21:cf:33:da:fd:
a1:8c:3c:0a:64:62:13:c9:06:fd:7c:1c:67:18:58:
d4:f4:50:91:b4:23:ec:9b:c5:7e:57:4d:c5:f4:3d:
cb:4d:ca:ad:af:32:2a:18:10:61:36:60:16:81:a4:
5e:3d:13:f4:b5:4b:22:27:2f:15:59:3e:be:4f:db:
f4:52:06:fc:3c:9f:79:ee:94:6d:d8:f4:d8:01:e0:
15:a9:e6:56:c9:3f:eb:a2:df:98:f0:44:12:cc:83:
71:a4:88:1d:cf:c6:ed:e7:0e:1a:e3:b7:8c:5f:4b:
40:21:b5:3f:f4:76:95:45:a4:11:2a:b8:44:1c:15:
38:0c:89:63:62:ff:26:db:f6:ea:b8:1c:9b:fd:24:
17:4d:28:d3:c4:9b:85:76:82:8a:14:70:42:e2:b0:
b1:aa:ce:bc:bc:03:ab:e4:0d:30:30:10:85:f6:97:
48:89:6d:94:4a:12:1c:09:f4:11:dc:d8:8d:c0:39:
90:30:76:d1:8d:d5:e4:c0:61:58:9b:9b:56:76:e7:
9a:e0:44:00:e4:ce:f8:84:4a:26:f8:8b:cb:69:d6:
65:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4D:32:B6:39:E7:67:98:FE:F7:08:A8:97:C1:F5:63:03:E2:43:2D
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/ZU0ytjnnZ5j-9wiol8H1YwPiQy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.138.180.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:63:59:1c:e3:6f:61:69:38:92:10:4a:ed:73:37:53:64:4a:
b8:7c:3a:0d:5c:e6:3a:d0:90:38:99:bb:32:25:c2:5a:a1:7d:
71:9d:95:8d:9b:ef:df:26:da:42:45:9f:3e:46:27:66:c2:48:
b0:c3:66:57:0c:b1:c2:3f:97:4c:2c:4d:27:43:1c:44:dd:fa:
a2:85:7f:e8:09:43:8c:b0:d5:6c:75:70:c9:bb:7a:2f:9c:26:
8f:a5:fa:e8:b1:c1:73:f3:30:03:c2:27:01:5c:64:cb:9b:e9:
44:71:0e:b9:1e:3a:0e:15:c3:d4:2d:ba:f2:6a:70:8b:b7:5e:
32:99:33:53:5b:eb:83:07:03:b3:d4:99:81:d6:4e:0b:27:c4:
97:ea:26:30:31:ce:51:d0:0d:9d:f5:b5:c2:70:73:be:6e:77:
28:98:6e:a6:d9:2e:9b:b1:ca:45:0f:4f:af:79:9e:a1:24:f6:
70:06:10:24:c9:b0:81:10:70:d3:b1:82:54:a4:9b:59:ee:5f:
f5:05:7c:75:b5:fe:30:58:38:a6:90:9d:ea:04:44:4c:49:ed:
e2:b4:2c:6e:1c:8e:e5:83:91:f0:94:8a:a8:75:fa:07:29:e7:
7b:2c:d2:1c:c9:6c:24:88:19:87:b4:af:94:15:8b:63:0a:c1:
65:19:5d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:44:45 2024 by rpki-client on console-fra.rpki-client.org