Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/ZJTM38hK6AAdSMqUrm4WoQdpkAg.roa
File: ZJTM38hK6AAdSMqUrm4WoQdpkAg.roa (raw, json)
Hash identifier: grXOWnIqKyDavCQ6w4EUwv3GFo29m/zu+xB9BK7gn9E=
Subject key identifier: 64:94:CC:DF:C8:4A:E8:00:1D:48:CA:94:AE:6E:16:A1:07:69:90:08
Certificate issuer: /CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee
Certificate serial: 01856DCADB410605068EF53340F2B5BC81CF
Authority key identifier: C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/ZJTM38hK6AAdSMqUrm4WoQdpkAg.roa
Signing time: Sun 01 Jan 2023 14:44:48 +0000
ROA not before: Sun 01 Jan 2023 14:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48685
IP address blocks: 185.119.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:db:41:06:05:06:8e:f5:33:40:f2:b5:bc:81:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee
Validity
Not Before: Jan 1 14:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6494ccdfc84ae8001d48ca94ae6e16a107699008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e1:3c:7f:af:9c:db:2b:01:18:b0:d4:a4:58:
47:e6:5c:b3:c9:2b:8c:81:17:2c:e4:b9:a1:f0:50:
6e:0a:53:e3:15:66:0e:6d:dd:0a:2a:bc:17:17:84:
e2:63:b7:db:4f:5f:d1:48:43:2a:e9:ea:21:55:0d:
a9:51:d4:76:8f:fc:13:0e:b3:41:b7:a0:9b:d3:d9:
59:85:36:41:79:19:fa:43:76:65:dc:76:ea:2e:b9:
45:03:24:c9:91:c0:3c:74:92:c1:ef:de:62:e3:0f:
13:58:79:f3:b5:b3:01:45:e8:fe:00:06:b2:b2:7a:
59:68:94:b7:85:62:60:59:9d:99:da:88:3f:c5:e7:
9a:37:78:ee:cd:56:8a:f6:58:a2:be:37:fe:e6:c0:
0a:bb:71:cf:13:8d:8d:63:bb:ee:e6:0e:12:d6:70:
5e:35:63:a2:2b:65:b1:11:f8:3a:6b:ce:ff:92:74:
47:79:7d:ce:af:78:a7:7a:31:91:ae:3f:28:c0:f2:
54:e5:0c:90:3b:aa:7a:a3:54:40:4f:c3:0f:22:32:
3e:e1:ec:1b:fc:d8:60:fc:7b:71:28:95:ce:f0:6e:
3c:71:78:65:f7:17:2c:8d:80:a2:9c:a6:9a:46:22:
6b:68:29:5d:97:93:59:0b:d7:4d:17:90:ef:78:a2:
bc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:94:CC:DF:C8:4A:E8:00:1D:48:CA:94:AE:6E:16:A1:07:69:90:08
X509v3 Authority Key Identifier:
keyid:C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/ZJTM38hK6AAdSMqUrm4WoQdpkAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.124.0/22
Signature Algorithm: sha256WithRSAEncryption
02:68:48:88:b2:1a:33:80:dd:06:44:40:e3:9d:b3:c1:3c:7a:
f7:27:39:b3:64:9b:ae:e8:7c:62:b0:2a:19:d4:66:0a:72:e4:
5f:44:8d:54:99:ef:0c:b2:f0:cc:79:bf:6e:33:ad:db:60:ba:
be:a9:1f:b4:47:d9:5a:31:dc:2d:42:1a:f8:6a:fe:5f:62:04:
21:c6:9b:5e:7a:1e:be:bc:63:64:56:ac:f5:42:21:e7:2f:46:
a7:3f:9e:ba:a6:8f:11:ff:97:41:64:d0:a3:c5:81:38:e1:30:
f4:61:5e:67:39:03:d8:2d:a6:ce:a1:ff:d7:9d:59:18:c6:2e:
5f:73:00:16:33:b0:66:e9:e0:af:99:4a:c7:15:1f:9a:43:12:
04:17:ff:42:c7:42:a1:00:57:72:b0:8b:e2:fc:8c:ac:92:f7:
97:84:8d:80:de:1b:b9:56:49:d7:5d:54:3f:85:61:e9:80:9a:
ec:7d:7f:86:60:1e:d4:4a:1a:ce:b3:d9:2c:79:c5:58:5d:36:
64:5e:50:dd:d8:cc:89:6d:d0:09:bf:79:87:d4:d3:25:5a:7e:
fa:dd:6c:b5:59:07:66:75:71:bb:4b:b1:b9:ce:70:b7:bb:85:
fc:2d:22:a3:82:ef:dc:1a:cb:b5:4a:2f:f6:0c:a0:4f:a4:16:
ea:d8:d7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:15 2024 by rpki-client on console-ams.rpki-client.org