Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/Zf9yniCrUg-15f4sHRfq6vraJH0.roa
File: Zf9yniCrUg-15f4sHRfq6vraJH0.roa (raw, json)
Hash identifier: +Hx0arcHjbaX6nz6n4hF5Jb1QwzE/wGwHfzzkJtqKr4=
Subject key identifier: 65:FF:72:9E:20:AB:52:0F:B5:E5:FE:2C:1D:17:EA:EA:FA:DA:24:7D
Certificate issuer: /CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Certificate serial: 018CC5DD1DA0D7AE0B1E5BF402D1AAB2AA59
Authority key identifier: F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/Zf9yniCrUg-15f4sHRfq6vraJH0.roa
Signing time: Mon 01 Jan 2024 16:30:51 +0000
ROA not before: Mon 01 Jan 2024 16:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39683
IP address blocks: 185.252.22.0/23 maxlen: 23
5.61.96.0/21 maxlen: 24
195.189.224.0/24 maxlen: 24
195.189.224.0/23 maxlen: 23
195.189.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 08:04:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:1d:a0:d7:ae:0b:1e:5b:f4:02:d1:aa:b2:aa:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Validity
Not Before: Jan 1 16:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65ff729e20ab520fb5e5fe2c1d17eaeafada247d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:68:94:97:e5:51:9e:c7:d5:34:38:45:d9:08:
9b:23:5c:43:64:4c:50:8a:51:1d:3c:f0:b2:3b:a2:
59:87:5c:f6:64:0b:68:44:ae:16:06:6c:8b:f8:25:
27:4a:52:a7:16:c6:93:8b:78:07:99:7f:c1:5b:7d:
a6:12:6d:a5:8a:d2:42:7d:a5:0c:f7:e7:67:94:ed:
7c:14:10:fd:15:7b:a3:2a:08:82:44:75:11:78:42:
36:2d:ab:a4:a4:03:20:ff:95:75:ed:6a:c3:3d:e8:
9c:12:84:ed:c5:67:61:eb:1d:c5:7c:e6:04:0a:13:
0e:8b:e0:2b:67:15:ca:77:36:05:a7:2d:94:c5:b8:
55:a3:17:b1:17:15:35:e5:17:a7:17:2d:d2:bf:13:
35:7d:8c:42:bd:53:fb:df:2d:25:99:ff:f0:6c:7e:
0c:5a:4a:43:c0:f4:ad:c8:25:ba:64:cd:06:0e:20:
87:f9:ea:08:bd:f8:a7:22:37:1c:6f:1c:ca:34:e3:
18:e7:91:69:1d:c2:42:00:72:fb:c7:c5:7c:a5:64:
fd:86:7a:a4:6a:06:63:9c:99:e6:21:c2:e3:79:57:
80:ae:88:ea:c6:5c:dc:ee:51:61:3f:05:36:8c:8c:
d2:7a:9d:0a:a5:fa:3d:da:a9:df:e4:a6:16:a9:f0:
41:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FF:72:9E:20:AB:52:0F:B5:E5:FE:2C:1D:17:EA:EA:FA:DA:24:7D
X509v3 Authority Key Identifier:
keyid:F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/Zf9yniCrUg-15f4sHRfq6vraJH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.96.0/21
185.252.22.0/23
195.189.224.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:ea:73:7d:4e:15:6e:43:09:32:e1:15:a1:df:af:46:3a:73:
b2:03:11:9c:a6:ce:4a:30:5e:65:b1:a2:b3:55:6a:1e:88:87:
f2:eb:e0:97:d7:25:08:37:03:b2:af:41:1a:7e:61:72:d0:9b:
db:19:99:16:d6:67:d5:a7:84:33:57:79:dc:20:91:d9:97:3a:
e1:b7:2b:2d:20:0b:1d:bb:da:b8:db:74:08:fa:50:8e:4f:27:
e0:1e:55:97:a5:dd:d7:c0:e6:78:35:8b:71:e0:2c:61:8c:4b:
7f:49:56:e1:02:3c:38:e6:05:32:80:1b:70:de:29:05:29:b4:
03:bc:e9:ae:8d:91:6d:46:a1:fd:d1:d7:df:65:d2:12:5b:a7:
86:17:23:46:cf:c4:27:c1:ae:02:0b:fb:5a:d1:6d:09:63:2c:
65:6b:9a:4a:3a:f4:45:04:36:15:51:cc:74:d1:68:45:b7:95:
78:f5:63:b1:76:a1:c4:49:71:11:0d:fa:7a:9e:d0:c5:a0:ba:
bb:57:b8:33:21:e3:da:ba:8e:1e:12:b2:cf:5e:97:0b:c3:9f:
af:6f:d5:d0:66:c8:92:4c:1d:f2:97:92:e7:d2:4c:31:31:33:
c2:b7:b5:e3:d8:41:17:71:c5:6e:01:1e:e5:df:9a:62:79:dc:
99:3f:46:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:25:32 2025 by rpki-client