Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/ZSnp8H-aXwQr-BeadH1v1PqWSEY.roa
File: ZSnp8H-aXwQr-BeadH1v1PqWSEY.roa (raw, json)
Hash identifier: B0sRf58vv0c815MWNYHoFNoSh6a5Vt+ro9LHMPcVN5U=
Subject key identifier: 65:29:E9:F0:7F:9A:5F:04:2B:F8:17:9A:74:7D:6F:D4:FA:96:48:46
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 01915B750A6969C34A6D399CCDD690B1F026
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/ZSnp8H-aXwQr-BeadH1v1PqWSEY.roa
Signing time: Fri 16 Aug 2024 13:51:22 +0000
ROA not before: Fri 16 Aug 2024 13:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56971
IP address blocks: 45.156.22.0/24 maxlen: 32
45.156.23.0/24 maxlen: 32
45.156.24.0/24 maxlen: 32
45.156.25.0/24 maxlen: 32
45.156.27.0/24 maxlen: 32
178.255.222.0/24 maxlen: 32
185.159.128.0/24 maxlen: 32
185.159.131.0/24 maxlen: 32
185.228.235.0/24 maxlen: 32
193.176.153.0/24 maxlen: 32
193.176.158.0/24 maxlen: 32
193.176.179.0/24 maxlen: 32
193.176.190.0/24 maxlen: 32
194.36.170.0/24 maxlen: 32
194.36.171.0/24 maxlen: 32
194.36.209.0/24 maxlen: 32
194.116.214.0/24 maxlen: 32
194.116.215.0/24 maxlen: 32
194.116.216.0/23 maxlen: 23
194.116.216.0/24 maxlen: 32
194.116.217.0/24 maxlen: 32
194.120.24.0/24 maxlen: 32
194.120.116.0/24 maxlen: 32
2a13:7c00::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 31 Oct 2024 14:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5b:75:0a:69:69:c3:4a:6d:39:9c:cd:d6:90:b1:f0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Aug 16 13:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6529e9f07f9a5f042bf8179a747d6fd4fa964846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:a9:0a:ce:77:70:d8:44:c3:2d:0f:4b:20:
9b:b4:90:38:fd:4d:c8:22:75:d1:ea:09:09:84:05:
bd:92:b7:ae:5c:5f:88:61:33:9b:a9:c5:f0:e0:47:
f7:bc:67:c2:95:62:15:91:58:7a:72:7d:ac:26:bc:
43:00:09:c0:c7:16:0b:a7:d5:24:97:58:83:4b:32:
6b:ba:23:3c:3d:b1:65:55:85:99:7c:6e:62:27:00:
7d:bf:62:d5:51:68:88:cd:ff:5b:0d:7a:f6:eb:23:
9b:f6:eb:01:aa:73:c0:9d:90:3c:bd:a3:bc:90:54:
78:78:6d:d6:ae:48:01:2b:d2:42:94:ab:76:09:e8:
78:b3:70:20:0c:a5:09:04:0a:fc:ab:a7:af:e1:9c:
6c:5b:a0:99:01:c9:a2:ef:f8:92:5b:1c:49:45:4d:
2c:3c:d7:b9:fd:ea:9e:fe:12:dd:67:c8:01:5a:84:
cc:6e:35:a7:e3:ec:61:9a:29:b0:cf:fb:2f:9f:e3:
c7:4e:6b:4f:71:b0:4f:c8:a0:3e:54:fb:29:92:d3:
4c:e8:f2:af:ff:ab:33:e8:7e:b0:c0:13:44:ec:17:
61:20:bf:93:95:fb:19:f0:60:bc:43:ca:a9:35:0c:
98:63:84:8d:2e:92:80:c0:b4:7a:72:ef:25:b7:f4:
d6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:29:E9:F0:7F:9A:5F:04:2B:F8:17:9A:74:7D:6F:D4:FA:96:48:46
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/ZSnp8H-aXwQr-BeadH1v1PqWSEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.22.0-45.156.25.255
45.156.27.0/24
178.255.222.0/24
185.159.128.0/24
185.159.131.0/24
185.228.235.0/24
193.176.153.0/24
193.176.158.0/24
193.176.179.0/24
193.176.190.0/24
194.36.170.0/23
194.36.209.0/24
194.116.214.0-194.116.217.255
194.120.24.0/24
194.120.116.0/24
IPv6:
2a13:7c00::/32
Signature Algorithm: sha256WithRSAEncryption
13:b9:cf:b3:18:fd:b7:86:5e:77:df:37:e7:da:25:0a:3b:2d:
eb:e9:94:8b:8f:80:81:de:09:27:91:aa:cd:22:02:4e:21:09:
90:20:2a:f1:63:11:8f:9d:d5:13:3a:8c:8c:da:89:29:14:f4:
a1:3a:6c:53:73:cf:43:65:00:f3:ff:eb:02:aa:56:eb:cd:d9:
dd:c9:22:c8:73:3a:8d:ea:7e:e8:d8:ab:fc:35:4d:fe:17:37:
04:5c:29:6b:ca:37:c9:81:d2:f5:c5:12:78:d3:f3:4b:4d:94:
04:b2:9a:b9:84:d6:79:3a:00:2c:0a:5c:4d:ee:b5:5f:90:2e:
c6:0c:08:87:d4:6b:01:6b:ed:c6:19:05:e0:b0:42:6f:3d:0c:
ad:ad:61:c8:91:6d:32:f6:74:cc:0e:ac:7b:4e:29:87:e0:0e:
68:6f:ad:ea:8e:2e:6c:2b:c8:04:91:1d:53:dd:e9:57:8e:ae:
c0:4c:0c:b7:1c:e9:10:d1:4d:1f:dd:a3:12:8e:9d:49:97:28:
64:30:a8:f4:63:3d:22:e2:71:dd:c5:fb:95:cb:cb:86:b0:db:
90:03:6c:8f:13:e0:72:53:38:00:1c:d6:59:5b:a6:f9:15:ac:
a0:2c:e9:6a:e1:d1:53:13:e1:f6:1b:48:9a:e7:36:ed:60:68:
13:54:b4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:37:35 2025 by rpki-client