Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/ZTPhG80zty8OEE8rhp3VmpUPxr4.roa
File: ZTPhG80zty8OEE8rhp3VmpUPxr4.roa (raw, json)
Hash identifier: x24wnxB9op4S4n0d1FuUid4Jr3xTEhmy6QlqgXAobAY=
Subject key identifier: 65:33:E1:1B:CD:33:B7:2F:0E:10:4F:2B:86:9D:D5:9A:95:0F:C6:BE
Certificate issuer: /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial: 018D41AC0FFB7D02E0B3192AE24ECFDBF8E2
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/ZTPhG80zty8OEE8rhp3VmpUPxr4.roa
Signing time: Thu 25 Jan 2024 17:30:11 +0000
ROA not before: Thu 25 Jan 2024 17:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216385
IP address blocks: 5.252.98.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 25 Mar 2024 20:34:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:41:ac:0f:fb:7d:02:e0:b3:19:2a:e2:4e:cf:db:f8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Validity
Not Before: Jan 25 17:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6533e11bcd33b72f0e104f2b869dd59a950fc6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:21:e5:06:68:2d:48:f2:24:b9:28:8b:73:2b:
c8:a3:6d:da:b9:15:62:90:81:8b:f9:78:b0:a7:b6:
1b:69:0d:11:8d:34:de:e3:42:8d:95:ec:4c:74:63:
a5:44:6f:c8:d4:ba:c6:73:cc:82:3a:f9:d0:a6:08:
14:96:0d:eb:5f:50:ad:62:59:3e:fc:ef:95:d5:bd:
34:b5:1a:b8:c9:13:c3:2f:86:7b:3f:67:81:39:be:
0a:be:3a:72:2f:e6:a9:67:1a:56:66:a1:ac:0a:00:
bf:0d:a3:ae:8f:90:79:e8:63:91:c6:2c:ea:8d:05:
4a:f0:69:b5:a2:17:1c:b0:1b:5c:65:65:e9:2c:ad:
1d:f8:2c:73:a4:3d:21:f4:50:53:32:f3:78:fa:32:
4e:b8:4d:9a:2a:30:4f:12:72:b8:97:f8:68:3e:88:
84:6c:83:75:82:73:15:bd:71:20:95:d0:a6:14:66:
dc:ac:80:7c:ba:43:27:b9:a1:28:19:34:6f:a1:0e:
79:4a:8d:b6:7b:6c:f6:b5:be:23:bb:97:58:80:55:
e3:b8:a4:4e:1a:ac:d5:34:57:e5:22:78:9c:91:7d:
6f:2a:b6:9c:f2:b5:ca:4e:fa:0e:99:c3:ab:eb:38:
66:2d:65:ce:02:58:48:74:d4:6a:6e:bb:ea:30:f7:
78:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:33:E1:1B:CD:33:B7:2F:0E:10:4F:2B:86:9D:D5:9A:95:0F:C6:BE
X509v3 Authority Key Identifier:
keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/ZTPhG80zty8OEE8rhp3VmpUPxr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.98.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ba:e5:93:61:af:44:0c:d4:61:af:d5:d6:f5:d0:1f:8f:9b:
10:04:25:71:bb:5b:47:ab:50:f5:67:87:3f:2a:bc:dc:4f:4f:
59:d0:f4:94:23:42:0c:59:bd:69:3d:a2:db:58:13:dd:72:49:
4b:fb:d0:d5:2f:4a:ce:84:de:8d:dd:2e:3b:29:cb:52:7a:ce:
1c:1e:f3:f0:23:92:48:2e:54:6f:5d:09:b3:b8:3a:a3:80:67:
18:f9:75:2a:64:1e:fe:4a:5b:64:a1:d6:f6:04:57:af:ed:83:
36:32:eb:95:ca:27:22:64:f0:a8:bd:3c:2f:1a:49:ce:c4:59:
1b:ae:59:e6:a9:04:f3:13:3a:48:0d:0a:52:da:2f:e3:03:43:
ce:79:25:cd:c6:19:8e:cd:98:bf:ad:ab:18:1c:a0:a7:a9:4a:
f8:ca:17:a6:77:84:8a:9a:12:dc:82:e6:43:d8:d9:16:d8:40:
02:de:ae:16:d2:a9:a1:1c:3b:af:37:77:d8:be:bb:40:df:3b:
82:fe:68:7a:0c:47:5b:6d:e4:7f:c7:f6:70:da:5e:c9:92:18:
9f:94:2a:46:e4:01:f4:d1:07:3b:d9:e7:ef:75:93:19:58:bd:
b0:1a:13:6a:f5:24:b5:70:1a:1d:e2:f5:e4:df:b2:db:cc:4b:
9d:c6:d3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:17 2024 by rpki-client on console-fra.rpki-client.org