Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/Z3yeka0fyGQh5z6Vio2N6QxIETc.roa
File: Z3yeka0fyGQh5z6Vio2N6QxIETc.roa (raw, json)
Hash identifier: ipUINKvNlblwFI4hQ0PTuMLexOIf8SqpmLWXO0Hq2Wo=
Subject key identifier: 67:7C:9E:91:AD:1F:C8:64:21:E7:3E:95:8A:8D:8D:E9:0C:48:11:37
Certificate issuer: /CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Certificate serial: 018CC7956EF2438CF54EDC4CDC3D1F9DAEE9
Authority key identifier: C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/Z3yeka0fyGQh5z6Vio2N6QxIETc.roa
Signing time: Tue 02 Jan 2024 00:31:48 +0000
ROA not before: Tue 02 Jan 2024 00:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197451
IP address blocks: 147.229.192.0/19 maxlen: 19
147.229.0.0/17 maxlen: 17
147.229.224.0/19 maxlen: 19
147.229.128.0/18 maxlen: 18
185.62.108.0/23 maxlen: 23
2001:67c:1220::/46 maxlen: 46
2a03:2e0::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 14:53:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:6e:f2:43:8c:f5:4e:dc:4c:dc:3d:1f:9d:ae:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Validity
Not Before: Jan 2 00:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=677c9e91ad1fc86421e73e958a8d8de90c481137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:05:41:ec:c4:f1:86:a6:96:23:de:91:ab:33:
3f:53:79:43:5f:3c:d4:b5:77:b5:57:c3:84:7d:2c:
f5:b6:e5:bf:24:36:48:16:52:e9:a4:ed:bd:4a:c2:
5d:67:0f:ec:fb:33:58:c7:dc:82:72:28:93:21:dc:
7d:ab:d2:d0:fa:87:f4:34:94:59:7e:7e:c6:63:4d:
8b:d3:5e:48:8f:0e:48:9f:88:9a:20:16:94:2d:9a:
0a:c4:9e:5f:90:e5:42:1b:55:89:a7:1e:d6:a9:46:
3e:c4:10:87:f2:98:53:66:e6:73:a9:55:de:22:4d:
55:fd:4d:70:74:12:6f:bc:e9:fd:c4:cb:f0:d9:9c:
0c:07:ff:57:8b:3a:d3:d5:17:01:10:00:17:af:a0:
4a:b1:72:74:af:63:d7:b5:9f:3f:8d:a9:4a:45:6c:
90:fb:58:bd:3a:4a:76:e8:9b:3d:4d:e9:c4:40:f8:
ff:ea:a8:63:1a:b4:79:9f:29:78:25:9e:2a:f4:e1:
12:4a:a2:ff:43:35:c1:e5:3d:47:82:4a:f4:e1:b9:
a1:84:21:87:7d:3a:96:e2:97:4b:d3:53:0a:e3:47:
50:22:f3:43:81:e1:e0:59:7d:50:b1:7c:18:18:e2:
0e:35:f9:39:5a:96:63:ce:22:65:d9:8b:c1:53:86:
8b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7C:9E:91:AD:1F:C8:64:21:E7:3E:95:8A:8D:8D:E9:0C:48:11:37
X509v3 Authority Key Identifier:
keyid:C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/Z3yeka0fyGQh5z6Vio2N6QxIETc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.229.0.0/16
185.62.108.0/23
IPv6:
2001:67c:1220::/46
2a03:2e0::/29
Signature Algorithm: sha256WithRSAEncryption
86:6e:a2:db:32:75:c5:1d:87:cd:29:b1:a6:8e:f3:a0:ed:53:
11:62:5d:66:62:54:20:64:c5:28:49:ea:97:28:bc:85:7b:8b:
e5:98:ed:14:52:1e:ab:d9:65:2c:f5:f1:b4:9f:57:2c:8a:d4:
d8:1f:ab:4e:4a:91:e9:4d:72:36:9b:14:a9:a0:53:a8:21:45:
17:7a:16:23:3a:8a:07:3a:1b:11:04:5c:19:f7:c5:41:6f:6d:
dd:1a:a9:0b:92:cd:17:bc:87:a2:98:2c:bf:6b:37:fc:50:eb:
2f:0e:75:56:39:ca:91:13:69:c9:0e:7a:81:e7:9b:68:b6:2e:
e0:7a:74:37:26:28:1a:aa:68:52:a7:34:45:79:fe:14:dc:9d:
c9:91:c2:56:8a:05:37:36:ef:ad:3e:d7:ae:cf:64:7e:a2:12:
a5:90:c5:31:08:af:7f:27:06:d7:65:ad:8a:1e:36:53:f0:07:
6f:4f:72:33:b8:92:fc:8e:99:72:1c:00:50:d1:cc:79:04:43:
e2:07:21:26:c9:9e:5b:94:bd:ce:bf:5d:65:22:b6:f6:f1:12:
e6:4b:79:c7:03:bb:a8:d2:1d:44:95:df:32:34:3a:8e:68:95:
29:a7:c0:70:94:19:21:42:7f:27:90:14:94:4b:52:36:10:cc:
39:d2:be:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 20:11:33 2024 by rpki-client on console.sobornost.net