Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/zZFAiAIoop0BhKszzuyxTR91NhY.roa
File: zZFAiAIoop0BhKszzuyxTR91NhY.roa (raw, json)
Hash identifier: MOueV8OoWFdHKDyJgbpfKcXYMmQ9KDkrD6kdNBbTVuI=
Subject key identifier: CD:91:40:88:02:28:A2:9D:01:84:AB:33:CE:EC:B1:4D:1F:75:36:16
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019035F6A336AFA02F4B1FD82BE687E237EC
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/zZFAiAIoop0BhKszzuyxTR91NhY.roa
Signing time: Thu 20 Jun 2024 14:04:34 +0000
ROA not before: Thu 20 Jun 2024 14:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58030
IP address blocks: 185.243.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:35:f6:a3:36:af:a0:2f:4b:1f:d8:2b:e6:87:e2:37:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jun 20 14:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd9140880228a29d0184ab33ceecb14d1f753616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:7d:69:84:a2:b8:60:d1:ee:43:9a:2c:38:
62:bb:63:10:c0:5f:f2:cb:ce:9b:57:02:0d:bd:58:
0a:f4:50:7b:c2:93:56:40:ac:07:f4:4e:12:94:cf:
73:a9:f0:de:fe:b5:c9:23:91:fb:b1:6e:cb:17:59:
51:ab:2a:d4:df:69:32:a1:23:67:8e:c8:e7:1b:1f:
22:cb:b9:14:eb:97:c9:b0:ce:5d:e2:31:0e:cb:57:
15:94:a8:5d:f2:5d:77:8b:31:34:b3:e2:a2:68:fb:
45:4e:4e:27:62:3a:ea:c1:77:10:af:08:19:e7:c7:
c2:3c:57:4c:2f:d1:bd:d2:58:74:ba:e9:75:4d:f0:
ec:cf:3b:d5:2b:cf:40:af:e5:f6:c3:c9:7b:8a:48:
cf:c0:f8:7b:23:dd:4c:ac:1e:b4:de:f3:c3:51:60:
7c:c9:d7:2e:83:ce:48:56:f9:60:5e:30:1a:a6:59:
94:6f:af:a5:1d:b5:9b:5e:6b:d3:97:05:67:55:02:
1d:91:d1:3c:5f:29:be:d3:6a:f6:7f:a9:df:ef:af:
c6:dc:8a:b8:3a:1f:43:12:0e:42:e5:e3:5c:f2:9b:
a9:9a:55:67:9f:3f:99:ac:b0:e4:8c:01:a1:68:11:
d0:4c:d3:3b:c8:f1:59:4c:5a:a8:e4:b1:97:dc:08:
de:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:91:40:88:02:28:A2:9D:01:84:AB:33:CE:EC:B1:4D:1F:75:36:16
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/zZFAiAIoop0BhKszzuyxTR91NhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.50.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:d7:96:98:83:fe:e1:36:3a:2a:ac:40:b6:70:6e:77:81:82:
b6:f0:95:74:21:45:ad:0c:ac:d3:95:aa:fb:df:47:82:e1:05:
bd:64:f5:5d:62:30:fe:43:88:b8:b3:77:60:67:93:da:26:ad:
9a:8d:67:4a:76:b7:1c:ab:f3:8a:cd:8e:05:90:44:d3:b5:c2:
a6:e3:bd:7a:85:24:eb:3f:8b:8b:c4:41:33:9d:cd:75:d0:eb:
f0:92:d4:2d:fb:85:1d:31:3d:81:94:9a:29:5b:51:c6:cc:c4:
ac:f8:cf:39:fc:aa:48:05:7f:95:52:01:3c:f0:f8:9b:d8:b4:
04:8e:20:53:8e:8f:44:8c:68:c1:b0:62:1f:0e:05:3d:f3:30:
ca:37:c4:21:0c:d5:22:83:61:f0:b7:e0:16:59:d0:5b:ce:19:
05:33:7b:f9:6e:5f:1b:6d:7a:b5:51:7b:7f:f9:8f:ea:28:7b:
9e:e4:42:70:21:7e:80:39:d1:41:7a:65:7a:95:c8:d0:1c:1d:
52:ca:c3:d1:7d:cd:10:4a:ea:53:75:d3:1e:0f:62:5a:12:6c:
1b:0c:71:a8:d9:06:fb:a4:37:dd:c9:f2:34:0e:9f:38:78:f9:
ab:12:13:97:39:00:62:f6:34:87:89:31:25:68:27:d9:eb:d9:
c0:cb:90:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:07:58 2025 by rpki-client