Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/zIde0546gEOxcMLjE43s_7tF9u4.roa
File: zIde0546gEOxcMLjE43s_7tF9u4.roa (raw, json)
Hash identifier: /6C4E1Mb54PPq27FNktld2F64PRw60KmVMPRvdGUsn8=
Subject key identifier: CC:87:5E:D3:9E:3A:80:43:B1:70:C2:E3:13:8D:EC:FF:BB:45:F6:EE
Certificate issuer: /CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Certificate serial: 0193B67998817C424FFF772F9FBA14C70EC7
Authority key identifier: FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/zIde0546gEOxcMLjE43s_7tF9u4.roa
Signing time: Wed 11 Dec 2024 16:07:22 +0000
ROA not before: Wed 11 Dec 2024 16:07:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24582
IP address blocks: 5.61.80.0/21 maxlen: 24
80.87.160.0/20 maxlen: 24
185.32.32.0/22 maxlen: 24
195.135.178.8/30 maxlen: 30
195.135.178.240/29 maxlen: 29
212.237.160.0/21 maxlen: 24
2a00:5f40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 12 Dec 2024 08:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b6:79:98:81:7c:42:4f:ff:77:2f:9f:ba:14:c7:0e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Validity
Not Before: Dec 11 16:07:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc875ed39e3a8043b170c2e3138decffbb45f6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:a9:37:d5:09:7c:80:75:f1:66:5a:fb:4d:
69:9b:c4:0e:3a:11:40:47:81:4a:c0:68:70:db:fc:
5e:59:ac:71:d9:80:25:0e:7a:a2:46:27:3a:d6:dc:
1e:3a:4a:ec:6c:d9:ae:7b:27:9f:2d:5a:c4:2a:14:
68:8f:e2:4c:66:b4:1f:1e:8c:eb:2d:f5:35:e7:7a:
76:65:ed:81:2e:14:1d:e7:7f:83:22:ff:81:a2:f3:
ee:5c:0d:28:c3:17:e7:d8:52:13:32:69:2e:fe:70:
65:50:ca:83:da:fb:1f:6f:3d:75:74:b7:86:6d:3f:
9d:0c:02:54:5f:51:5b:ad:e9:d3:b6:13:76:0b:79:
af:e0:04:e4:fb:29:36:8c:1e:47:db:3d:6d:96:ea:
bf:00:c0:f3:3b:8d:32:99:bc:b2:c7:42:46:49:a7:
c8:19:9e:9f:75:d7:b0:ac:9c:ad:62:43:e0:c9:38:
c2:58:a9:be:72:a6:cf:84:e0:aa:ea:f1:99:37:f9:
3c:20:94:5a:49:5a:9e:3d:c8:2c:e8:c6:0b:7b:0f:
1b:9e:ac:3f:4b:4a:82:5e:d5:47:d2:8a:42:62:ae:
56:5e:19:d9:52:ba:ac:d2:12:92:3b:82:fe:5b:8d:
9d:dd:6e:89:69:cc:1f:42:15:1c:ef:57:da:ce:09:
16:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:87:5E:D3:9E:3A:80:43:B1:70:C2:E3:13:8D:EC:FF:BB:45:F6:EE
X509v3 Authority Key Identifier:
keyid:FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/zIde0546gEOxcMLjE43s_7tF9u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.80.0/21
80.87.160.0/20
185.32.32.0/22
195.135.178.8/30
195.135.178.240/29
212.237.160.0/21
IPv6:
2a00:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
00:f6:11:93:94:a6:cb:f5:c0:15:c2:02:a8:e3:53:0f:6d:df:
3b:4f:69:be:80:8e:68:0f:e9:8e:d8:eb:6b:45:f5:90:8b:1d:
07:91:6e:74:38:db:5a:06:d5:d5:cf:97:a1:39:b6:f7:4a:4a:
5e:56:d7:67:df:1e:44:13:22:75:a0:c4:42:e3:b7:34:23:7f:
e5:dd:f3:eb:10:4d:96:a6:d0:c3:e4:70:af:7c:67:4e:80:cc:
03:a1:d3:a6:c3:b3:23:57:5a:59:90:2b:6a:6e:7a:48:a0:69:
40:25:03:0b:f6:a1:d5:fb:15:4d:81:11:e8:43:96:fd:c9:8e:
9c:9e:c6:fc:8c:e3:25:e3:e7:12:d6:63:f1:86:01:98:08:25:
cb:ef:48:12:a2:66:33:a9:50:03:53:5b:65:e5:56:c3:54:36:
95:b2:0e:74:11:da:21:e0:9e:54:62:95:65:4c:b9:8f:5b:49:
40:6b:0a:3c:b0:13:33:c8:e7:9a:b9:b3:4e:62:a7:fa:5b:94:
3e:4e:0c:9d:b4:d4:ca:9a:50:25:40:16:51:01:d2:a8:fa:26:
fd:6a:69:67:61:ec:b8:9e:57:1e:9f:df:df:53:2b:32:39:df:
58:ad:46:c9:a5:25:2c:6b:09:77:c8:67:3b:cb:5b:43:bf:1e:
a4:a1:eb:c0
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAZO2eZiBfEJP/3cvn7oUxw7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTNmN2ZhMjM3Zjg5ZDAxMTIzM2JhYzczMjhjMjIxOWJh
N2Q2MmMwHhcNMjQxMjExMTYwNzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzg3NWVkMzllM2E4MDQzYjE3MGMyZTMxMzhkZWNmZmJiNDVmNmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAipN9UJfIB18WZa+01pm8QOOhFA
R4FKwGhw2/xeWaxx2YAlDnqiRic61tweOkrsbNmueyefLVrEKhRoj+JMZrQfHozr
LfU153p2Ze2BLhQd53+DIv+BovPuXA0owxfn2FITMmku/nBlUMqD2vsfbz11dLeG
bT+dDAJUX1FbrenTthN2C3mv4ATk+yk2jB5H2z1tluq/AMDzO40ymbyyx0JGSafI
GZ6fddewrJytYkPgyTjCWKm+cqbPhOCq6vGZN/k8IJRaSVqePcgs6MYLew8bnqw/
S0qCXtVH0opCYq5WXhnZUrqs0hKSO4L+W42d3W6JacwfQhUc71fazgkWVwIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFMyHXtOeOoBDsXDC4xON7P+7RfbuMB8GA1UdIwQY
MBaAFPwT9/ojf4nQESM7rHMowiGbp9YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JQMy1pTl9pZEFSSXp1c2N5akNJWnVuMWl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wOWFmMmItNjRmNy00YzFkLWFiZDQt
ZDA3NDY0YjliMzc4LzEveklkZTA1NDZnRU94Y01MakU0M3NfN3RGOXU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wOWFmMmItNjRmNy00YzFkLWFiZDQtZDA3NDY0YjliMzc4
LzEvX0JQMy1pTl9pZEFSSXp1c2N5akNJWnVuMWl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQDBT1QAwQE
UFegAwQCuSAgAwUCw4eyCAMFA8OHsvADBAPU7aAwDQQCAAIwBwMFAyoAX0AwDQYJ
KoZIhvcNAQELBQADggEBAAD2EZOUpsv1wBXCAqjjUw9t3ztPab6AjmgP6Y7Y62tF
9ZCLHQeRbnQ421oG1dXPl6E5tvdKSl5W12ffHkQTInWgxELjtzQjf+Xd8+sQTZam
0MPkcK98Z06AzAOh06bDsyNXWlmQK2puekigaUAlAwv2odX7FU2BEehDlv3Jjpye
xvyM4yXj5xLWY/GGAZgIJcvvSBKiZjOpUANTW2XlVsNUNpWyDnQR2iHgnlRilWVM
uY9bSUBrCjywEzPI55q5s05ip/pblD5ODJ201MqaUCVAFlEB0qj6Jv1qaWdh7Lie
Vx6f399TKzI531itRsmlJSxrCXfIZzvLW0O/HqSh68A=
-----END CERTIFICATE-----
Generated at Sun Apr 20 19:21:00 2025 by rpki-client