Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/v_zn4_1KbJzxkgAXb28b5Y6q308.roa
File: v_zn4_1KbJzxkgAXb28b5Y6q308.roa (raw, json)
Hash identifier: IdKfvB2y1UdAW5VnVbLA8TYDHRr9AR97K2sGFBQKq+s=
Subject key identifier: BF:FC:E7:E3:FD:4A:6C:9C:F1:92:00:17:6F:6F:1B:E5:8E:AA:DF:4F
Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial: 019423D729534D7F39DF93E68E00FE228B66
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/v_zn4_1KbJzxkgAXb28b5Y6q308.roa
Signing time: Wed 01 Jan 2025 21:48:10 +0000
ROA not before: Wed 01 Jan 2025 21:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21159
IP address blocks: 80.89.236.0/23 maxlen: 23
89.105.216.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 07 Feb 2025 14:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:29:53:4d:7f:39:df:93:e6:8e:00:fe:22:8b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Validity
Not Before: Jan 1 21:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bffce7e3fd4a6c9cf19200176f6f1be58eaadf4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:be:c2:e8:98:72:45:06:17:5e:d5:8b:65:c0:
48:4a:2f:e0:ff:c2:1c:a9:46:ba:de:23:2c:be:02:
d1:0e:bc:47:62:29:3e:d1:82:8b:b5:e0:26:8c:2b:
5d:53:cb:71:f8:9d:da:28:38:24:dd:22:15:b1:2e:
98:66:b3:3d:bc:4a:0c:9b:c8:3a:86:0e:4d:b2:99:
ca:b8:ba:dc:60:fd:3d:9d:e8:c2:f3:e4:89:ac:e5:
20:ed:cc:7a:3e:54:a0:28:ad:a5:d8:40:c9:8b:6c:
c2:7c:fb:ea:21:ca:a2:c5:3a:ec:08:71:7f:b9:0b:
e4:d1:8d:a8:33:5c:69:09:0f:30:71:49:01:d7:66:
f0:40:07:6e:b2:fd:47:73:85:09:4f:9c:ac:11:07:
ca:f5:fd:90:90:d5:87:87:f5:06:f2:d7:49:7d:41:
87:ff:8a:2a:8a:aa:62:0e:34:22:c5:91:48:18:08:
df:37:b4:3e:b2:58:af:65:ee:bc:c3:22:ae:2f:0b:
56:f5:62:93:a0:0c:61:08:2e:7b:a9:6a:81:8b:79:
dc:0a:0c:94:ab:d1:85:e2:3a:76:7c:63:e4:3f:df:
4d:a6:d1:b8:bf:9f:22:40:a3:e3:2d:b5:d5:5b:a2:
58:ed:92:93:1b:a1:6d:c5:d3:05:ee:45:1a:14:3d:
96:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FC:E7:E3:FD:4A:6C:9C:F1:92:00:17:6F:6F:1B:E5:8E:AA:DF:4F
X509v3 Authority Key Identifier:
keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/v_zn4_1KbJzxkgAXb28b5Y6q308.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.236.0/23
89.105.216.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:be:80:1b:f7:5c:6a:17:c6:a3:35:26:40:63:29:fc:d1:ca:
dd:79:48:9b:32:ac:80:db:4c:5c:f6:c6:e1:0c:cc:7c:39:1c:
95:55:25:70:22:11:6e:a7:8a:a9:09:b0:85:3d:5d:50:3b:09:
13:34:de:bb:0f:ca:b1:3f:67:50:4d:d0:d1:47:36:7a:48:59:
1c:ee:89:8c:57:d4:6b:b0:ad:69:87:d0:c2:9c:4f:fe:42:80:
32:ff:6f:dc:2a:22:ea:53:8f:f9:07:b4:de:cb:0a:27:72:23:
30:ff:7a:bb:15:3f:31:1e:27:ae:f5:85:b2:ad:37:43:d8:b2:
cb:aa:70:74:86:dc:a4:29:31:34:a8:6e:fa:ea:b5:3d:ac:2a:
c8:c8:34:71:6b:df:c9:49:82:a9:29:3b:84:54:11:cf:f5:6c:
94:0e:d2:0c:22:8a:a9:83:44:74:4c:2e:0e:6c:3d:c2:9a:16:
81:04:e8:67:69:4c:20:44:66:2a:0d:d2:fd:8b:86:81:10:69:
d3:53:49:a2:0e:d2:ca:cf:8a:f3:57:72:91:7c:31:39:18:b6:
53:8d:d1:22:a4:dc:7a:69:21:95:94:12:96:6e:46:52:1b:af:
5f:04:09:ad:b4:20:39:e7:37:76:fd:32:44:79:4e:62:2e:b9:
65:17:02:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:17:32 2025 by rpki-client