Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/1ZssSNiBWrK1n7Oax4-OFRwPP-k.roa
File: 1ZssSNiBWrK1n7Oax4-OFRwPP-k.roa (raw, json)
Hash identifier: PQl0HOUgfpcc433ShGl4KyOwNmb+LNeOb0lgeEicT+Y=
Subject key identifier: D5:9B:2C:48:D8:81:5A:B2:B5:9F:B3:9A:C7:8F:8E:15:1C:0F:3F:E9
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018CC94DAADD71843683C1E1018E2129DD97
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/1ZssSNiBWrK1n7Oax4-OFRwPP-k.roa
Signing time: Tue 02 Jan 2024 08:32:39 +0000
ROA not before: Tue 02 Jan 2024 08:32:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31577
IP address blocks: 83.136.184.0/21 maxlen: 21
83.136.191.0/24 maxlen: 24
83.136.189.0/24 maxlen: 24
83.136.190.0/24 maxlen: 24
31.3.120.0/21 maxlen: 21
31.3.124.0/24 maxlen: 24
31.3.120.0/24 maxlen: 24
31.3.125.0/24 maxlen: 24
31.3.126.0/24 maxlen: 24
31.3.127.0/24 maxlen: 24
185.23.120.0/22 maxlen: 22
5.35.203.0/24 maxlen: 24
5.35.201.0/24 maxlen: 24
5.35.202.0/24 maxlen: 24
5.35.206.0/24 maxlen: 24
5.35.204.0/24 maxlen: 24
5.35.200.0/21 maxlen: 21
95.129.112.0/21 maxlen: 21
95.129.114.0/24 maxlen: 24
95.129.118.0/24 maxlen: 24
95.129.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:aa:dd:71:84:36:83:c1:e1:01:8e:21:29:dd:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 08:32:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d59b2c48d8815ab2b59fb39ac78f8e151c0f3fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:fd:39:8f:f8:4f:13:36:2f:2f:dd:41:80:
e6:f4:5c:7f:12:12:98:47:e9:ba:b5:76:a1:85:56:
a9:f5:c9:8d:b7:a8:8f:27:f4:33:16:01:c2:39:b5:
8d:ae:1e:bb:b4:46:58:7c:bf:65:9c:62:14:ca:e9:
f3:b4:25:53:91:7e:3c:9d:e4:d0:6b:5e:2c:c5:c6:
e0:f9:37:f4:7c:9e:e1:a8:07:b4:44:85:c5:c3:87:
17:b2:11:fc:82:e1:95:9c:38:62:66:e5:7e:3c:ba:
e3:64:cf:5d:98:8f:23:6e:bf:aa:cd:9d:81:49:55:
a6:0f:d4:dc:27:b7:c4:18:dc:51:36:69:55:22:f4:
10:c8:bf:ba:6e:c1:c5:79:78:9b:b8:a2:a8:4a:b0:
08:ea:3f:8a:a0:af:93:28:92:8e:0c:f1:a1:c6:bf:
0e:69:b1:c3:00:ea:34:2b:c5:e4:8a:ee:76:12:fe:
56:9d:d6:66:bc:5c:42:56:35:23:a3:82:f7:98:cb:
72:ec:28:c4:d5:c1:97:8d:92:d4:d3:3a:05:42:0f:
86:e9:eb:72:65:a9:39:0f:12:00:85:d6:2e:7e:30:
db:e6:17:0b:f0:92:33:e6:a2:bc:b5:3a:e1:aa:4e:
76:51:50:8a:03:22:05:c1:5e:d7:bc:1e:ba:ae:72:
ab:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9B:2C:48:D8:81:5A:B2:B5:9F:B3:9A:C7:8F:8E:15:1C:0F:3F:E9
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/1ZssSNiBWrK1n7Oax4-OFRwPP-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.200.0/21
31.3.120.0/21
83.136.184.0/21
95.129.112.0/21
185.23.120.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:92:71:cc:aa:4a:0d:81:b0:3d:59:9d:2b:c2:89:8f:6f:0c:
87:d9:a4:38:fa:71:a8:3a:a2:fb:6d:36:96:5f:60:93:4c:de:
23:b9:32:3c:bc:35:cc:b2:d1:6a:c2:07:4e:53:32:a1:4b:24:
8e:0a:ff:59:6d:11:f7:1b:fd:55:78:c1:37:e1:50:6d:e0:c9:
5a:39:69:4d:9e:87:1b:f9:ff:b2:02:1b:7b:a4:9f:2b:a0:78:
33:bb:88:a7:09:65:0a:f3:93:21:d1:1f:62:02:21:cf:8e:f5:
3b:b2:1a:9d:9e:35:61:04:f8:59:96:0f:fd:05:fa:1d:75:0d:
54:5a:ce:20:e1:3c:3b:bc:52:0c:80:c4:d1:22:a2:81:40:c1:
88:19:4e:56:e4:ae:21:b6:55:a0:73:19:2e:5f:6a:fe:c0:41:
8d:57:0f:db:fd:94:2c:d6:93:a6:44:44:19:b1:23:58:8f:38:
e9:1c:10:82:56:d5:6c:33:82:82:ca:5a:be:2c:ae:db:41:1a:
03:c0:df:24:10:fc:50:89:96:2b:6f:db:07:17:7e:4b:55:5f:
10:69:33:69:9e:38:11:e4:4c:5d:c6:1d:e7:ad:fa:6d:cc:eb:
a3:22:3b:1f:ab:90:b6:85:38:21:cf:e7:53:d9:3b:b0:c5:2c:
ff:73:d3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:21 2025 by rpki-client