Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/gZ3MZuzOnwvftyxUHjz29E4IER8.roa
File: gZ3MZuzOnwvftyxUHjz29E4IER8.roa (raw, json)
Hash identifier: zH+3Ksc+SKh3lurRNhIQxkPTTI5GlVGAnq9LTSUE1Dk=
Subject key identifier: 81:9D:CC:66:EC:CE:9F:0B:DF:B7:2C:54:1E:3C:F6:F4:4E:08:11:1F
Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108
Certificate serial: 019395AEEF5C010BE0D508EE183FF4E1A465
Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/gZ3MZuzOnwvftyxUHjz29E4IER8.roa
Signing time: Thu 05 Dec 2024 07:18:09 +0000
ROA not before: Thu 05 Dec 2024 07:18:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44933
IP address blocks: 77.70.164.0/22 maxlen: 22
193.220.184.0/22 maxlen: 22
193.220.188.0/24 maxlen: 24
193.220.191.0/24 maxlen: 24
193.220.192.0/20 maxlen: 24
193.220.192.0/21 maxlen: 21
193.220.200.0/24 maxlen: 24
193.220.201.0/24 maxlen: 24
193.220.202.0/23 maxlen: 23
193.220.204.0/24 maxlen: 24
193.220.205.0/24 maxlen: 24
193.220.206.0/24 maxlen: 24
2a02:6600:2003::/48 maxlen: 48
2a02:6604:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:95:ae:ef:5c:01:0b:e0:d5:08:ee:18:3f:f4:e1:a4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896a82a725ed22bb46847ae568912078de25c108
Validity
Not Before: Dec 5 07:18:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=819dcc66ecce9f0bdfb72c541e3cf6f44e08111f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2a:fa:a0:6d:13:52:19:f1:95:81:8b:37:85:
ee:cb:c7:62:4a:03:3f:08:8d:8b:c2:07:48:0f:70:
8b:5c:71:71:6a:48:f6:a4:b1:0e:34:d5:3a:59:90:
b3:d0:ea:df:0b:35:37:37:d8:56:fd:f8:23:b2:0f:
cf:f3:10:18:1f:1a:cf:88:75:fb:4a:cd:fc:9e:bd:
3b:30:2c:6f:f7:44:45:95:8b:53:30:78:b6:e8:72:
4b:75:ed:b7:fb:4f:cc:bb:91:b6:d4:ee:af:60:08:
2c:a3:e3:a8:8a:9d:d8:dd:ff:0d:5a:88:8c:68:ee:
b9:79:e2:ac:c9:70:f0:03:14:af:c7:73:77:57:a1:
95:e2:8e:e1:e1:7f:25:6d:7c:8e:59:20:39:84:08:
f6:64:1d:86:3c:9a:b6:cb:ce:bd:8e:9a:41:f5:41:
5c:70:22:f7:98:a1:33:0b:0d:ce:a2:ac:8a:de:4b:
24:4e:d2:49:ad:50:7b:2e:ab:13:50:9d:3f:5a:4b:
c9:cc:72:12:d0:07:8e:89:00:84:05:16:26:1b:8b:
25:1b:57:f8:b8:05:c7:7e:0a:b8:33:11:d9:2c:e4:
a3:cb:ca:43:96:c0:7c:e2:02:7b:57:37:6f:23:c2:
6f:75:cc:a4:5d:24:7d:22:1d:9b:ab:7f:1e:b5:e5:
22:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9D:CC:66:EC:CE:9F:0B:DF:B7:2C:54:1E:3C:F6:F4:4E:08:11:1F
X509v3 Authority Key Identifier:
keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/gZ3MZuzOnwvftyxUHjz29E4IER8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.70.164.0/22
193.220.184.0-193.220.188.255
193.220.191.0-193.220.207.255
IPv6:
2a02:6600:2003::/48
2a02:6604:3::/48
Signature Algorithm: sha256WithRSAEncryption
1e:b9:9a:ec:df:49:fe:83:d3:66:52:70:2d:9a:50:7d:63:b2:
46:28:cf:5e:af:6e:db:d3:35:89:ec:e0:b8:1d:74:35:6e:31:
82:e9:00:47:24:38:a5:d6:73:ec:be:56:aa:1e:d0:b1:df:8e:
bd:43:1f:65:d5:f3:f4:0f:ad:56:70:63:02:6e:a2:f9:b6:ba:
2d:31:42:22:f8:12:34:b7:30:ca:1e:fb:3c:e0:26:9f:80:c1:
34:77:03:d9:c5:b4:d2:38:fe:01:0b:00:16:d2:0b:97:3c:b9:
6d:e4:fd:12:ce:1e:14:3e:9c:7d:a0:f0:8d:b3:b5:11:65:dc:
94:72:d5:c3:89:ee:b9:23:e2:a8:6d:04:d1:58:79:65:da:0e:
95:f3:b4:2e:b4:13:4f:07:ad:5b:52:3e:29:fb:84:00:df:5c:
c5:dd:fb:ad:df:58:f4:69:f8:58:fb:f4:e9:d0:bf:5f:3b:81:
9a:14:25:c0:0f:ae:40:04:77:ee:d8:0c:0f:38:4d:c5:a5:74:
e0:b0:d2:4b:b1:8c:4c:c0:10:10:a2:dc:be:aa:b6:2e:de:76:
ae:7f:8a:f0:2d:0e:07:c2:76:d8:8b:f4:11:37:be:26:57:34:
95:6d:05:ee:bf:d9:4d:7c:eb:81:a6:3a:8a:12:93:b7:e9:16:
40:1f:c2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:33:42 2025 by rpki-client