Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/LfG8jcKw9ZaCOORkezkfYpnIz98.roa
File: LfG8jcKw9ZaCOORkezkfYpnIz98.roa (raw, json)
Hash identifier: 1T0hpWOyDGYfn/60jhJsII9lMYOoRRPfiJSuhBRNHsg=
Subject key identifier: 2D:F1:BC:8D:C2:B0:F5:96:82:38:E4:64:7B:39:1F:62:99:C8:CF:DF
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 01951F0D56B77733A8CE792F1224F2955BD1
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/LfG8jcKw9ZaCOORkezkfYpnIz98.roa
Signing time: Wed 19 Feb 2025 16:32:02 +0000
ROA not before: Wed 19 Feb 2025 16:32:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208091
IP address blocks: 80.66.76.0/24 maxlen: 24
80.66.88.0/24 maxlen: 24
87.251.67.0/24 maxlen: 24
87.251.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 15:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1f:0d:56:b7:77:33:a8:ce:79:2f:12:24:f2:95:5b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Feb 19 16:32:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2df1bc8dc2b0f5968238e4647b391f6299c8cfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:09:ed:77:42:96:f6:e9:50:3b:d9:20:d4:
d0:c6:1b:47:46:ec:7c:a5:ec:b3:0c:22:c2:5b:14:
c5:14:69:32:aa:09:ec:bf:0a:57:13:9f:6f:22:87:
43:87:53:a0:f8:1a:70:70:c4:d6:8d:e8:19:06:64:
38:37:67:b7:72:90:2d:b0:9f:a8:a9:44:50:5f:da:
b7:56:21:bf:42:29:e2:db:ba:3c:c1:d8:de:39:04:
d5:80:2d:4b:18:ae:0d:c8:0d:6d:bc:80:88:34:45:
8f:53:26:49:5d:00:c4:e4:b8:ae:a8:14:71:00:8a:
ae:c2:93:d0:fe:40:77:4d:13:20:83:77:04:98:b5:
e1:57:fe:20:69:4f:74:84:5e:8c:e8:02:2f:dd:b7:
ab:0d:38:42:e2:e5:52:b1:c1:46:c4:60:60:97:8e:
07:93:2d:ff:e5:39:04:df:e0:3a:65:a4:76:1b:27:
e0:b7:00:fb:87:e8:cb:ab:91:12:75:3a:4c:af:29:
b8:f0:86:85:d2:32:43:d7:6c:e9:0f:9a:7e:8b:4d:
e5:41:a3:2d:ee:78:5b:e8:8b:da:d8:b4:bf:93:a7:
b9:40:88:47:25:8b:75:e0:74:da:3a:8f:dd:a5:e7:
66:63:91:8b:a4:55:6b:de:fa:a3:dd:cc:d4:e8:38:
83:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F1:BC:8D:C2:B0:F5:96:82:38:E4:64:7B:39:1F:62:99:C8:CF:DF
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/LfG8jcKw9ZaCOORkezkfYpnIz98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.76.0/24
80.66.88.0/24
87.251.67.0/24
87.251.75.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:63:d2:45:6f:d8:a0:1d:e6:38:4f:e4:14:7c:ee:7e:d5:59:
52:2a:81:91:98:c9:9c:e6:3d:4f:45:df:8a:54:e8:43:f7:70:
36:fb:39:ea:d8:cf:b1:8d:1c:46:be:a9:a1:cb:16:5c:c3:40:
8d:88:3a:6b:59:89:28:5f:36:f0:11:53:25:27:d5:a4:d8:2a:
d9:7b:7a:a2:43:c7:9a:e9:2c:aa:2a:70:bf:97:2b:ff:59:0d:
d1:04:3a:9b:a6:9a:ab:7f:66:11:7f:61:97:15:ec:fa:fa:31:
52:40:42:13:d7:ea:35:ca:b2:d5:7c:cd:37:96:1a:0a:ef:71:
74:23:d9:b2:24:1c:0d:ad:06:eb:25:a9:86:75:3c:d5:44:15:
d8:ae:de:d0:84:9e:b4:57:94:91:1f:55:9e:5c:b8:27:6a:e3:
96:bc:83:fc:41:d2:78:9d:de:80:2c:65:c5:69:d8:fb:73:0a:
e8:7d:9d:28:fb:9e:fc:0e:b0:49:79:10:1a:9a:05:b6:ab:50:
a8:98:df:5e:02:c5:2c:ea:65:1e:cc:29:00:8d:3e:85:db:2d:
10:4d:ae:b8:01:e0:7c:6e:9d:f5:79:dd:0b:4a:b5:7c:45:73:
4e:31:db:fa:d2:2a:7d:92:4c:74:8a:ce:d5:28:a1:e1:76:dc:
2c:f4:ed:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:06:15 2025 by rpki-client