Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/3FBwp0ErsZA4-T5dW0jXje1cslM.roa
File: 3FBwp0ErsZA4-T5dW0jXje1cslM.roa (raw, json)
Hash identifier: Zlp/qemq0PqvSyWjH81PMDO4NxOKZmCM7wLKEu0I1jI=
Subject key identifier: DC:50:70:A7:41:2B:B1:90:38:F9:3E:5D:5B:48:D7:8D:ED:5C:B2:53
Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial: 019407FFE8D6CF7950BEA148D93A0BA1965C
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/3FBwp0ErsZA4-T5dW0jXje1cslM.roa
Signing time: Fri 27 Dec 2024 12:03:19 +0000
ROA not before: Fri 27 Dec 2024 12:03:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34170
IP address blocks: 80.69.48.0/24 maxlen: 24
80.69.49.0/24 maxlen: 24
80.69.50.0/24 maxlen: 24
80.69.51.0/24 maxlen: 24
80.69.53.0/24 maxlen: 24
80.69.56.0/24 maxlen: 24
80.69.57.0/24 maxlen: 24
80.69.60.0/24 maxlen: 24
91.135.240.0/24 maxlen: 24
91.135.241.0/24 maxlen: 24
91.135.242.0/24 maxlen: 24
91.135.243.0/24 maxlen: 24
91.135.244.0/24 maxlen: 24
91.135.252.0/24 maxlen: 24
91.135.253.0/24 maxlen: 24
92.39.90.0/24 maxlen: 24
92.39.91.0/24 maxlen: 24
92.39.92.0/24 maxlen: 24
92.39.93.0/24 maxlen: 24
92.39.94.0/24 maxlen: 24
158.181.34.0/24 maxlen: 24
158.181.37.0/24 maxlen: 24
158.181.38.0/24 maxlen: 24
158.181.39.0/24 maxlen: 24
158.181.44.0/23 maxlen: 23
158.181.46.0/23 maxlen: 23
185.92.224.0/24 maxlen: 24
185.105.196.0/24 maxlen: 24
185.105.197.0/24 maxlen: 24
185.105.198.0/24 maxlen: 24
185.105.199.0/24 maxlen: 24
212.47.154.0/24 maxlen: 24
212.47.155.0/24 maxlen: 24
212.47.156.0/24 maxlen: 24
212.47.157.0/24 maxlen: 24
212.47.158.0/24 maxlen: 24
2a05:8200::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:ff:e8:d6:cf:79:50:be:a1:48:d9:3a:0b:a1:96:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Validity
Not Before: Dec 27 12:03:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc5070a7412bb19038f93e5d5b48d78ded5cb253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b5:db:9e:9a:cb:f1:30:d3:1b:07:72:96:41:
35:9e:58:e7:55:5c:0b:95:4a:56:bf:6b:f4:9c:69:
54:fc:02:c2:6d:93:d5:ea:19:d6:36:55:a5:66:fd:
0b:29:78:a2:60:5d:16:07:24:da:49:50:f1:d7:7f:
34:ce:65:b0:dc:bd:80:98:26:f4:09:00:ca:a1:38:
61:74:91:7b:44:ba:ca:65:0f:5b:52:ef:e0:b3:d4:
b7:d6:5f:08:6a:52:cf:db:fc:21:c3:e7:d3:a7:be:
66:24:12:d7:60:c5:e3:a7:fd:bf:27:b9:9d:6e:f5:
22:78:95:7a:96:39:29:6f:80:04:5f:d0:d7:13:07:
ec:dc:4e:bd:c0:83:37:da:9c:b2:0c:25:9c:60:95:
0a:16:ae:4a:de:c7:04:df:d2:7f:0a:54:15:ee:3d:
f5:df:75:0e:63:fa:af:82:03:99:87:fa:18:74:1f:
20:ed:d4:a7:79:24:e3:56:43:96:cf:f7:a1:45:98:
85:e2:c6:e4:98:b9:66:98:fb:1c:e0:00:75:a7:30:
c1:42:af:58:96:ec:f4:7f:57:30:d1:4c:0a:ab:d0:
5e:5e:7e:d8:61:d9:6c:7c:3b:62:e8:c6:54:e0:62:
a0:02:12:53:e6:90:7b:2d:60:d2:5b:08:c3:de:32:
18:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:50:70:A7:41:2B:B1:90:38:F9:3E:5D:5B:48:D7:8D:ED:5C:B2:53
X509v3 Authority Key Identifier:
keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/3FBwp0ErsZA4-T5dW0jXje1cslM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.69.48.0/22
80.69.53.0/24
80.69.56.0/23
80.69.60.0/24
91.135.240.0-91.135.244.255
91.135.252.0/23
92.39.90.0-92.39.94.255
158.181.34.0/24
158.181.37.0-158.181.39.255
158.181.44.0/22
185.92.224.0/24
185.105.196.0/22
212.47.154.0-212.47.158.255
IPv6:
2a05:8200::/29
Signature Algorithm: sha256WithRSAEncryption
5e:4e:8d:3a:c3:41:5a:6e:46:0b:d7:e4:8e:07:1e:1d:bf:74:
14:1b:32:ae:5d:ee:d1:42:1c:87:a8:4b:12:a7:d9:80:6e:35:
2b:bb:bc:8c:64:97:36:f5:38:04:7d:09:c6:8e:72:86:86:b0:
46:5e:d7:7f:2b:2c:57:8f:42:55:38:2a:f0:d0:7b:83:cc:ea:
95:ce:7f:59:9e:09:3d:30:da:6d:58:f7:f6:4f:1a:07:c6:a8:
21:02:b1:bf:43:f7:ff:6c:9c:bd:30:22:ec:c1:6a:ba:63:f1:
99:2b:b0:5b:5d:f2:3d:ec:37:36:fc:0b:c9:73:03:a2:de:91:
2f:50:55:13:71:a3:79:74:db:11:61:b5:4c:af:a6:a0:2a:34:
f7:b4:a2:be:44:f6:d0:e3:09:bf:01:88:93:1d:2a:90:ad:3a:
11:4c:06:8a:52:d6:80:15:c0:d1:1e:59:44:fc:2a:e9:9b:b1:
2a:e4:22:9b:5e:04:87:70:8c:4f:8f:b4:f8:01:4f:49:11:21:
01:1e:7b:0d:5e:31:58:86:2b:61:9e:5f:13:c9:c5:31:b7:ea:
8e:c0:47:6a:b9:20:6c:23:d3:55:11:2a:73:5b:2e:70:21:41:
1c:0e:48:72:8d:cd:80:ed:99:2b:22:8e:bf:af:fa:1e:b4:8a:
ce:e9:11:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:39:54 2025 by rpki-client