Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/dzt8RMRa04p3rcoJ3odntQyPJv0.roa
File: dzt8RMRa04p3rcoJ3odntQyPJv0.roa (raw, json)
Hash identifier: Oh9kpBQhbO/A3Dpes28u4RIBdMS4Q9EKpDLXS/svIY0=
Subject key identifier: 77:3B:7C:44:C4:5A:D3:8A:77:AD:CA:09:DE:87:67:B5:0C:8F:26:FD
Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial: 018CC94D4B8B81F2D5B8A8FC1DFC0A669547
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/dzt8RMRa04p3rcoJ3odntQyPJv0.roa
Signing time: Tue 02 Jan 2024 08:32:15 +0000
ROA not before: Tue 02 Jan 2024 08:32:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31673
IP address blocks: 195.69.72.0/22 maxlen: 24
185.168.85.0/24 maxlen: 24
185.168.86.0/23 maxlen: 24
31.171.200.0/21 maxlen: 24
5.39.168.0/21 maxlen: 24
84.38.224.0/20 maxlen: 24
83.143.184.0/21 maxlen: 24
178.248.152.0/21 maxlen: 24
2a0a:9fc0::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:4b:8b:81:f2:d5:b8:a8:fc:1d:fc:0a:66:95:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Validity
Not Before: Jan 2 08:32:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=773b7c44c45ad38a77adca09de8767b50c8f26fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:68:b5:5b:b0:50:07:d2:68:5a:1e:96:b2:
03:69:6b:2e:b0:31:89:2f:20:29:c4:c8:2f:7c:26:
30:bb:bc:78:c3:59:59:52:c8:45:94:86:4a:a5:6f:
8d:30:13:0c:e0:75:cf:bc:6e:13:b0:e9:31:bc:4f:
a2:64:69:d7:19:62:99:1a:c4:fd:95:8e:db:58:b2:
aa:ee:02:b8:ac:e5:95:ee:17:6d:ca:ff:11:4e:1b:
06:8a:dd:fa:16:fa:19:77:a5:70:b4:e3:0e:e7:95:
39:7c:61:ba:b5:2a:74:a8:ec:d1:7f:18:b4:dc:78:
19:cc:b0:4b:a2:61:db:ab:1a:87:7a:29:05:ab:e3:
67:de:04:52:50:3e:f3:0d:3c:d0:7d:85:9f:42:46:
ef:af:07:03:60:c5:77:d9:59:f4:91:db:67:b0:ca:
c1:7e:90:81:b5:d3:b7:52:6d:f9:d0:93:8e:8a:7f:
c5:ed:66:7e:d9:5c:2f:d5:ea:65:17:18:29:7a:4a:
c6:7e:d8:e8:04:6a:0e:32:d2:35:52:c1:6b:41:fd:
b1:51:23:43:d7:e3:f0:e1:2d:67:74:1d:f5:ce:37:
64:da:bb:b4:68:5f:4a:56:7a:f3:d1:b6:d2:32:2d:
57:09:78:24:47:bd:69:44:a3:67:88:69:58:50:78:
b8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3B:7C:44:C4:5A:D3:8A:77:AD:CA:09:DE:87:67:B5:0C:8F:26:FD
X509v3 Authority Key Identifier:
keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/dzt8RMRa04p3rcoJ3odntQyPJv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.168.0/21
31.171.200.0/21
83.143.184.0/21
84.38.224.0/20
178.248.152.0/21
185.168.85.0-185.168.87.255
195.69.72.0/22
IPv6:
2a0a:9fc0::/29
Signature Algorithm: sha256WithRSAEncryption
52:c6:8b:b5:5b:36:ad:b2:dc:a0:c1:87:3c:f1:22:a5:0c:86:
a5:f6:03:4a:ba:ca:3b:a4:eb:13:cb:10:e0:c5:53:6d:02:a5:
dc:88:ca:30:75:b4:5c:be:9e:4b:e8:53:ae:ff:e9:fb:11:3f:
41:b0:3a:fb:98:86:52:f0:03:b5:79:64:35:cf:6d:fd:2b:ec:
87:a2:82:d4:13:da:cc:69:4b:1d:83:92:a3:1d:0b:84:1e:de:
ab:89:37:de:42:3c:62:44:bc:f0:fb:b9:2e:19:8b:02:3c:df:
b3:65:d8:60:43:21:e8:65:5a:0b:61:5a:0d:0a:69:e6:01:64:
ec:67:6d:11:ed:58:bd:f7:3f:94:fb:cc:d7:fe:0a:90:b4:c5:
be:a5:ed:29:1d:d4:43:88:9f:78:a8:80:ad:27:5d:89:42:5f:
a3:bd:68:d7:0d:94:f2:2c:77:85:ad:63:5d:a6:cc:1c:f7:fa:
7b:e9:76:8e:50:5f:4f:9d:55:0e:60:be:eb:f5:af:32:43:1c:
54:99:ee:82:4c:e1:a6:a0:ec:39:9d:88:dc:3b:61:73:d2:9f:
ca:bc:7e:67:b0:3a:11:89:d4:65:4b:17:23:3d:33:d8:be:85:
2b:3f:e0:84:55:f2:73:70:d0:a5:c2:73:d4:f9:b4:79:28:fd:
ab:dd:95:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:30:08 2025 by rpki-client