Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/kz3hoOWyavw2LrJQcxkzBKUy5ZI.roa
File: kz3hoOWyavw2LrJQcxkzBKUy5ZI.roa (raw, json)
Hash identifier: 0JtDfkag4LIPJIPlxvxwqeq+8Znouwd3p2cvXxm+OJ8=
Subject key identifier: 93:3D:E1:A0:E5:B2:6A:FC:36:2E:B2:50:73:19:33:04:A5:32:E5:92
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 01931AA501617A5C93DE68273509BEAA93B5
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/kz3hoOWyavw2LrJQcxkzBKUy5ZI.roa
Signing time: Mon 11 Nov 2024 09:54:01 +0000
ROA not before: Mon 11 Nov 2024 09:54:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214729
IP address blocks: 85.198.127.0/24 maxlen: 32
213.108.20.0/24 maxlen: 32
2a00:8740:f002::/48 maxlen: 128
2a00:8740:ff10::/48 maxlen: 64
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1a:a5:01:61:7a:5c:93:de:68:27:35:09:be:aa:93:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Nov 11 09:54:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=933de1a0e5b26afc362eb25073193304a532e592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:2e:90:74:50:ad:3f:e7:96:91:ec:c2:d8:
00:78:e4:e7:3e:dc:20:cc:1c:11:58:46:9e:1c:81:
25:f0:9a:0f:ff:39:ff:3c:5f:aa:30:cc:3d:26:35:
db:5d:29:14:4a:a4:c6:54:28:d5:d4:c2:ba:96:0c:
da:f7:44:29:d2:cc:cc:1c:79:a8:9f:3a:46:0d:13:
c5:94:db:f4:18:55:d0:84:a1:c9:fa:5a:82:fe:e5:
a2:fd:0b:14:61:13:3c:6f:5f:bb:11:01:d1:82:6e:
4f:9a:de:f2:77:7c:c4:9f:25:92:37:68:37:57:3e:
ad:d5:02:53:fb:35:53:b2:40:6d:ee:d4:83:e2:a0:
6e:ef:93:5b:13:76:42:f7:9f:d1:8d:6b:51:b9:13:
e2:fa:f1:2a:95:02:14:d5:f2:e2:c6:a5:e0:81:2f:
a3:30:97:50:5f:f7:56:01:16:21:c2:f5:2c:63:3f:
39:a8:84:e9:a4:8f:b6:36:c9:7c:9e:d8:44:98:a7:
45:7d:8d:16:c5:bc:3a:80:3a:b3:1a:e5:62:f9:2c:
7a:89:c2:68:4f:61:9c:01:c7:87:ff:75:e4:f5:5f:
35:7d:74:23:c1:a3:92:42:3b:55:34:63:6b:a5:25:
01:4f:06:ac:e5:45:53:cc:05:c1:b9:43:e7:d1:80:
62:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3D:E1:A0:E5:B2:6A:FC:36:2E:B2:50:73:19:33:04:A5:32:E5:92
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/kz3hoOWyavw2LrJQcxkzBKUy5ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.198.127.0/24
213.108.20.0/24
IPv6:
2a00:8740:f002::/48
2a00:8740:ff10::/48
Signature Algorithm: sha256WithRSAEncryption
1a:82:d3:c5:06:a2:4f:cc:47:1e:46:d9:db:00:81:ea:bd:dc:
d7:17:63:3d:d6:74:1e:a3:72:60:4d:6a:92:e2:a2:de:94:19:
78:d8:42:fe:80:06:24:a9:36:1c:e8:74:db:f9:50:9e:88:0e:
9a:e4:b6:bf:1f:e9:0f:51:6c:89:39:12:76:47:12:61:95:9e:
98:af:47:32:42:00:01:33:66:ba:7a:db:43:3f:1a:97:f0:da:
6a:a9:6e:35:d2:53:eb:76:dd:da:11:71:aa:8e:5d:a3:37:ad:
06:4c:b0:7e:cb:5e:86:96:19:04:6e:91:c6:64:0b:52:66:6f:
b0:cb:f4:98:db:e8:cf:b7:76:b0:81:86:bb:e3:44:9a:a2:16:
85:83:5f:82:cd:f7:8d:71:a7:14:a6:31:5a:77:46:be:64:68:
e2:38:10:1d:9b:3c:68:80:b5:55:8c:1b:74:f6:1a:13:5e:bb:
92:df:62:05:9c:e2:d4:13:b0:00:05:64:ea:61:6b:de:04:d4:
f8:53:2a:e2:07:2e:ef:1b:02:ac:20:58:9c:20:88:c2:72:61:
db:71:b4:07:3a:f7:7f:ce:c1:ca:ba:9a:9c:7e:7f:c9:ef:74:
0f:b0:dc:98:72:97:02:fa:0b:22:ff:a9:06:e3:a8:c8:f2:a9:
c6:5a:27:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:54:35 2025 by rpki-client