Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1k3d0U5of5iXSJ9UucVs0U9r0i4.roa
File: 1k3d0U5of5iXSJ9UucVs0U9r0i4.roa (raw, json)
Hash identifier: zM2L+dOrxXxUnO5hbWprrT0vlsqeKMgxCvUPb3orL0U=
Subject key identifier: D6:4D:DD:D1:4E:68:7F:98:97:48:9F:54:B9:C5:6C:D1:4F:6B:D2:2E
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019498432C3014EC3D1AB469C929EDEDA54D
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1k3d0U5of5iXSJ9UucVs0U9r0i4.roa
Signing time: Fri 24 Jan 2025 12:22:06 +0000
ROA not before: Fri 24 Jan 2025 12:22:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52041
IP address blocks: 82.215.64.0/24 maxlen: 24
185.248.134.0/24 maxlen: 24
194.46.57.0/24 maxlen: 24
2a12:bec0:d0::/44 maxlen: 48
2a12:bec0:e40::/44 maxlen: 44
2a12:bec0:7000::/48 maxlen: 48
2a12:bec0:7001::/48 maxlen: 48
2a12:bec0:7002::/48 maxlen: 48
2a12:bec0:7003::/48 maxlen: 48
2a12:bec0:7004::/48 maxlen: 48
2a12:bec0:7006::/48 maxlen: 48
2a12:bec0:7007::/48 maxlen: 48
2a12:bec0:7008::/48 maxlen: 48
2a12:bec0:b00b::/48 maxlen: 48
2a12:bec1::/32 maxlen: 48
2a12:bec1:2::/48 maxlen: 48
2a12:bec1:b00b::/48 maxlen: 48
2a12:bec2::/32 maxlen: 32
2a12:bec2:b00b::/48 maxlen: 48
2a12:bec3:b00b::/48 maxlen: 48
2a12:bec4:100::/44 maxlen: 44
2a12:bec4:1120::/44 maxlen: 44
2a12:bec4:1430::/44 maxlen: 44
2a12:bec4:1490::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 21 Feb 2025 10:47:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:43:2c:30:14:ec:3d:1a:b4:69:c9:29:ed:ed:a5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 24 12:22:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d64dddd14e687f9897489f54b9c56cd14f6bd22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:07:6f:2e:7e:ec:8f:55:34:71:78:6b:5a:14:
d1:3f:d2:a8:45:b2:79:bf:c0:8c:1a:8f:b9:f7:36:
cd:3b:93:48:89:d7:e8:d1:1c:89:3b:a5:12:a0:ab:
b0:5e:ef:bc:89:f6:ef:0b:19:6b:b9:90:35:0b:4c:
d6:34:01:74:1e:3f:c6:1b:ec:27:02:8e:5e:85:66:
23:5d:f9:d7:25:c9:16:4f:f9:ab:c5:0a:78:be:fd:
73:ba:32:32:98:7f:eb:03:55:97:29:db:b9:5a:64:
06:4b:d4:3b:7b:50:60:ed:e3:12:ca:55:03:20:94:
50:0b:c2:de:d8:29:61:82:a0:fb:42:7b:90:21:a0:
92:60:a3:d4:7e:3a:fe:6e:1c:65:4b:2e:27:2c:e8:
f9:16:5f:84:2a:bb:b9:c2:86:05:0f:59:0d:81:0f:
22:c1:e7:80:53:56:64:fb:42:c0:07:a1:8e:ca:b3:
2c:71:a5:94:81:e4:83:d5:99:37:60:53:1b:f6:52:
50:58:63:7f:1f:08:3c:2c:d3:c0:49:1a:b0:85:33:
64:eb:54:f4:9c:41:d4:ed:78:e5:0f:6b:22:d2:35:
02:27:5e:9e:a9:58:f0:0d:fc:39:48:12:34:48:6a:
45:9a:ba:8c:83:e3:66:9c:a7:90:9a:b8:07:16:fa:
5b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4D:DD:D1:4E:68:7F:98:97:48:9F:54:B9:C5:6C:D1:4F:6B:D2:2E
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1k3d0U5of5iXSJ9UucVs0U9r0i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.215.64.0/24
185.248.134.0/24
194.46.57.0/24
IPv6:
2a12:bec0:d0::/44
2a12:bec0:e40::/44
2a12:bec0:7000::-2a12:bec0:7004:ffff:ffff:ffff:ffff:ffff
2a12:bec0:7006::-2a12:bec0:7008:ffff:ffff:ffff:ffff:ffff
2a12:bec0:b00b::/48
2a12:bec1::-2a12:bec2:ffff:ffff:ffff:ffff:ffff:ffff
2a12:bec3:b00b::/48
2a12:bec4:100::/44
2a12:bec4:1120::/44
2a12:bec4:1430::/44
2a12:bec4:1490::/44
Signature Algorithm: sha256WithRSAEncryption
a3:3c:1c:b9:c7:fc:21:b3:68:4e:3e:07:20:2b:61:81:d1:ad:
41:ee:54:af:a0:7b:60:2a:d8:68:d0:a1:d3:59:7e:a1:80:1c:
40:a5:fa:48:bf:26:ff:8c:3e:6b:8b:7f:12:6e:f9:cf:75:2b:
3b:f8:93:41:53:fe:df:ec:80:9f:dd:9e:c3:75:5f:bb:ab:b6:
cc:86:fb:5a:4c:2d:ef:03:cc:32:8b:57:d9:4b:53:1a:ba:c9:
a6:42:a1:2c:6f:e7:5a:11:36:4c:ec:fa:00:f6:88:a8:d9:1d:
2c:d1:a0:03:03:e8:99:46:2b:78:5f:12:fc:f2:13:7e:f7:4a:
57:98:71:3b:a0:62:39:86:8b:88:d1:26:fd:a9:2c:22:88:13:
89:63:b5:c2:04:c1:a9:42:34:a1:af:0f:3c:bc:37:b4:3a:a7:
a3:26:7b:c2:65:a0:bc:5d:63:b0:6e:f7:74:52:0c:2a:2d:4c:
58:fe:e3:68:12:e9:75:0f:32:39:b1:41:e4:21:31:42:a9:e1:
91:b4:cc:ba:91:fa:cf:a3:f2:00:71:3b:68:2d:25:bb:da:8f:
35:56:1c:97:29:ed:7a:35:81:4d:e8:8b:51:e3:46:52:36:56:
4b:c9:f2:f6:0a:d3:ed:f6:29:4c:d1:bc:0b:5d:9d:af:7b:6f:
ae:bd:1a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:01:42 2025 by rpki-client