Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/zm0jvOmFDctzDDtl62_7kYgdLY4.roa
File: zm0jvOmFDctzDDtl62_7kYgdLY4.roa (raw, json)
Hash identifier: Lj3nY81bpxa42EF4THlh9eHWC/cp8tna7Qz6PR7aJtI=
Subject key identifier: CE:6D:23:BC:E9:85:0D:CB:73:0C:3B:65:EB:6F:FB:91:88:1D:2D:8E
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018E4D8A7C747CA07F1426FCBAF076CFDEBA
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/zm0jvOmFDctzDDtl62_7kYgdLY4.roa
Signing time: Sun 17 Mar 2024 17:51:45 +0000
ROA not before: Sun 17 Mar 2024 17:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52041
IP address blocks: 82.215.64.0/24 maxlen: 24
185.248.134.0/24 maxlen: 24
2a12:bec0:d0::/44 maxlen: 48
2a12:bec0:e40::/44 maxlen: 44
2a12:bec0:7000::/48 maxlen: 48
2a12:bec0:7001::/48 maxlen: 48
2a12:bec0:7002::/48 maxlen: 48
2a12:bec0:7003::/48 maxlen: 48
2a12:bec0:7004::/48 maxlen: 48
2a12:bec0:7006::/48 maxlen: 48
2a12:bec0:7007::/48 maxlen: 48
2a12:bec0:7008::/48 maxlen: 48
2a12:bec0:b00b::/48 maxlen: 48
2a12:bec1:b00b::/48 maxlen: 48
2a12:bec2::/32 maxlen: 32
2a12:bec2:b00b::/48 maxlen: 48
2a12:bec3:b00b::/48 maxlen: 48
2a12:bec4:100::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 25 Mar 2024 14:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4d:8a:7c:74:7c:a0:7f:14:26:fc:ba:f0:76:cf:de:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 17 17:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce6d23bce9850dcb730c3b65eb6ffb91881d2d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a8:2f:b6:ff:3a:f0:e4:13:e3:c0:be:91:b4:
1c:71:a0:76:7c:3b:98:6b:ed:20:85:a3:68:fb:73:
d1:07:85:ca:2a:63:f0:22:83:3d:06:5d:b6:5b:da:
99:ef:b9:02:ea:98:89:17:ec:6d:9d:4f:46:1f:08:
bc:37:3c:2e:8b:6e:91:9f:ad:d6:0f:dc:25:31:e0:
a0:cd:8f:c9:2b:98:df:d0:fc:70:bf:80:bf:08:fe:
2c:87:c6:35:a5:32:8c:4e:a0:78:d7:c1:74:c0:e3:
72:5c:33:41:74:50:24:84:22:fe:44:08:df:65:cd:
a7:c4:68:3c:2f:23:f7:52:b2:85:31:c9:2c:1f:58:
e1:16:33:4f:ce:43:fc:37:35:29:b4:35:ec:1a:f0:
38:50:b4:c2:cb:3b:7d:59:c5:2b:68:d9:76:6f:14:
11:a1:76:90:a4:cd:d4:9e:ac:74:f2:b8:16:13:59:
55:49:56:bc:fd:19:03:2c:cf:58:18:f8:41:6b:d9:
51:b0:0a:f7:c9:24:ba:90:7c:be:b6:3a:32:51:dd:
a4:7f:23:98:4e:bc:c8:ee:f7:f6:00:6b:31:9c:4f:
6f:3f:8c:3f:ca:03:17:ec:fc:eb:36:b2:10:47:59:
24:13:09:a7:90:96:10:57:27:84:3c:8b:b9:f9:14:
51:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6D:23:BC:E9:85:0D:CB:73:0C:3B:65:EB:6F:FB:91:88:1D:2D:8E
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/zm0jvOmFDctzDDtl62_7kYgdLY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.215.64.0/24
185.248.134.0/24
IPv6:
2a12:bec0:d0::/44
2a12:bec0:e40::/44
2a12:bec0:7000::-2a12:bec0:7004:ffff:ffff:ffff:ffff:ffff
2a12:bec0:7006::-2a12:bec0:7008:ffff:ffff:ffff:ffff:ffff
2a12:bec0:b00b::/48
2a12:bec1:b00b::/48
2a12:bec2::/32
2a12:bec3:b00b::/48
2a12:bec4:100::/44
Signature Algorithm: sha256WithRSAEncryption
a5:49:e5:bb:8c:8e:61:96:ff:f8:cb:47:bb:67:e9:de:52:b9:
06:91:42:e1:a1:fa:f8:9a:d6:02:9b:19:50:2d:44:0d:f7:eb:
58:0d:d8:61:ff:4b:79:61:e5:f4:6d:ff:b9:1d:00:d9:ae:14:
bc:aa:29:04:aa:cf:36:fc:6c:f5:47:69:22:47:b3:2e:32:5e:
54:a7:50:83:64:d2:4e:e2:f4:9b:32:25:bf:a4:f9:51:bd:2c:
a9:9e:26:c7:c5:a0:7b:83:e1:94:7c:f7:87:88:07:37:2e:1c:
85:ff:17:fe:3a:6c:56:44:52:fe:cd:51:17:02:a0:da:ee:04:
59:51:70:90:5e:14:1d:8a:6c:06:55:b0:af:26:66:84:6c:aa:
ff:78:7d:31:fa:f1:ef:58:4e:96:25:c2:d3:10:ac:3b:3a:80:
d7:cf:ea:9e:70:28:3c:e7:26:6f:29:c9:6b:db:0c:5e:f0:5e:
7a:de:f2:43:2c:90:79:15:0c:84:bb:85:fd:2e:cc:e5:80:a4:
a7:43:04:ef:c6:07:92:1f:50:5e:05:fa:d8:e6:a1:8f:49:02:
ed:c3:ee:30:6a:cf:86:c0:32:22:b1:25:8f:64:39:06:f2:2a:
72:f6:df:bb:a6:29:78:22:0c:17:8d:33:52:4f:b5:bf:7a:fd:
f1:d0:bf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org