Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Z0N7CPBloDYc1v3TmPwIp6zUfGE.roa
File: Z0N7CPBloDYc1v3TmPwIp6zUfGE.roa (raw, json)
Hash identifier: atTwiRBS7FDWBIfPXFLJTsoIahF+tHd+OHcnZHMUUGk=
Subject key identifier: 67:43:7B:08:F0:65:A0:36:1C:D6:FD:D3:98:FC:08:A7:AC:D4:7C:61
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F2DFDDE5D0920CC280BC9060482574502
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Z0N7CPBloDYc1v3TmPwIp6zUfGE.roa
Signing time: Tue 30 Apr 2024 07:52:43 +0000
ROA not before: Tue 30 Apr 2024 07:52:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 80.240.85.0/24 maxlen: 24
80.240.87.0/24 maxlen: 24
82.163.23.0/24 maxlen: 24
89.213.211.0/24 maxlen: 24
217.145.69.0/24 maxlen: 24
217.145.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 12:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2d:fd:de:5d:09:20:cc:28:0b:c9:06:04:82:57:45:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 30 07:52:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67437b08f065a0361cd6fdd398fc08a7acd47c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:5b:fa:75:9b:9c:ba:02:26:41:45:44:b4:
bd:bd:d7:b3:e3:62:b9:9a:f3:40:88:48:9c:2b:c9:
e0:6a:0f:9a:94:45:2a:d0:1f:04:21:da:19:a4:e2:
fb:0e:59:1a:fa:ed:81:7b:dd:e5:cd:02:69:a2:ff:
41:a1:d8:c7:fc:4d:c4:63:4a:b9:76:27:92:fe:b5:
c5:0a:b9:ae:c3:f1:cb:4e:b2:cf:9e:d6:b7:0c:f3:
09:4e:87:02:fa:5b:fa:91:14:4d:b8:03:e6:d0:6b:
5c:3f:67:79:6d:f3:13:da:64:33:06:32:f4:a5:2c:
60:c4:32:39:f3:d4:7f:b6:10:3d:a0:8d:50:32:b3:
cc:f6:b8:c3:7c:d8:65:01:2b:1c:77:fe:14:1f:5b:
d4:7f:a4:95:fc:04:d8:c2:cb:7c:94:46:df:6d:85:
9e:ac:98:11:85:9e:c3:d0:ce:bb:2a:30:37:17:26:
9a:37:51:0f:0a:59:48:18:35:4a:e6:d9:a5:a7:38:
c4:2a:38:da:ee:f0:c0:03:e2:13:a7:8b:1f:26:ee:
e5:6e:47:22:ff:5a:dd:4a:18:66:26:09:43:68:44:
1b:74:21:4f:6b:d9:20:6f:24:37:28:16:3d:37:e4:
e6:55:2d:7d:c9:db:61:58:3f:e2:b2:73:5c:0a:1a:
01:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:43:7B:08:F0:65:A0:36:1C:D6:FD:D3:98:FC:08:A7:AC:D4:7C:61
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Z0N7CPBloDYc1v3TmPwIp6zUfGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.85.0/24
80.240.87.0/24
82.163.23.0/24
89.213.211.0/24
217.145.69.0/24
217.145.71.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:52:ca:79:54:77:1c:f8:8b:5d:62:87:eb:44:a2:6f:64:21:
b7:48:f5:d4:44:09:de:4e:aa:31:17:2f:27:b4:99:ef:0b:bd:
8c:4c:1f:ac:29:2b:da:44:44:2d:a3:4f:4d:8f:ce:ed:23:4e:
ef:49:96:5b:80:91:58:a1:24:20:47:94:7f:15:0c:a8:25:69:
4f:a3:38:41:f7:c8:a4:1c:bf:a2:24:26:6e:79:95:dc:d1:01:
ec:c0:f1:48:8d:da:a1:e1:a3:a8:48:85:f4:01:75:61:e5:14:
74:b5:2e:ad:cd:f3:52:26:8a:3d:2d:43:0b:44:56:f2:46:a7:
2d:1f:df:04:a1:a0:10:91:aa:1d:d3:17:85:80:cc:cc:18:9e:
81:9b:c4:c6:be:d8:c4:94:f0:ac:d7:a8:bf:08:f7:14:d6:e8:
e5:58:8c:13:08:26:72:0a:b9:ca:15:b5:36:62:4f:99:dc:e6:
26:4a:9f:ae:69:07:2b:e2:b7:15:95:ff:64:55:9b:75:f1:aa:
d3:e9:19:56:74:ad:ca:5c:43:25:70:dc:b0:10:a2:f2:3c:65:
74:f0:ee:f4:df:4a:53:cc:22:fe:87:9b:e2:eb:8e:a5:7e:72:
4d:fe:08:9e:89:0d:94:52:eb:9d:23:d3:42:e0:09:bd:07:8b:
47:15:35:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:03:15 2025 by rpki-client