Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Z0UzJx2oH1JD4yO6yAHf4udKi-s.roa
File: Z0UzJx2oH1JD4yO6yAHf4udKi-s.roa (raw, json)
Hash identifier: sJJpfSxaVDcrMAtm90pZCGA14SvlTMhV9imDxee0C/A=
Subject key identifier: 67:45:33:27:1D:A8:1F:52:43:E3:23:BA:C8:01:DF:E2:E7:4A:8B:EB
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194076F40EFD2691418057961C735780218
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Z0UzJx2oH1JD4yO6yAHf4udKi-s.roa
Signing time: Fri 27 Dec 2024 09:25:19 +0000
ROA not before: Fri 27 Dec 2024 09:25:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 79.99.150.0/23 maxlen: 24
82.153.255.0/24 maxlen: 24
82.163.10.0/23 maxlen: 24
89.213.127.0/24 maxlen: 24
89.213.226.0/24 maxlen: 24
109.176.14.0/24 maxlen: 24
109.176.30.0/24 maxlen: 24
109.176.208.0/24 maxlen: 24
213.218.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:6f:40:ef:d2:69:14:18:05:79:61:c7:35:78:02:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 27 09:25:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=674533271da81f5243e323bac801dfe2e74a8beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:7c:90:de:c8:97:8b:b3:3f:31:14:d5:33:
3a:07:dd:df:b5:7e:e5:2a:ef:5a:b2:71:e1:b0:71:
de:92:28:d3:28:9c:0f:64:66:cc:6a:24:00:a3:f4:
18:91:9a:a6:35:a9:22:73:62:ef:cc:4d:a6:7b:50:
b2:e4:65:11:76:a4:72:89:d1:9d:79:88:65:77:9a:
42:bf:2c:60:e6:72:78:f6:0c:00:c3:19:87:7f:e1:
30:1d:b0:36:96:41:5d:22:56:00:bb:4e:57:8b:25:
e0:9e:42:75:bf:04:b1:0b:2d:b5:16:6f:d7:fd:fd:
39:3a:c9:f6:69:ac:a3:56:5a:5d:53:22:5e:0f:76:
16:68:e2:1e:77:32:ed:c1:c4:c5:18:50:5a:e2:45:
98:bc:c6:b2:49:83:ef:e9:4b:b3:65:99:62:f5:7f:
ec:d4:ab:12:f1:1f:df:2b:97:bd:1a:a3:2c:35:6b:
95:59:81:f7:0c:ea:3d:6b:e5:59:4a:13:77:f4:7d:
bd:bf:27:3b:46:74:41:e3:5e:7c:0e:20:9f:e6:95:
d4:b3:2e:fb:ac:04:10:17:d5:71:db:61:34:28:6c:
b2:f1:af:81:65:95:b3:54:d2:57:ff:ea:78:dd:90:
6d:4b:74:ae:23:8e:b9:0f:ac:de:a7:10:70:46:35:
b1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:45:33:27:1D:A8:1F:52:43:E3:23:BA:C8:01:DF:E2:E7:4A:8B:EB
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Z0UzJx2oH1JD4yO6yAHf4udKi-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.150.0/23
82.153.255.0/24
82.163.10.0/23
89.213.127.0/24
89.213.226.0/24
109.176.14.0/24
109.176.30.0/24
109.176.208.0/24
213.218.248.0/24
Signature Algorithm: sha256WithRSAEncryption
29:3f:86:46:11:07:3b:b6:4e:b3:57:58:11:44:5b:8c:da:b6:
90:46:f4:03:bd:ad:60:c5:ed:9e:db:fa:d9:1f:a8:12:bb:7b:
9e:87:e3:b8:cc:0e:41:42:db:da:2c:dd:b1:9a:04:0c:00:d5:
97:df:81:f1:6c:5e:81:98:dc:b1:81:36:84:2b:6b:b7:5d:6b:
57:b5:40:a4:46:86:18:f4:2d:70:73:62:f4:2f:72:1d:09:7b:
bf:0a:19:47:d8:4b:72:10:19:44:49:c9:18:dd:74:95:ad:d8:
75:7c:11:91:64:c8:42:81:aa:3f:37:3f:0a:56:8c:34:37:5d:
e0:48:50:aa:41:8d:cb:bd:3b:e9:3e:b1:31:f3:7d:3b:34:ac:
92:91:27:c6:12:a0:07:9b:3b:30:74:8e:d0:6a:c7:3d:fd:8a:
d4:aa:33:54:7f:d9:f1:8c:5f:ff:e1:fd:1b:eb:a4:dc:b1:79:
4b:0a:b0:01:b3:d7:fc:f3:ad:3e:cf:7c:09:24:6a:df:44:79:
5d:14:a2:3f:b9:ef:25:f1:96:22:07:8a:3c:23:2a:3c:7b:02:
76:17:d1:58:f9:95:f7:fb:85:c2:cc:0f:08:b9:2c:75:62:06:
d9:53:30:eb:96:e1:4c:21:92:8b:3b:38:c7:6b:b3:6d:c9:44:
21:1d:2d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:12:21 2025 by rpki-client