Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZLiDPpo6zGxYpuFfZoQbC6C8KJw.roa
File: ZLiDPpo6zGxYpuFfZoQbC6C8KJw.roa (raw, json)
Hash identifier: vlJwfCMg6uQ8WZCbxYOK08+6iE5EQObgc7joncIsIpY=
Subject key identifier: 64:B8:83:3E:9A:3A:CC:6C:58:A6:E1:5F:66:84:1B:0B:A0:BC:28:9C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01939613A69249341E644D2E8E7DCFFAC9D6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZLiDPpo6zGxYpuFfZoQbC6C8KJw.roa
Signing time: Thu 05 Dec 2024 09:08:10 +0000
ROA not before: Thu 05 Dec 2024 09:08:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62005
IP address blocks: 213.218.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:96:13:a6:92:49:34:1e:64:4d:2e:8e:7d:cf:fa:c9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 5 09:08:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64b8833e9a3acc6c58a6e15f66841b0ba0bc289c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:80:05:82:78:db:57:48:ee:f7:71:a2:4a:27:
83:70:46:a0:ed:8b:3f:f2:d8:77:84:ce:07:9b:62:
b0:06:fe:8c:dc:cc:be:56:82:a8:c1:72:d0:df:19:
39:7b:e8:c2:de:a6:64:b7:60:ca:db:96:26:9f:b4:
a2:16:e4:10:b4:f5:e8:12:6d:e4:e2:f1:2b:d3:2e:
e4:19:dd:78:4b:e5:af:fa:38:b4:2a:41:ee:72:dc:
b3:88:6a:4f:77:63:34:31:c1:b3:e0:7f:d6:ce:b6:
b0:df:c8:80:1e:49:04:7a:9f:18:8e:ee:4e:83:9e:
fb:8d:91:f1:af:ca:d8:50:12:88:5e:cf:f4:04:97:
5b:29:72:f8:40:c3:2c:05:d0:5c:f2:13:54:5f:32:
5e:92:0c:9f:8f:57:76:1f:fd:fa:49:86:1f:92:b6:
5e:50:ac:d8:4a:f5:b7:b8:e1:c3:24:14:9a:ac:92:
74:89:01:09:11:1d:60:2d:da:c9:8b:89:1d:0d:ea:
40:92:9d:a1:73:2b:fd:3e:66:25:20:a9:81:01:74:
4b:52:4e:43:57:9e:12:e6:8e:db:17:78:a9:bf:2a:
f4:c7:84:bb:8e:d0:9c:88:c0:1c:33:4d:33:cf:56:
0e:ed:b4:04:a5:0d:01:12:fd:ac:3b:65:45:6e:42:
ca:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B8:83:3E:9A:3A:CC:6C:58:A6:E1:5F:66:84:1B:0B:A0:BC:28:9C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZLiDPpo6zGxYpuFfZoQbC6C8KJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.210.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:9b:d8:94:2d:86:54:06:b2:22:92:4e:62:ce:fb:09:23:d1:
3b:f3:40:1d:e0:32:9e:15:a2:46:49:ae:80:e6:b0:c0:1a:88:
92:60:fa:76:74:ff:7d:ca:5d:04:5c:bf:6e:14:c3:33:f3:80:
4e:6b:87:97:13:a0:0a:bd:6a:cb:65:de:0b:6a:e1:b4:33:a5:
22:0f:8f:a1:71:0a:11:16:c9:f1:ed:ee:e2:ba:d0:74:c0:b8:
7b:82:3f:c1:f2:c3:74:38:55:06:7c:91:ee:62:91:27:f9:5d:
81:b6:d0:1b:9f:f5:e3:f8:b1:61:81:d8:8c:77:05:2d:ff:7d:
c4:91:2f:91:69:1f:22:47:00:80:8c:1f:65:57:29:2f:0b:d5:
ea:6e:07:56:1b:16:5d:ab:d5:88:97:f1:03:e9:87:5e:d1:10:
d6:53:0b:cc:9a:1f:45:b0:bd:af:57:a0:fa:d5:78:d7:bf:c8:
2b:a5:12:44:67:b9:46:86:31:84:27:c7:a1:3e:ed:b6:b9:ce:
f4:79:8a:93:79:68:90:ac:88:18:c4:59:51:d2:cb:7c:93:32:
d0:4a:9e:f3:d1:4a:58:a4:7c:c8:96:36:fc:39:78:e9:d9:78:
e9:c6:99:15:9f:9b:2d:a3:b8:99:66:d1:7f:5f:0e:aa:b3:4b:
aa:cd:ef:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOWE6aSSTQeZE0ujn3P+snWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQxMjA1MDkwODEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGI4ODMzZTlhM2FjYzZjNThhNmUxNWY2Njg0MWIwYmEwYmMyODljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoAFgnjbV0ju93GiSieDcEag7Ys/
8th3hM4Hm2KwBv6M3My+VoKowXLQ3xk5e+jC3qZkt2DK25Ymn7SiFuQQtPXoEm3k
4vEr0y7kGd14S+Wv+ji0KkHuctyziGpPd2M0McGz4H/Wzraw38iAHkkEep8Yju5O
g577jZHxr8rYUBKIXs/0BJdbKXL4QMMsBdBc8hNUXzJekgyfj1d2H/36SYYfkrZe
UKzYSvW3uOHDJBSarJJ0iQEJER1gLdrJi4kdDepAkp2hcyv9PmYlIKmBAXRLUk5D
V54S5o7bF3ipvyr0x4S7jtCciMAcM00zz1YO7bQEpQ0BEv2sO2VFbkLKAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGS4gz6aOsxsWKbhX2aEGwugvCicMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvWkxpRFBwbzZ6R3hZcHVGZlpvUWJDNkM4S0p3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1drSMA0G
CSqGSIb3DQEBCwUAA4IBAQBMm9iULYZUBrIikk5izvsJI9E780Ad4DKeFaJGSa6A
5rDAGoiSYPp2dP99yl0EXL9uFMMz84BOa4eXE6AKvWrLZd4LauG0M6UiD4+hcQoR
Fsnx7e7iutB0wLh7gj/B8sN0OFUGfJHuYpEn+V2BttAbn/Xj+LFhgdiMdwUt/33E
kS+RaR8iRwCAjB9lVykvC9XqbgdWGxZdq9WIl/ED6Yde0RDWUwvMmh9FsL2vV6D6
1XjXv8grpRJEZ7lGhjGEJ8ehPu22uc70eYqTeWiQrIgYxFlR0st8kzLQSp7z0UpY
pHzIljb8OXjp2XjpxpkVn5sto7iZZtF/Xw6qs0uqze8O
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:34:30 2025 by rpki-client