Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZcJ76ieCDSnpDMcHRH--irWCmLM.roa
File: ZcJ76ieCDSnpDMcHRH--irWCmLM.roa (raw, json)
Hash identifier: egG3OAMJjeEmccTo339x7JA0NZbcoYjZJLIJZXXhc2c=
Subject key identifier: 65:C2:7B:EA:27:82:0D:29:E9:0C:C7:07:44:7F:BE:8A:B5:82:98:B3
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143E8DB33588A029D328D3AE90FE998
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZcJ76ieCDSnpDMcHRH--irWCmLM.roa
Signing time: Wed 01 Jan 2025 09:48:06 +0000
ROA not before: Wed 01 Jan 2025 09:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50917
IP address blocks: 80.240.86.0/24 maxlen: 24
82.153.207.0/24 maxlen: 24
212.38.89.0/24 maxlen: 24
213.218.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 09:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e8:db:33:58:8a:02:9d:32:8d:3a:e9:0f:e9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65c27bea27820d29e90cc707447fbe8ab58298b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d2:78:93:4b:b8:d4:ab:c0:93:f0:01:bb:22:
03:09:d5:15:d5:e4:d9:b4:b5:7c:b7:87:7f:ab:ec:
1e:df:ba:1f:f6:4c:4d:47:9a:62:ed:d9:c8:f1:ad:
53:ba:e8:0e:f0:11:b3:b1:6a:07:d4:3d:d7:dc:aa:
d3:b5:b8:e4:95:3d:77:48:62:bf:c6:2c:8e:3e:30:
15:7d:6e:26:11:e1:77:f8:9d:e7:30:de:d1:93:7e:
29:a5:1a:6f:18:f8:8c:87:7b:9f:b1:f6:82:f6:fb:
55:b0:6e:cc:89:02:4e:81:e6:6b:86:2d:74:63:3a:
95:44:7d:85:21:d7:10:81:20:5b:a9:46:b0:f2:da:
fa:fe:7e:74:33:20:b6:3a:bd:95:bc:15:6e:af:57:
5f:91:3e:18:1f:ab:9f:e1:4d:2a:e2:3f:93:16:f6:
05:da:23:1f:69:86:f3:c2:e9:8d:36:84:49:5c:1d:
3b:03:fe:d1:bf:4d:50:7c:a9:24:bc:1f:8e:ee:5c:
e3:fc:a9:a4:30:12:71:f6:d1:0c:6c:b5:cd:ce:ee:
27:17:8a:65:7f:64:d8:93:18:8b:5d:9c:cf:b1:49:
76:33:23:91:83:51:77:cd:7b:ad:da:83:b0:b2:86:
49:19:51:5f:a0:6a:73:f8:ac:84:e2:2c:ae:9f:9f:
1a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C2:7B:EA:27:82:0D:29:E9:0C:C7:07:44:7F:BE:8A:B5:82:98:B3
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZcJ76ieCDSnpDMcHRH--irWCmLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.86.0/24
82.153.207.0/24
212.38.89.0/24
213.218.209.0/24
Signature Algorithm: sha256WithRSAEncryption
52:0a:1d:43:9f:61:8a:f8:c8:29:dc:89:34:95:02:76:80:fe:
0c:b5:85:14:db:4d:ac:ca:e6:6b:3d:4a:a1:b9:29:3d:b6:67:
33:28:31:79:b4:c1:7d:0b:7d:ba:6e:2a:79:86:79:48:35:07:
7f:11:ba:9d:65:bf:fc:5b:7e:e0:b6:51:80:6d:cb:4b:e6:3e:
46:35:22:42:7f:3b:b4:06:8f:53:fd:44:d0:2f:b7:10:2b:ed:
25:bb:f7:ea:32:ad:ba:78:2a:51:20:b0:2f:1e:68:6e:f3:0a:
13:3e:a5:85:6c:f2:37:d3:ee:38:9d:63:c0:29:b1:da:be:37:
cf:23:5e:8e:c7:e4:4f:cc:d9:b2:4e:67:a9:0e:e5:89:3b:79:
dc:aa:55:54:ce:5a:53:c4:bd:e2:1d:2a:07:6c:c5:d6:89:2c:
fe:96:07:86:ee:50:37:19:7c:01:e0:5d:47:3a:43:26:fc:9b:
1f:fe:0d:e7:41:8b:dd:64:f6:27:19:d2:e0:b0:d7:0f:c1:28:
12:e5:70:e8:d6:32:3e:d4:98:86:1e:64:bc:a5:c2:3d:72:2c:
df:63:73:c8:91:c9:c1:3c:aa:07:54:47:47:79:5e:95:51:17:
97:52:60:a2:f4:02:cd:ea:39:89:d9:a3:e5:62:e3:15:b5:ef:
86:88:3b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:49:13 2025 by rpki-client