Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZdV9P9xS45hWuCTR497ov4QdsZs.roa
File: ZdV9P9xS45hWuCTR497ov4QdsZs.roa (raw, json)
Hash identifier: zmUI6Sk/A32xCsujR8JdG+gr6ZpgKUcYnzChqSXPY/0=
Subject key identifier: 65:D5:7D:3F:DC:52:E3:98:56:B8:24:D1:E3:DE:E8:BF:84:1D:B1:9B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F614ECEA77D0A0865BFABD499B6B39914
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZdV9P9xS45hWuCTR497ov4QdsZs.roa
Signing time: Fri 10 May 2024 07:01:45 +0000
ROA not before: Fri 10 May 2024 07:01:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215362
IP address blocks: 217.145.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Jun 2024 21:18:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:61:4e:ce:a7:7d:0a:08:65:bf:ab:d4:99:b6:b3:99:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 10 07:01:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65d57d3fdc52e39856b824d1e3dee8bf841db19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fe:59:60:34:a8:04:82:81:9b:82:7b:47:0c:
44:4d:d7:a2:94:78:08:ac:1f:a3:a0:d0:e0:d7:17:
87:80:7b:d6:8a:bb:86:31:bf:fd:07:fa:4c:d2:28:
b4:8f:04:b8:92:30:09:3b:00:2a:69:d7:d5:25:b5:
5b:39:88:23:93:85:e6:c4:da:31:da:15:c9:14:93:
13:74:40:ac:d6:40:25:3f:d8:31:75:b2:cd:9b:4d:
82:61:88:30:f3:2b:fb:e5:cb:29:0a:2e:ab:22:7b:
62:89:86:bb:3d:05:68:f0:6d:3d:63:74:67:2a:bd:
9a:00:0e:c0:27:c2:1b:58:92:48:24:24:cb:d7:52:
f8:e2:0e:5d:6d:2b:d4:2c:22:bc:ac:e7:08:72:cd:
5a:76:9e:9e:47:c7:a9:4d:39:6e:fc:e5:f2:18:9d:
b7:6e:4c:a4:e3:64:f7:51:d3:2d:46:99:26:7c:d3:
60:da:ee:d6:ae:4e:9e:7b:cb:39:48:4a:90:47:12:
f2:88:a4:a5:68:9d:84:74:c1:63:8c:96:49:36:a0:
fa:f9:c5:04:bf:e1:61:a9:12:35:0c:de:34:c1:1d:
1d:a8:62:59:29:83:4a:34:89:03:9d:33:ae:e2:24:
e2:23:85:95:ce:15:19:f6:40:f7:62:a3:a7:9b:92:
f7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D5:7D:3F:DC:52:E3:98:56:B8:24:D1:E3:DE:E8:BF:84:1D:B1:9B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZdV9P9xS45hWuCTR497ov4QdsZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.145.66.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e7:77:83:ac:f0:ca:7e:b5:cc:04:f7:09:8e:f0:fb:fa:12:
e6:aa:6f:2c:eb:c1:f7:18:a7:85:a6:cc:f6:95:94:48:73:96:
79:5f:d3:4b:73:f8:9e:98:70:97:1e:17:e2:ce:0a:4e:61:bf:
34:a6:f2:60:81:76:35:75:33:7c:6e:42:d5:3f:39:04:41:ed:
43:1d:a0:87:54:09:b6:71:e3:40:5b:5a:8e:eb:5c:70:a6:d7:
44:41:db:19:ee:70:4f:96:9f:ee:84:0d:5b:ab:08:f6:0c:e2:
d5:4f:98:46:84:12:ec:d7:56:4d:3d:a7:31:f4:4f:d1:63:06:
b6:46:35:f8:1c:ae:83:7f:8b:86:37:95:5a:20:e0:8e:2e:5b:
66:f0:7e:75:bd:85:3a:7c:c0:40:c1:b7:81:33:8c:1e:c4:2e:
5d:e8:67:23:df:37:9e:20:f2:40:e2:b2:8e:23:1c:d5:5e:ba:
75:11:7d:73:a0:3b:dd:6e:38:39:94:22:ed:bc:fc:fe:66:4c:
38:1d:ad:4c:65:d0:5e:99:39:9a:0e:7d:5b:cd:5d:19:3f:0b:
22:a6:57:fe:67:46:eb:4e:a2:1a:ee:46:f2:03:0f:1e:3c:33:
26:2f:23:9e:90:e3:f9:03:21:c4:77:d2:42:1f:12:06:5f:0b:
d9:be:6c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:08:22 2025 by rpki-client