Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZfOtevbbsyVqOc2awUtBTxG6x6s.roa
File: ZfOtevbbsyVqOc2awUtBTxG6x6s.roa (raw, json)
Hash identifier: I6XyonKueCmRnKwfrbT9dL2wOjgwFj7DyrTVjzD+wzY=
Subject key identifier: 65:F3:AD:7A:F6:DB:B3:25:6A:39:CD:9A:C1:4B:41:4F:11:BA:C7:AB
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01906DB68F58DA1DAF0DD68B9741DFC02BD1
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZfOtevbbsyVqOc2awUtBTxG6x6s.roa
Signing time: Mon 01 Jul 2024 09:53:19 +0000
ROA not before: Mon 01 Jul 2024 09:53:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 82.153.246.0/24 maxlen: 24
109.176.21.0/24 maxlen: 24
109.176.206.0/24 maxlen: 24
213.218.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 17:28:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6d:b6:8f:58:da:1d:af:0d:d6:8b:97:41:df:c0:2b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 1 09:53:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65f3ad7af6dbb3256a39cd9ac14b414f11bac7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:21:22:38:eb:53:0e:18:ae:6a:a2:54:9b:
11:48:c7:62:ea:a5:05:45:4e:54:be:92:6e:13:34:
f6:9f:46:1a:f2:79:91:e0:8d:2f:84:f5:e7:51:f9:
45:55:4f:35:9e:73:42:1c:6f:93:39:ff:46:65:37:
ae:64:0b:e8:53:c7:b9:ae:42:8e:61:8b:42:a0:59:
0a:3b:da:87:6c:84:64:79:df:19:f5:69:1b:1b:66:
5c:58:55:a1:f2:f4:9f:95:76:6c:b3:87:8b:da:e8:
0b:4b:cc:fa:6c:18:bc:21:4c:72:bb:f6:cf:9a:f8:
fd:42:ab:a9:52:74:29:00:7a:b7:14:b0:34:48:96:
19:8d:80:3e:a4:d1:c1:72:5e:39:3c:31:37:3b:21:
15:04:b6:e6:12:cc:0d:90:a5:75:bf:34:45:3e:26:
56:9c:ac:94:07:27:b3:97:82:1f:e6:bd:d3:75:d1:
fe:3b:b6:c4:b4:b9:fd:d9:b6:37:24:e1:36:0e:10:
e6:18:6a:41:0c:bb:3c:83:af:1b:d1:b5:49:f3:8c:
7d:80:1a:bf:78:04:13:da:a4:92:be:18:51:35:28:
c5:97:c6:4c:b7:15:4d:34:26:01:0d:79:03:ff:f8:
df:60:dd:a1:4c:67:f7:1e:d0:c0:b1:05:fb:e9:52:
6a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F3:AD:7A:F6:DB:B3:25:6A:39:CD:9A:C1:4B:41:4F:11:BA:C7:AB
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZfOtevbbsyVqOc2awUtBTxG6x6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.246.0/24
109.176.21.0/24
109.176.206.0/24
213.218.243.0/24
Signature Algorithm: sha256WithRSAEncryption
04:93:1e:a0:d1:1e:26:d9:9d:c9:e4:3a:c3:f5:f7:27:70:f1:
f6:6a:c0:c8:c3:9f:50:8b:69:55:6e:53:37:e6:c6:51:eb:ba:
04:06:cb:68:f3:c4:b2:b6:20:fb:05:cc:36:d8:fc:08:5a:9e:
47:83:6a:d6:0e:9c:47:ef:91:9b:16:f8:be:31:67:96:da:d4:
23:83:b8:1c:22:e4:4e:3d:b1:c9:c8:79:eb:06:bb:4e:89:23:
c1:d5:34:f0:2a:41:2f:5f:a9:90:0c:83:b5:a6:4b:d8:ba:b8:
00:85:a9:de:f1:c1:39:90:ae:16:5a:3d:e4:f9:54:b7:ee:f6:
1c:f5:db:6c:d6:8d:0a:fa:6c:97:f1:0c:33:01:d2:3e:27:10:
a8:81:83:39:3c:c8:95:23:79:32:12:8b:57:9a:db:c0:29:39:
bb:fe:84:02:9b:c8:21:82:c5:ec:3c:c6:92:d7:63:45:f7:86:
17:6e:a9:dc:e7:68:4a:50:71:9c:77:5d:6f:1c:41:65:56:9f:
55:11:f0:68:d5:13:c7:22:c8:5b:49:18:19:22:55:ef:df:2b:
e4:25:40:e3:00:17:13:88:ce:af:09:82:35:60:fc:d7:c4:47:
46:bf:b6:df:cc:b5:77:95:36:aa:e6:ec:7c:34:78:a9:62:2e:
ff:76:a0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:06:34 2025 by rpki-client