Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZtLjnpvWbJLktjOmtgC4mOf5ZmQ.roa
File: ZtLjnpvWbJLktjOmtgC4mOf5ZmQ.roa (raw, json)
Hash identifier: MVt/BWICMTiSsAlueUrwc77f455H5lnJJOzbl/moLtY=
Subject key identifier: 66:D2:E3:9E:9B:D6:6C:92:E4:B6:33:A6:B6:00:B8:98:E7:F9:66:64
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018FC95DA24669E986AA51BC64C5C183DF9B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZtLjnpvWbJLktjOmtgC4mOf5ZmQ.roa
Signing time: Thu 30 May 2024 11:58:27 +0000
ROA not before: Thu 30 May 2024 11:58:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 82.153.220.0/24 maxlen: 24
213.210.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jun 2024 15:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c9:5d:a2:46:69:e9:86:aa:51:bc:64:c5:c1:83:df:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 30 11:58:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66d2e39e9bd66c92e4b633a6b600b898e7f96664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:aa:1e:6e:50:d4:10:95:40:21:39:ec:4f:65:
bf:2c:8f:cb:e7:5d:1d:0e:02:9f:07:a1:31:f6:b4:
64:39:87:8a:cf:c4:36:15:28:1e:0b:d5:be:26:c5:
60:2c:66:06:3d:de:bb:1d:1d:68:c3:1d:5d:cb:8e:
37:68:4b:68:36:7f:10:fd:4a:dc:31:14:68:df:46:
8c:53:2d:10:88:ad:4c:80:44:90:f1:fc:f7:24:8b:
55:4b:0f:7d:1b:f4:e1:19:b5:78:e2:0b:94:84:3a:
de:cc:ab:2b:24:fc:8a:02:b2:03:cb:57:1d:c4:05:
c3:f3:bc:b4:23:46:07:5f:4a:34:29:2e:c5:84:59:
c9:5c:f5:d8:2d:a6:5e:20:e9:1a:ba:1e:c1:5e:e6:
65:a8:2f:9d:9e:a1:7b:a0:6a:69:bf:1f:d3:98:63:
7d:b9:0d:4c:c3:27:09:cf:8f:0d:79:09:27:d7:b7:
8e:f6:93:16:d7:37:6a:b5:20:28:e9:0a:f5:b5:d7:
12:46:5e:f3:9c:73:0d:02:26:7b:cc:37:5f:19:e8:
f6:e7:1f:d3:e4:64:8c:60:e0:e9:7e:7a:4b:c0:4b:
e5:cf:bd:89:6a:17:9d:b8:db:e8:50:70:ec:42:41:
23:d9:de:98:b0:3f:77:a0:53:9a:f5:39:06:57:f3:
c3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D2:E3:9E:9B:D6:6C:92:E4:B6:33:A6:B6:00:B8:98:E7:F9:66:64
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZtLjnpvWbJLktjOmtgC4mOf5ZmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.220.0/24
213.210.62.0/24
Signature Algorithm: sha256WithRSAEncryption
13:14:9f:39:ec:46:9e:0b:e7:d5:57:ad:ca:07:56:bb:f2:33:
27:ba:ca:b4:8f:2a:15:bb:30:a2:27:a7:bf:a2:03:7f:1f:8f:
e5:b7:27:03:fe:53:41:62:19:d6:c4:98:18:62:d0:9e:2c:a5:
65:33:c1:3a:3e:3b:71:d0:fd:3f:74:11:d4:2e:18:24:17:b0:
69:ba:45:45:41:2f:a1:ec:39:39:22:b4:46:b7:c7:b2:86:6f:
64:ac:94:ad:34:76:62:78:8c:d0:33:d9:72:9c:fb:09:a5:08:
8c:34:e0:97:26:f5:dc:20:94:32:64:79:7d:6c:72:c0:c1:91:
11:a0:d2:5b:28:fb:6c:e7:79:0c:7c:fe:87:da:1d:7f:79:17:
8d:95:28:16:22:40:58:a8:b3:5c:ac:fc:d2:af:7d:5a:b7:54:
d4:46:fe:bb:e6:f0:1e:46:ac:cc:54:4d:1e:bd:36:e0:88:62:
2b:ea:3d:52:d1:10:0c:49:59:88:c8:c9:26:e8:29:91:c0:3a:
08:c9:49:59:f1:69:55:0c:1b:ca:3e:a1:09:1b:aa:15:81:6b:
ea:10:df:5d:34:ea:7b:e4:38:ac:f6:de:da:86:b7:50:ec:b4:
87:a9:62:09:ff:4f:2a:a6:ea:cb:51:10:22:c7:22:d1:3c:27:
c6:b6:93:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:05:11 2025 by rpki-client