Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zstC2_dzEbMTVn1fg79ifmdLMCw.roa
File: zstC2_dzEbMTVn1fg79ifmdLMCw.roa (raw, json)
Hash identifier: 87/6IIZaOZqXWtjzKHM5DMEhBKmFjSbyV5VQmmBokMg=
Subject key identifier: CE:CB:42:DB:F7:73:11:B3:13:56:7D:5F:83:BF:62:7E:67:4B:30:2C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F7888DC7C693F15ECF4DA8E22F2186EC7
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zstC2_dzEbMTVn1fg79ifmdLMCw.roa
Signing time: Tue 14 May 2024 19:16:26 +0000
ROA not before: Tue 14 May 2024 19:16:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 82.153.152.0/24 maxlen: 24
82.153.225.0/24 maxlen: 24
89.213.43.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 12:45:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:78:88:dc:7c:69:3f:15:ec:f4:da:8e:22:f2:18:6e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 14 19:16:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cecb42dbf77311b313567d5f83bf627e674b302c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6d:31:01:3a:67:13:ec:7d:f0:7f:66:05:98:
45:2d:ea:00:d9:ff:7a:4d:0d:34:d5:9e:ab:f5:39:
19:5f:a0:3d:67:af:dd:59:93:b0:3e:76:74:71:7b:
f5:0c:da:58:0b:38:d1:18:d6:3d:5f:69:cb:78:2d:
b8:a8:b2:94:a5:ac:74:74:2e:9c:a8:f9:36:7b:51:
bf:a2:2b:89:b0:26:cc:37:65:b0:61:c0:7c:3b:02:
dc:7c:99:bf:b7:04:65:c3:94:b2:a7:9b:50:4b:68:
3e:e6:69:58:34:8f:99:0c:af:f7:87:af:d5:d4:42:
e3:4a:c0:95:9c:ec:03:79:e9:2b:6f:52:4b:84:9a:
24:47:a5:b3:e1:ec:73:d7:17:18:4a:ea:e9:1f:0c:
d8:8f:7f:d7:de:ce:8f:ff:6f:d1:98:2c:49:6d:29:
9b:9f:96:61:90:49:9e:92:ae:de:7f:b0:73:27:c9:
bc:5e:06:fc:c1:d7:81:97:80:4c:70:a4:fa:9b:a4:
9c:b3:6c:7f:40:dd:02:8d:ff:fe:08:a4:0f:2c:9e:
f1:43:5a:df:b8:1c:fd:f1:3a:35:d1:ce:93:a1:e8:
6d:2d:a2:af:b2:c8:2d:e8:e0:ee:99:2f:39:69:74:
cf:8a:57:94:3d:d5:72:4e:00:c8:b8:0d:89:94:a1:
7e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CB:42:DB:F7:73:11:B3:13:56:7D:5F:83:BF:62:7E:67:4B:30:2C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zstC2_dzEbMTVn1fg79ifmdLMCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.152.0/24
82.153.225.0/24
89.213.43.0/24
89.213.145.0-89.213.146.255
89.213.161.0/24
Signature Algorithm: sha256WithRSAEncryption
83:4c:67:3b:a1:81:1b:67:de:73:91:e6:0f:9e:99:5f:14:52:
19:37:9f:74:9b:8d:14:cf:4f:c9:ad:3a:c9:3e:e3:26:e4:c3:
49:d7:24:6b:14:8d:ee:92:35:ed:45:a9:6c:7e:95:64:7d:6c:
16:1f:c8:ed:21:52:25:97:0a:4b:a5:ff:4f:2c:05:4f:f1:65:
54:78:2f:4e:81:39:a5:d7:8c:19:73:11:14:a6:e7:96:33:7b:
0c:3a:a2:5c:a3:c7:ff:d4:d3:37:1e:b8:0a:35:ad:45:2c:92:
6b:aa:05:e7:f6:f3:30:c3:2c:aa:01:b1:5a:53:9e:d7:13:38:
d1:08:9b:b8:01:d2:b9:92:80:d7:1e:84:65:89:c7:1f:00:d1:
c4:94:a3:74:e7:a0:32:4c:b5:4a:c2:4e:2c:bb:1e:53:35:b0:
f4:66:2c:f8:c3:f6:5e:40:c7:a1:9c:9c:84:ef:30:50:8b:ec:
8a:ec:9b:e2:98:95:e2:76:2e:35:72:bd:27:7e:4a:b5:f7:70:
74:a6:25:14:ee:21:9d:9f:2f:5f:68:1e:65:4d:fc:86:ef:03:
f6:73:74:b3:1d:bf:6a:66:c1:3d:d5:09:db:55:5a:83:04:95:
9b:46:f4:8e:7d:52:eb:c3:71:0d:d3:16:10:77:08:55:be:d5:
0b:e8:92:35
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAY94iNx8aT8V7PTajiLyGG7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNTE0MTkxNjI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWNiNDJkYmY3NzMxMWIzMTM1NjdkNWY4M2JmNjI3ZTY3NGIzMDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3m0xATpnE+x98H9mBZhFLeoA2f96
TQ001Z6r9TkZX6A9Z6/dWZOwPnZ0cXv1DNpYCzjRGNY9X2nLeC24qLKUpax0dC6c
qPk2e1G/oiuJsCbMN2WwYcB8OwLcfJm/twRlw5Syp5tQS2g+5mlYNI+ZDK/3h6/V
1ELjSsCVnOwDeekrb1JLhJokR6Wz4exz1xcYSurpHwzYj3/X3s6P/2/RmCxJbSmb
n5ZhkEmekq7ef7BzJ8m8Xgb8wdeBl4BMcKT6m6Scs2x/QN0Cjf/+CKQPLJ7xQ1rf
uBz98To10c6ToehtLaKvssgt6ODumS85aXTPileUPdVyTgDIuA2JlKF+LQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFM7LQtv3cxGzE1Z9X4O/Yn5nSzAsMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvenN0QzJfZHpFYk1UVm4xZmc3OWlmbWRMTUN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAUpmYAwQA
UpnhAwQAWdUrMAwDBABZ1ZEDBABZ1ZIDBABZ1aEwDQYJKoZIhvcNAQELBQADggEB
AINMZzuhgRtn3nOR5g+emV8UUhk3n3SbjRTPT8mtOsk+4ybkw0nXJGsUje6SNe1F
qWx+lWR9bBYfyO0hUiWXCkul/08sBU/xZVR4L06BOaXXjBlzERSm55Yzeww6olyj
x//U0zceuAo1rUUskmuqBef28zDDLKoBsVpTntcTONEIm7gB0rmSgNcehGWJxx8A
0cSUo3TnoDJMtUrCTiy7HlM1sPRmLPjD9l5Ax6GcnITvMFCL7Irsm+KYleJ2LjVy
vSd+SrX3cHSmJRTuIZ2fL19oHmVN/IbvA/ZzdLMdv2pmwT3VCdtVWoMElZtG9I59
UuvDcQ3TFhB3CFW+1QvokjU=
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:13:27 2025 by rpki-client