Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/0ZFaPFwdScIlfa8jNW1zbrrUqX0.roa
File: 0ZFaPFwdScIlfa8jNW1zbrrUqX0.roa (raw, json)
Hash identifier: K7zNhQZn/fWWJKMgMs4BrQSgn+chYNyAnGPUAzcReYQ=
Subject key identifier: D1:91:5A:3C:5C:1D:49:C2:25:7D:AF:23:35:6D:73:6E:BA:D4:A9:7D
Certificate issuer: /CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Certificate serial: 018CC500102CD6CD5F7932CA0CFCA30A618D
Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/0ZFaPFwdScIlfa8jNW1zbrrUqX0.roa
Signing time: Mon 01 Jan 2024 12:29:24 +0000
ROA not before: Mon 01 Jan 2024 12:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12637
IP address blocks: 77.83.64.0/22 maxlen: 24
80.241.140.0/22 maxlen: 24
2a05:be80::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:10:2c:d6:cd:5f:79:32:ca:0c:fc:a3:0a:61:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Validity
Not Before: Jan 1 12:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1915a3c5c1d49c2257daf23356d736ebad4a97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3f:75:99:41:6e:4b:11:91:eb:c1:44:f4:5d:
2e:ae:45:8e:5a:5e:16:7a:c4:82:8d:ee:4a:5c:db:
a9:75:e4:81:6c:32:1f:f3:4c:9f:d4:63:a0:51:bc:
20:f2:86:12:ca:b5:8b:3a:20:b9:a0:6d:27:6d:71:
c7:91:c1:b4:16:38:69:09:88:6c:58:b5:5d:dc:74:
fd:1d:ec:58:2e:34:36:40:9f:6c:e7:59:dd:11:8b:
34:17:4b:02:0e:04:2c:e2:a5:5c:d0:2e:17:89:e1:
3e:bf:5c:fc:d0:9b:26:57:f0:15:4b:02:eb:90:31:
c5:c4:74:04:14:e0:ec:8f:3d:2d:c6:ea:2d:2a:d6:
1a:1e:c6:7a:02:de:09:81:8a:14:5a:e3:a3:23:84:
0b:9b:01:64:1d:8e:39:be:25:31:af:70:6b:16:58:
58:70:cc:95:0d:a1:f9:87:cd:8b:f5:0e:be:73:5a:
7e:40:72:88:06:31:06:08:d3:b4:0a:f1:ca:8a:e1:
22:eb:14:0e:fb:bf:17:c6:5c:91:c3:fb:aa:3e:b9:
cb:ed:44:e5:7a:cd:d5:ef:78:6e:ee:2b:ba:83:da:
c2:06:64:50:07:b2:2d:ea:dc:c4:dc:76:2b:c9:8d:
8e:67:14:b6:e7:a9:8a:a6:af:0e:0b:a2:43:3f:ac:
7b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:91:5A:3C:5C:1D:49:C2:25:7D:AF:23:35:6D:73:6E:BA:D4:A9:7D
X509v3 Authority Key Identifier:
keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/0ZFaPFwdScIlfa8jNW1zbrrUqX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.64.0/22
80.241.140.0/22
IPv6:
2a05:be80::/29
Signature Algorithm: sha256WithRSAEncryption
08:aa:74:68:ad:b6:18:46:a1:ee:12:8a:a6:bd:e5:27:de:5c:
76:cf:1d:c2:e0:e7:38:5b:e6:04:db:ab:ed:ae:03:84:c1:c0:
4b:d1:d3:af:cb:f4:68:94:5f:29:f1:98:b1:fc:f5:ce:5c:b8:
a9:4e:14:1e:43:ad:0b:c5:b0:ec:fc:90:8c:8f:88:0d:b8:58:
de:29:37:27:1f:4d:66:b0:da:66:39:a4:2b:a7:bb:d1:1b:43:
86:75:06:e4:91:18:f8:ab:cf:0d:60:53:67:70:26:2e:1a:64:
85:4b:f6:3e:37:a2:cd:dd:f2:93:8c:ab:7a:1b:7a:91:2c:9b:
ac:38:2a:6f:8c:bc:06:f5:9e:3c:36:b2:94:bd:d8:d2:2b:b7:
26:31:b1:2b:36:ab:21:98:92:4c:9d:95:9f:55:72:54:98:40:
1a:2e:12:96:17:94:a6:50:c3:82:6f:9c:a1:81:c8:8b:a5:8d:
d0:59:82:4c:96:f6:6c:04:e1:55:da:21:d2:b8:18:69:a9:fb:
ee:93:e6:38:66:74:50:55:2b:44:36:d6:8c:89:81:bc:21:d0:
35:ad:e1:e0:11:88:30:30:7a:b4:13:41:e5:8a:17:a9:86:fc:
9d:51:40:be:5d:eb:44:89:69:56:b9:c8:0a:87:cc:51:8f:06:
02:b8:49:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:42 2025 by rpki-client