Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/LZ2eC4xH8GWdoPNoB22w-oq48rY.roa
File: LZ2eC4xH8GWdoPNoB22w-oq48rY.roa (raw, json)
Hash identifier: X2FcMUVP6EPn0t53VOdecHQip0eAookWROC8MOq3mZI=
Subject key identifier: 2D:9D:9E:0B:8C:47:F0:65:9D:A0:F3:68:07:6D:B0:FA:8A:B8:F2:B6
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0194460410644BA1A974F98F9CFCB12694CB
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/LZ2eC4xH8GWdoPNoB22w-oq48rY.roa
Signing time: Wed 08 Jan 2025 13:04:18 +0000
ROA not before: Wed 08 Jan 2025 13:04:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25374
IP address blocks: 79.124.10.0/23 maxlen: 24
79.124.12.0/24 maxlen: 24
79.124.18.0/23 maxlen: 24
79.124.46.0/24 maxlen: 24
80.72.84.0/22 maxlen: 24
130.185.230.0/23 maxlen: 24
130.185.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 09:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:46:04:10:64:4b:a1:a9:74:f9:8f:9c:fc:b1:26:94:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 8 13:04:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d9d9e0b8c47f0659da0f368076db0fa8ab8f2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6b:c1:c0:03:fc:d5:78:ce:8c:23:a9:69:40:
95:fb:47:0f:3b:25:6e:46:0f:57:e6:92:26:98:3b:
f9:ae:df:a6:c0:92:06:ac:79:ac:fe:c7:b9:ed:d7:
15:07:5e:56:24:0d:9b:38:b7:cd:5b:91:d6:38:9f:
03:e6:67:e0:06:ed:4d:ac:d6:02:54:e1:a7:f5:53:
03:8c:50:1d:d7:2a:bb:6e:ea:c9:5a:00:92:80:70:
9d:c5:f0:38:cf:c8:c0:a4:42:65:30:9c:bc:a4:6c:
a4:49:d6:ce:d0:cb:aa:4a:81:ba:09:0c:ea:3b:c2:
47:e5:91:95:b4:c2:85:6c:21:c3:2f:b1:09:ca:c9:
75:e3:b8:f7:d7:ad:1d:54:7b:42:e4:25:85:c4:51:
2b:bf:be:86:89:66:91:d9:0d:ad:5b:44:4f:e3:6f:
60:52:8f:2b:fc:00:ee:d6:30:20:ac:39:7c:8f:aa:
d5:fd:90:a6:8c:b2:be:2f:14:c3:81:75:cb:91:a9:
f8:4a:da:04:60:95:66:98:76:1c:22:2e:8d:47:ed:
da:13:81:da:36:38:f1:06:36:52:86:02:d2:e2:e6:
f9:5d:ac:51:77:78:af:5b:ce:e6:d3:06:bd:89:a8:
6c:90:a9:2a:be:de:8c:a1:b3:08:76:2b:b5:e5:e3:
a9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9D:9E:0B:8C:47:F0:65:9D:A0:F3:68:07:6D:B0:FA:8A:B8:F2:B6
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/LZ2eC4xH8GWdoPNoB22w-oq48rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.124.10.0-79.124.12.255
79.124.18.0/23
79.124.46.0/24
80.72.84.0/22
130.185.230.0/23
130.185.233.0/24
Signature Algorithm: sha256WithRSAEncryption
19:0a:69:2b:a4:ad:cc:be:b5:c0:58:43:bb:17:45:ca:19:4a:
d1:fe:4a:d0:b3:92:7d:1a:0c:38:cf:f6:47:f5:b1:1a:7f:2e:
3c:c9:fd:0c:3e:3a:e9:08:8b:76:22:56:fb:4e:ec:b6:89:b3:
d4:57:34:ba:02:05:92:91:35:2d:fd:48:2c:b4:cb:e9:53:f9:
e6:9a:28:bc:87:a6:fc:ee:46:cc:89:f5:ac:46:54:aa:cf:8c:
03:30:37:cb:28:71:c3:88:d3:b9:1c:17:39:f1:8a:48:f0:bc:
f2:93:49:67:80:c1:11:d4:79:fb:c5:3c:4d:24:c7:49:ca:16:
ff:69:be:fc:13:fc:c4:5b:84:c9:8e:ff:92:21:4c:da:99:60:
c8:ff:f4:62:bd:db:33:70:58:98:14:2c:21:be:18:34:0c:52:
3e:83:83:69:6b:1d:fa:1c:ae:cd:45:ec:37:ad:64:1b:90:08:
81:27:2a:bc:93:35:a0:37:82:22:46:6e:6e:f3:e3:dd:7b:8e:
fa:f6:1f:fa:56:15:e7:dc:89:79:11:db:dd:2f:e8:fc:7e:02:
e0:be:4c:ca:ec:78:49:af:cc:32:29:87:d5:c8:d5:f5:b0:35:
a1:1f:27:f2:84:40:93:be:6a:d1:83:0a:63:8b:a9:1a:a4:cd:
8e:52:a4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:22:32 2025 by rpki-client