Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/65LZq3bXo-ftJGUDJzUQm7jF2JA.roa
File: 65LZq3bXo-ftJGUDJzUQm7jF2JA.roa (raw, json)
Hash identifier: xE6EPH/nAE1+ekY7BH5FtA2UsvcaT+wNN97VsByXPAc=
Subject key identifier: EB:92:D9:AB:76:D7:A3:E7:ED:24:65:03:27:35:10:9B:B8:C5:D8:90
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019035AAA689F7212DCA8C6DB9974D589167
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/65LZq3bXo-ftJGUDJzUQm7jF2JA.roa
Signing time: Thu 20 Jun 2024 12:41:34 +0000
ROA not before: Thu 20 Jun 2024 12:41:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12381
IP address blocks: 192.71.84.0/24 maxlen: 24
192.121.86.0/24 maxlen: 24
192.121.100.0/24 maxlen: 24
192.121.121.0/24 maxlen: 24
194.14.3.0/24 maxlen: 24
194.68.48.0/24 maxlen: 24
194.68.230.0/24 maxlen: 24
194.71.2.0/24 maxlen: 24
194.71.25.0/24 maxlen: 24
194.71.188.0/24 maxlen: 24
2a01:280:1::/48 maxlen: 48
2a01:280:4::/48 maxlen: 48
2a01:280:5::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 21 Jun 2024 08:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:35:aa:a6:89:f7:21:2d:ca:8c:6d:b9:97:4d:58:91:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jun 20 12:41:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb92d9ab76d7a3e7ed2465032735109bb8c5d890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:ba:2d:a5:ce:f1:10:1c:9a:13:83:89:d4:
e9:03:da:74:bb:a7:1a:52:de:e3:c9:f0:c1:f4:c7:
db:da:e6:78:a3:54:15:b6:a9:da:d9:07:d3:d4:48:
96:8e:c6:20:cd:17:c1:84:de:5a:c7:30:75:61:ed:
0a:06:b4:ab:9e:b6:14:9e:5f:1f:82:48:36:c8:49:
7d:bd:77:a7:3a:98:fe:2c:f7:24:44:80:cb:d7:89:
4a:54:42:2e:b2:92:53:4c:aa:73:15:df:31:19:eb:
b4:4d:44:96:3a:a7:cb:6c:92:4b:89:20:4f:52:de:
e2:01:67:9c:bc:83:41:4b:3d:42:25:78:16:41:40:
3b:77:ea:80:47:cb:70:ae:2a:32:76:a3:3d:c4:92:
34:58:99:0a:52:5f:67:a9:97:a6:2a:87:3e:69:74:
70:ad:d1:14:81:94:5c:e5:34:27:da:3e:2f:33:a8:
02:17:d3:cc:9f:5c:2d:cf:76:9f:86:66:d4:7e:87:
ee:73:94:37:ab:75:28:32:ad:1a:b3:76:7f:85:eb:
8f:d8:28:92:87:08:e4:0d:8c:7f:d4:a9:71:21:15:
b0:07:0e:c7:5e:5f:df:6a:c7:87:12:b6:ea:38:81:
dc:fc:50:2a:7e:a2:e3:9c:22:14:98:be:df:24:39:
ef:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:92:D9:AB:76:D7:A3:E7:ED:24:65:03:27:35:10:9B:B8:C5:D8:90
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/65LZq3bXo-ftJGUDJzUQm7jF2JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.84.0/24
192.121.86.0/24
192.121.100.0/24
192.121.121.0/24
194.14.3.0/24
194.68.48.0/24
194.68.230.0/24
194.71.2.0/24
194.71.25.0/24
194.71.188.0/24
IPv6:
2a01:280:1::/48
2a01:280:4::/47
Signature Algorithm: sha256WithRSAEncryption
b4:09:4a:6e:9d:cb:4d:a4:4b:12:cc:0d:5f:58:26:5d:4c:e9:
2e:10:81:f9:02:86:4a:e0:eb:f1:a3:22:78:1d:b8:6f:93:d1:
20:ee:fc:19:63:91:b7:c6:76:30:ee:8a:78:b6:4f:b0:2f:ae:
82:dc:2b:13:98:fe:76:ab:22:93:c5:26:94:09:5c:66:4f:ab:
f1:c5:84:61:39:c6:b8:e5:ba:95:7c:53:b1:9d:89:a3:4d:af:
fc:80:d4:33:ab:7b:89:61:e1:cf:04:9a:58:b0:c0:31:68:49:
cc:c0:fe:96:7d:f9:ca:a8:40:2c:8b:28:cd:0a:54:2f:fd:e4:
e4:c4:c6:5c:3f:e4:2f:99:13:45:4b:92:11:b4:f1:65:6c:7e:
cd:69:b3:1f:22:08:80:b5:29:c6:a0:96:f3:48:a3:8b:1a:28:
96:1c:6b:6f:f5:58:25:cc:0f:81:b8:2f:16:51:55:50:98:c5:
9e:44:3b:72:70:1f:71:65:d7:f5:18:07:12:e3:21:46:0a:fb:
d7:7a:c2:8c:2c:22:6a:bd:30:ce:65:2a:c3:7a:bc:25:99:3c:
20:0c:e9:0a:b3:8e:1c:05:df:15:be:4f:fd:7a:ed:1f:04:60:
93:4d:8d:84:71:d8:de:6b:cd:ba:3f:55:3a:68:0d:e7:d5:86:
36:c0:a2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:00 2025 by rpki-client