Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/6ZvLtC2qvkfCOnVS30u6BGvxZXk.roa
File: 6ZvLtC2qvkfCOnVS30u6BGvxZXk.roa (raw, json)
Hash identifier: vS1aVN9a2hM9ZXsJkO+r//Cf5PYZUCyGIE28jaM3fNE=
Subject key identifier: E9:9B:CB:B4:2D:AA:BE:47:C2:3A:75:52:DF:4B:BA:04:6B:F1:65:79
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01936E4A67CAD73DB9276B4BE7EFC8544346
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/6ZvLtC2qvkfCOnVS30u6BGvxZXk.roa
Signing time: Wed 27 Nov 2024 15:43:10 +0000
ROA not before: Wed 27 Nov 2024 15:43:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 80.64.17.0/24 maxlen: 24
80.242.56.0/24 maxlen: 24
80.242.57.0/24 maxlen: 24
80.242.58.0/24 maxlen: 24
92.63.176.0/22 maxlen: 22
92.63.176.0/24 maxlen: 24
92.63.177.0/24 maxlen: 24
92.63.178.0/24 maxlen: 24
92.63.179.0/24 maxlen: 24
109.196.98.0/24 maxlen: 24
109.196.99.0/24 maxlen: 24
109.196.100.0/24 maxlen: 24
109.196.101.0/24 maxlen: 24
109.196.102.0/24 maxlen: 24
109.196.103.0/24 maxlen: 24
185.42.14.0/24 maxlen: 24
194.32.98.0/24 maxlen: 24
217.78.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6e:4a:67:ca:d7:3d:b9:27:6b:4b:e7:ef:c8:54:43:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Nov 27 15:43:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e99bcbb42daabe47c23a7552df4bba046bf16579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:1e:73:19:bd:50:20:db:2e:3d:35:de:0e:
b4:b5:62:59:a0:39:01:4e:5c:1d:58:37:68:42:c8:
5d:1c:88:b6:e9:59:de:43:31:96:3e:cc:ac:53:14:
17:a4:9e:c4:d7:6e:d4:92:88:72:e0:7e:75:28:ec:
40:96:e1:8e:f6:9e:5e:9a:64:15:da:08:cc:9f:80:
77:f1:d5:fd:f0:ac:86:81:07:34:9d:70:09:b0:97:
57:8d:6d:4d:05:ed:30:ec:e1:0e:17:8e:fb:fe:13:
27:bd:2e:64:39:59:45:ec:24:50:1b:29:08:a6:e1:
5c:bf:60:25:d9:10:97:80:d8:0a:38:0e:25:6c:78:
ed:c7:e5:64:c7:54:a8:3d:67:07:8e:77:19:f1:31:
a6:05:f8:11:48:a2:80:dd:de:ff:94:e6:71:5d:e7:
c5:a8:07:c9:b2:36:74:b2:ee:1e:c7:3a:8e:8a:ed:
f7:b5:68:20:c3:51:86:0b:57:41:43:23:f8:39:78:
5e:a7:10:c5:df:3a:86:d0:dc:17:20:7f:22:5e:d0:
98:33:1e:6a:1a:e9:4e:6a:5d:ae:20:48:88:95:7a:
6f:8c:cd:eb:cf:7c:2e:b4:f2:16:fa:c2:77:bf:b6:
8d:10:45:b8:31:97:39:9e:30:e9:02:26:f6:ae:bb:
fb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9B:CB:B4:2D:AA:BE:47:C2:3A:75:52:DF:4B:BA:04:6B:F1:65:79
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/6ZvLtC2qvkfCOnVS30u6BGvxZXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.17.0/24
80.242.56.0-80.242.58.255
92.63.176.0/22
109.196.98.0-109.196.103.255
185.42.14.0/24
194.32.98.0/24
217.78.234.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:78:e0:6a:8b:cd:52:62:2c:d8:b2:46:c4:12:3c:4f:48:b5:
19:df:5a:bf:4c:29:35:f8:f3:42:b3:38:72:3a:a4:35:ea:a2:
c9:b4:5c:a3:85:db:99:26:1f:4d:4b:e3:4a:a2:9b:01:69:99:
6a:af:5e:c1:df:6f:5d:09:f3:7f:eb:2b:7b:eb:22:04:93:a4:
bb:cc:16:5f:63:d2:4a:34:39:22:33:70:4d:dc:39:f6:91:1b:
a4:f3:12:ea:89:90:7e:9b:14:ab:be:82:ba:71:f8:68:6d:f4:
f8:91:1b:78:a0:48:e7:80:02:7a:ae:41:5d:cf:6d:59:a7:22:
5a:96:dd:72:a7:dc:37:61:67:4b:83:73:23:85:7d:dd:da:78:
43:e9:b7:76:46:d7:cf:51:05:27:9e:02:c0:3e:0c:60:e4:28:
d6:44:9d:e9:22:f7:07:26:8b:71:47:fb:48:df:ca:24:5a:c0:
e2:a2:e9:9c:f3:a4:bb:0b:81:b9:5f:48:e0:e0:b6:2b:00:d0:
6e:ab:d6:0b:2c:a7:e9:af:d5:e7:d8:f3:b9:78:91:8c:76:f0:
62:26:94:b3:89:74:b5:da:5e:f3:69:76:7c:d5:2a:87:35:81:
08:3c:09:77:ae:14:99:9f:b3:f0:ef:eb:65:72:27:b3:d8:e2:
61:52:24:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 10:18:04 2025 by rpki-client