Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/3ZmLk9QRDlTW2CO2f4jfCAJblfU.roa
File: 3ZmLk9QRDlTW2CO2f4jfCAJblfU.roa (raw, json)
Hash identifier: u/3r6F8IzOgFbmMAdLQUMLDFoQ04suWbitxhf29qLYY=
Subject key identifier: DD:99:8B:93:D4:11:0E:54:D6:D8:23:B6:7F:88:DF:08:02:5B:95:F5
Certificate issuer: /CN=69507f066f2bb0389dd88436074e1426114f2d92
Certificate serial: 019200F6388E5695AD3C1C8A7E6369689DB6
Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/3ZmLk9QRDlTW2CO2f4jfCAJblfU.roa
Signing time: Tue 17 Sep 2024 17:09:49 +0000
ROA not before: Tue 17 Sep 2024 17:09:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216139
IP address blocks: 2.56.90.0/24 maxlen: 24
46.30.40.0/24 maxlen: 24
46.30.41.0/24 maxlen: 24
46.30.42.0/24 maxlen: 24
46.30.43.0/24 maxlen: 24
46.30.44.0/24 maxlen: 24
46.30.45.0/24 maxlen: 24
46.30.46.0/24 maxlen: 24
46.30.47.0/24 maxlen: 24
95.142.32.0/24 maxlen: 24
95.142.41.0/24 maxlen: 24
109.234.32.0/24 maxlen: 24
178.208.64.0/24 maxlen: 24
178.208.65.0/24 maxlen: 24
178.208.66.0/24 maxlen: 24
178.208.67.0/24 maxlen: 24
178.208.72.0/24 maxlen: 24
178.208.73.0/24 maxlen: 24
178.208.74.0/24 maxlen: 24
178.208.75.0/24 maxlen: 24
178.208.76.0/24 maxlen: 24
178.208.77.0/24 maxlen: 24
178.208.78.0/24 maxlen: 24
178.208.79.0/24 maxlen: 24
178.208.80.0/24 maxlen: 24
178.208.81.0/24 maxlen: 24
178.208.82.0/24 maxlen: 24
178.208.83.0/24 maxlen: 24
178.208.84.0/24 maxlen: 24
178.208.85.0/24 maxlen: 24
178.208.86.0/24 maxlen: 24
178.208.88.0/24 maxlen: 24
178.208.89.0/24 maxlen: 24
178.208.90.0/24 maxlen: 24
178.208.91.0/24 maxlen: 24
178.208.93.0/24 maxlen: 24
185.105.108.0/24 maxlen: 24
2a09:c140:feed::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:00:f6:38:8e:56:95:ad:3c:1c:8a:7e:63:69:68:9d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92
Validity
Not Before: Sep 17 17:09:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd998b93d4110e54d6d823b67f88df08025b95f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ed:88:99:f5:39:c8:7e:2b:1a:77:e4:ca:dd:
a7:b6:7f:c8:15:38:5f:a0:7d:25:10:ce:bb:f4:13:
60:a3:23:1d:27:4d:30:e1:28:7c:e1:d6:ac:bd:5c:
67:72:33:c6:e0:47:d8:8f:c4:6b:39:fd:e9:fc:11:
ba:cb:a0:23:de:45:f5:db:71:01:4a:dc:9f:22:7a:
e2:9e:0a:0e:32:2e:75:19:9f:96:f8:ac:a8:c2:36:
e1:0e:8c:72:1b:ce:73:e7:66:da:49:cf:ce:8f:70:
8d:30:f8:bb:6e:79:eb:9a:4a:7c:f4:2d:68:ca:d8:
dc:d8:85:2c:09:af:ac:c2:8b:67:cd:11:e3:d4:f6:
8d:1c:60:a4:c8:be:f6:e8:f8:58:9d:72:21:25:11:
3b:1a:ba:03:9c:f2:1c:1a:82:46:c2:01:50:06:d6:
06:ed:07:3f:0d:4e:61:f2:37:c5:c1:4f:61:c5:f5:
d7:cd:43:7f:df:42:ab:38:1e:50:08:2b:5d:db:3a:
6c:97:c4:e0:21:d3:f9:65:ef:3b:19:f5:29:cd:6f:
1c:9a:3e:7f:58:0d:4e:c1:4d:b4:16:42:50:cd:91:
9e:9a:5c:29:67:9f:d6:08:11:4b:bb:10:dd:67:fb:
51:08:c9:11:b5:68:97:15:67:a6:27:f2:91:37:89:
f9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:99:8B:93:D4:11:0E:54:D6:D8:23:B6:7F:88:DF:08:02:5B:95:F5
X509v3 Authority Key Identifier:
keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/3ZmLk9QRDlTW2CO2f4jfCAJblfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.90.0/24
46.30.40.0/21
95.142.32.0/24
95.142.41.0/24
109.234.32.0/24
178.208.64.0/22
178.208.72.0-178.208.86.255
178.208.88.0/22
178.208.93.0/24
185.105.108.0/24
IPv6:
2a09:c140:feed::/48
Signature Algorithm: sha256WithRSAEncryption
1a:70:60:f6:49:48:67:71:38:0b:38:c3:7b:cc:a4:d8:c0:d5:
b3:2d:f5:e1:64:a4:91:7a:01:08:6c:24:1b:44:53:bd:d2:55:
10:d3:2f:54:cd:d8:f2:33:02:b9:33:b8:82:7e:e0:71:80:0c:
e2:a5:0d:f0:e8:5a:21:b7:94:07:e2:3d:ed:04:88:85:66:f7:
3a:e1:13:e0:0c:7c:65:4f:59:46:7c:26:18:18:79:d9:5e:f7:
e5:5b:f2:a8:c4:64:47:1f:67:54:d8:ff:32:ca:fd:f0:3e:3e:
d7:a8:75:6d:1a:3c:dc:e0:95:df:f3:28:f7:f7:a2:36:f3:ba:
54:d3:eb:56:ca:7e:bc:46:52:03:a8:b8:50:c9:f4:e5:ca:46:
f6:33:c9:f5:98:3f:12:f8:b4:57:a8:49:06:73:82:e9:c6:22:
95:0c:ff:7e:fc:e9:41:b4:c3:14:c5:e1:2f:1f:44:a0:94:b5:
f1:1a:5d:a6:c2:9e:b8:1e:e1:cc:6b:bc:85:92:8e:49:4e:ef:
cd:42:a7:8c:52:fa:15:76:5a:92:91:0f:39:9c:08:c0:e0:f0:
62:c9:4c:56:4e:6d:a7:27:34:8a:1d:fa:68:ce:e5:93:84:ff:
30:e4:04:d0:b4:3f:b1:6d:33:69:6a:d1:9f:38:86:97:d8:e9:
94:45:59:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:30 2025 by rpki-client