Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/zjyWKJ9S42itQmbU4r1bBpNZoXc.roa
File: zjyWKJ9S42itQmbU4r1bBpNZoXc.roa (raw, json)
Hash identifier: AiN+DXZGkABrk2jU1uuNLT26qaI0dHHagYzjvF2cYZk=
Subject key identifier: CE:3C:96:28:9F:52:E3:68:AD:42:66:D4:E2:BD:5B:06:93:59:A1:77
Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial: 01939CDB1077965C0AF16CE6F18E1B035AD8
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/zjyWKJ9S42itQmbU4r1bBpNZoXc.roa
Signing time: Fri 06 Dec 2024 16:43:42 +0000
ROA not before: Fri 06 Dec 2024 16:43:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203059
IP address blocks: 45.91.120.0/24 maxlen: 24
45.95.211.0/24 maxlen: 24
91.218.77.0/24 maxlen: 24
134.255.242.0/24 maxlen: 24
178.16.230.0/23 maxlen: 23
185.53.33.0/24 maxlen: 24
185.231.228.0/22 maxlen: 24
185.234.101.0/24 maxlen: 24
185.253.62.0/23 maxlen: 24
194.156.132.0/23 maxlen: 24
194.156.150.0/23 maxlen: 24
2a13:5080::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 06 Dec 2024 19:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9c:db:10:77:96:5c:0a:f1:6c:e6:f1:8e:1b:03:5a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Validity
Not Before: Dec 6 16:43:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce3c96289f52e368ad4266d4e2bd5b069359a177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:fe:97:3f:b4:af:a7:e0:cb:0f:b3:a6:4f:
86:f5:5e:ad:82:e9:71:6d:d7:c7:bf:43:e6:ba:7f:
53:5a:4d:7b:86:70:7f:da:e6:e3:55:59:df:f3:2d:
b7:19:01:38:b8:9b:d4:aa:c8:b4:ae:08:57:58:fb:
b4:26:8f:c7:30:dd:a4:b8:49:bb:f9:d4:8e:80:12:
53:72:b3:8f:ce:55:7a:7e:86:93:5d:95:1f:b2:39:
89:a8:dd:f4:72:33:6b:a3:3a:33:27:ee:96:a9:fe:
d8:3b:32:3f:a3:74:a3:68:eb:41:70:af:27:d7:ab:
06:6e:79:24:5f:65:5b:b8:b6:02:67:ef:82:7e:21:
31:87:80:24:65:06:d4:c4:a4:68:48:95:85:21:e0:
bb:56:23:67:70:26:fe:a5:a0:8b:9d:a4:1e:0d:f0:
fd:b6:6f:b1:ce:84:f8:c7:48:fb:0f:92:2e:83:2b:
9c:5d:98:16:6c:92:bc:55:11:53:bc:3f:35:94:5e:
a5:fd:d8:8e:d3:96:e4:e1:d1:f1:c8:a2:3f:51:11:
de:5d:1d:f4:39:92:27:f1:33:84:b1:24:3f:a6:65:
8b:77:b7:80:ef:35:ef:2a:a3:5e:ec:0c:e0:d2:18:
1e:dd:be:db:3e:9a:ac:b3:a9:d6:cc:39:e9:cc:f6:
41:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3C:96:28:9F:52:E3:68:AD:42:66:D4:E2:BD:5B:06:93:59:A1:77
X509v3 Authority Key Identifier:
keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/zjyWKJ9S42itQmbU4r1bBpNZoXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.120.0/24
45.95.211.0/24
91.218.77.0/24
134.255.242.0/24
178.16.230.0/23
185.53.33.0/24
185.231.228.0/22
185.234.101.0/24
185.253.62.0/23
194.156.132.0/23
194.156.150.0/23
IPv6:
2a13:5080::/29
Signature Algorithm: sha256WithRSAEncryption
2d:e6:9f:d5:30:c5:00:fa:47:9b:a4:87:c3:e3:d3:df:df:7e:
86:79:31:61:5d:c5:c3:32:5f:f7:78:0f:d5:a5:4b:53:91:50:
b8:d6:26:5b:2b:fd:98:65:f8:a2:ed:7c:50:f5:49:89:aa:8a:
67:e1:3d:8e:04:59:e9:dd:70:d6:c3:b5:42:69:fe:5c:8c:33:
ab:d8:d8:c7:87:8a:f3:fa:77:b9:04:e3:d5:7a:27:fd:49:b1:
3c:5a:43:ae:be:04:dc:2f:a2:9d:01:cb:52:22:03:f5:5c:a3:
5c:3e:be:b3:3e:19:ce:18:30:f0:36:12:4d:90:68:d1:92:27:
87:76:9c:36:28:42:72:9d:a0:44:03:64:bd:3b:9b:30:4c:81:
8a:3f:5f:75:a1:22:d2:23:8c:11:b8:7c:73:ab:07:6e:b8:a4:
2b:70:c9:e3:fe:a7:77:a9:35:02:a9:09:d6:59:50:85:7f:80:
62:d6:13:24:b4:ed:4b:8d:fe:fa:53:31:4f:ad:83:92:59:10:
31:a0:65:bc:33:99:86:9f:4b:43:f9:be:df:63:7e:09:66:32:
42:fb:89:fa:e2:57:e7:9c:6b:a5:dc:cd:20:0e:7c:8e:54:c1:
68:e7:8f:2c:0d:b3:d4:8d:67:e9:56:a2:44:22:c7:0a:cd:3c:
eb:f6:bf:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:03:33 2025 by rpki-client