Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/ZAAQO5wn2QjB7YUUR0V41wzjDAk.roa
File: ZAAQO5wn2QjB7YUUR0V41wzjDAk.roa (raw, json)
Hash identifier: m4LxBnBV5ByttE/RHtUAgCWT0dbuW918QRLpHwLLRMc=
Subject key identifier: 64:00:10:3B:9C:27:D9:08:C1:ED:85:14:47:45:78:D7:0C:E3:0C:09
Certificate issuer: /CN=8a68191cab6ef06b322b0b1248785d484a4524f3
Certificate serial: 018CC64B7D81FB43D3226FCDAD57FE1F6865
Authority key identifier: 8A:68:19:1C:AB:6E:F0:6B:32:2B:0B:12:48:78:5D:48:4A:45:24:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imgZHKtu8GsyKwsSSHhdSEpFJPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/ZAAQO5wn2QjB7YUUR0V41wzjDAk.roa
Signing time: Mon 01 Jan 2024 18:31:25 +0000
ROA not before: Mon 01 Jan 2024 18:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211582
IP address blocks: 212.60.24.0/21 maxlen: 21
185.214.188.0/22 maxlen: 22
80.243.224.0/22 maxlen: 22
5.45.144.0/22 maxlen: 22
2a10:b040:1::/48 maxlen: 48
2a10:b040:4::/48 maxlen: 48
2a10:b040:2::/48 maxlen: 48
2a10:b040:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 Feb 2024 11:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:7d:81:fb:43:d3:22:6f:cd:ad:57:fe:1f:68:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a68191cab6ef06b322b0b1248785d484a4524f3
Validity
Not Before: Jan 1 18:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6400103b9c27d908c1ed8514474578d70ce30c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:d6:0f:6f:c7:83:83:70:1c:7c:b4:22:6b:
36:d8:1f:66:b1:ca:c4:a5:4a:50:54:c3:41:dd:57:
17:6a:ae:22:cc:20:4e:2d:30:df:8b:40:ab:16:df:
ef:e6:cd:3f:30:11:1a:e3:ca:36:47:37:c1:d8:d7:
dd:5d:77:8e:f9:df:77:8a:db:7b:33:59:73:36:a4:
0a:98:f8:64:c4:3a:21:3d:39:75:a3:ec:c6:43:0a:
e3:5a:b4:67:6e:c1:4e:e9:71:37:3c:26:4c:6a:0b:
4c:a2:cc:3f:ac:ca:f9:5e:79:6a:f6:2f:c6:c9:7b:
61:a5:00:30:3f:ce:dc:c8:23:10:02:84:3b:cd:e0:
7a:1c:e7:66:4c:bb:47:4f:a3:7c:32:ab:29:d6:a0:
2e:04:a6:61:96:e9:fd:ea:42:df:b6:de:92:a8:76:
3e:41:2c:10:1e:56:7f:0e:b1:d0:c8:e8:a3:74:90:
41:f8:2d:9c:7d:7b:a1:11:00:d8:54:3a:1c:32:0c:
cf:b1:1d:3e:61:44:3b:07:ba:d5:8f:6d:e6:1b:f4:
b5:e7:0b:49:76:4e:c8:03:56:38:59:d7:a2:f5:d2:
8e:eb:97:d8:c3:c8:4d:4b:32:b1:5e:b7:59:27:22:
db:29:9b:83:14:54:22:12:ac:19:d5:bc:b2:ac:ec:
c7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:00:10:3B:9C:27:D9:08:C1:ED:85:14:47:45:78:D7:0C:E3:0C:09
X509v3 Authority Key Identifier:
keyid:8A:68:19:1C:AB:6E:F0:6B:32:2B:0B:12:48:78:5D:48:4A:45:24:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imgZHKtu8GsyKwsSSHhdSEpFJPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/ZAAQO5wn2QjB7YUUR0V41wzjDAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/imgZHKtu8GsyKwsSSHhdSEpFJPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.144.0/22
80.243.224.0/22
185.214.188.0/22
212.60.24.0/21
IPv6:
2a10:b040:1::-2a10:b040:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
aa:99:ca:4c:65:d2:e0:e7:9c:23:83:e1:b1:56:fe:60:f2:90:
e9:90:5d:1c:07:ea:75:24:e3:c1:37:0f:23:53:17:16:74:22:
c4:7a:2a:1f:b9:ae:37:c6:45:e5:7c:05:e4:47:55:b4:e6:29:
88:ba:52:76:9e:90:e5:c7:de:3b:8d:53:62:12:ef:d3:8d:c9:
79:31:39:e6:70:ff:75:9e:ce:ec:66:09:40:85:53:8a:f3:17:
b5:02:31:84:c8:d9:c8:59:49:84:8a:1f:6d:9b:63:91:6c:34:
40:24:72:1d:85:fb:c6:0c:cd:c0:e0:8b:fa:21:ba:02:c9:b9:
3d:9d:44:34:50:19:f8:4f:4e:c3:1c:8f:7a:ea:95:2c:ca:d9:
00:b2:9e:8d:a5:ab:df:06:8c:70:1a:0f:ad:0c:be:cd:77:85:
44:73:e0:05:98:a9:e6:8c:64:76:e8:81:fa:41:c9:d6:ca:67:
d4:f9:1c:f8:de:44:a5:f8:b2:4b:9a:7b:ee:bb:ef:8e:51:33:
35:cd:ee:9d:7f:08:a1:15:ba:2b:32:92:55:34:03:c9:3b:ed:
b5:59:77:08:8b:91:ad:53:69:28:48:2d:84:a5:8a:47:64:00:
01:2f:6d:4d:66:9f:ce:9f:18:cf:6f:b6:9b:46:86:c0:db:9c:
5e:f4:23:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:42:18 2025 by rpki-client