Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZnwBKJt8DyT2ItaMvGYr0QR4XoY.roa
File: ZnwBKJt8DyT2ItaMvGYr0QR4XoY.roa (raw, json)
Hash identifier: VtAZ80DmpnKmgUjKIBRBlaZ30Zch4lAdYLyFM1sGhBA=
Subject key identifier: 66:7C:01:28:9B:7C:0F:24:F6:22:D6:8C:BC:66:2B:D1:04:78:5E:86
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0193AA3FB8F07CAC72AD965CD010E57217E5
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZnwBKJt8DyT2ItaMvGYr0QR4XoY.roa
Signing time: Mon 09 Dec 2024 07:08:42 +0000
ROA not before: Mon 09 Dec 2024 07:08:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49912
IP address blocks: 84.32.36.0/23 maxlen: 23
84.32.80.0/23 maxlen: 23
88.216.26.0/23 maxlen: 23
88.216.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Dec 2024 08:16:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:3f:b8:f0:7c:ac:72:ad:96:5c:d0:10:e5:72:17:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 9 07:08:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=667c01289b7c0f24f622d68cbc662bd104785e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cf:35:c0:db:a6:dc:27:22:cd:8e:10:b2:74:
08:fd:b1:e8:e4:cf:1d:e8:cf:47:20:cf:92:42:d8:
86:88:f9:ea:70:d1:60:68:3c:da:7f:00:33:67:8d:
7c:a3:8f:b8:3a:89:a1:53:c9:81:7a:b3:e1:e8:98:
e7:54:9b:82:62:bc:5d:bd:41:cb:e8:be:00:bc:68:
d6:c0:8a:6e:16:e7:16:97:7a:5f:6e:9a:b5:4a:c8:
df:51:a1:85:19:20:a2:73:05:b3:23:17:cf:f9:2f:
ff:b2:4d:da:d3:c7:f3:90:7f:27:81:85:e9:03:b3:
49:48:a0:66:dd:c8:c3:45:5c:ea:62:54:cc:e4:e6:
c2:70:91:f1:d2:a7:a7:c0:86:d7:86:61:4f:e1:68:
f9:b2:09:da:f8:e9:6e:56:a9:3d:30:44:d3:59:1c:
e6:1a:2e:0f:5c:80:41:f9:c7:b6:dc:39:c7:2d:89:
e1:69:53:7b:09:38:4c:4f:a5:65:a3:e1:00:a0:7e:
d0:1e:87:9d:9b:fa:dd:d2:0a:9e:e2:7e:f6:22:d5:
df:c9:1b:6c:1d:76:5d:7f:b5:03:15:17:1b:4d:63:
b2:c0:18:5d:eb:5e:2c:15:9c:d0:dd:d0:41:e2:0c:
c5:cc:84:5d:14:5c:79:70:94:e4:d3:34:35:6b:33:
5e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7C:01:28:9B:7C:0F:24:F6:22:D6:8C:BC:66:2B:D1:04:78:5E:86
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZnwBKJt8DyT2ItaMvGYr0QR4XoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.36.0/23
84.32.80.0/23
88.216.26.0/23
88.216.105.0/24
Signature Algorithm: sha256WithRSAEncryption
41:6a:8a:07:be:c5:c9:5a:fa:61:64:ed:25:21:70:0e:86:43:
dd:e4:04:73:95:47:d9:7b:05:e0:c5:98:41:c6:c5:c4:6d:db:
58:0a:c5:be:52:e6:2f:1d:8a:5b:f5:c9:bc:07:d8:84:a0:2d:
f9:99:6f:f7:94:a1:e7:7e:25:4b:ef:d5:47:4f:16:c5:dc:97:
15:00:1f:e2:31:ed:42:7d:a0:5e:7a:20:df:21:ef:3b:d3:19:
69:e2:2a:d7:1d:af:c7:c0:59:89:61:4b:c8:a4:59:c6:44:35:
5d:98:19:a3:c6:71:af:51:79:a4:b3:3b:3a:bf:d7:c1:b8:70:
71:59:0a:84:bc:87:aa:d8:66:a6:0e:7e:4e:36:d5:95:df:0d:
02:dd:8e:c3:59:47:fe:97:00:99:9a:e2:08:bf:fb:c3:82:47:
d8:b5:5b:91:c8:25:b7:6e:59:db:e0:93:3a:b1:36:fb:37:5e:
87:af:8d:13:e2:05:d8:d5:6f:14:64:4a:5e:b0:d8:75:76:4b:
78:d7:59:9d:df:14:1b:84:4c:40:b8:0e:63:3c:c9:43:af:61:
ae:e0:13:6c:bd:de:59:46:13:6f:c7:7e:5d:8f:80:96:90:3b:
f0:dd:f3:52:08:1d:56:6a:3e:41:f0:c6:ca:ab:74:8d:ee:1f:
77:d6:fc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:42:11 2025 by rpki-client