Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/gRzea2meHWO3_C2R_6twKnEWa6c.roa
File: gRzea2meHWO3_C2R_6twKnEWa6c.roa (raw, json)
Hash identifier: yXr+R11rHrGP/w0m4GWyUh5KCi6M2Jh+EgnaqV2KyOc=
Subject key identifier: 81:1C:DE:6B:69:9E:1D:63:B7:FC:2D:91:FF:AB:70:2A:71:16:6B:A7
Certificate issuer: /CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Certificate serial: 019469CC1FC34A2DA1E2725FBD8CC095FF66
Authority key identifier: F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/gRzea2meHWO3_C2R_6twKnEWa6c.roa
Signing time: Wed 15 Jan 2025 11:49:32 +0000
ROA not before: Wed 15 Jan 2025 11:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216211
IP address blocks: 80.249.134.0/24 maxlen: 24
2a13:edc0:1::/48 maxlen: 48
2a13:edc0:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 21 Jan 2025 09:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:cc:1f:c3:4a:2d:a1:e2:72:5f:bd:8c:c0:95:ff:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Validity
Not Before: Jan 15 11:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=811cde6b699e1d63b7fc2d91ffab702a71166ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:65:ac:2c:4c:23:6a:be:cc:6b:e9:ec:0e:85:
c5:c3:ed:c5:5e:08:b8:4f:e3:37:0a:26:a4:e4:96:
7b:10:f4:b9:6b:53:99:f3:93:dd:75:73:a3:3a:b0:
a6:40:41:c9:17:15:5c:c9:2a:71:85:71:3f:89:56:
04:29:60:b4:f0:39:b4:ab:e9:4f:b4:df:9a:47:bc:
6f:11:78:67:95:b1:f7:90:1a:6b:c2:40:1f:4c:67:
28:1e:38:f9:5b:cc:4a:b6:3e:8d:2a:5f:df:9f:0d:
80:44:24:18:af:db:1c:7f:f5:37:33:46:d9:28:10:
28:8a:a4:a9:35:5c:78:ca:77:da:2f:cf:c4:bc:7a:
c0:6c:86:9a:3b:58:25:48:d0:46:80:e3:bf:b2:83:
ab:1c:fc:65:0f:f7:27:14:5f:0d:62:c9:4a:f5:b8:
65:e0:55:a0:55:c7:f7:70:d6:da:20:41:b7:e2:f5:
0b:13:29:c8:2e:87:dc:28:54:5a:ef:01:57:f5:c7:
d3:58:b1:60:c3:b1:e0:63:2e:6c:1b:9b:45:31:be:
10:0a:29:97:64:ea:d4:41:ff:ad:54:96:41:a6:77:
0b:90:81:bc:97:31:f6:b3:ce:a4:f9:cb:cc:4b:d5:
84:dd:4c:1c:6f:72:6c:8c:22:81:6f:e8:84:ae:d3:
f4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1C:DE:6B:69:9E:1D:63:B7:FC:2D:91:FF:AB:70:2A:71:16:6B:A7
X509v3 Authority Key Identifier:
keyid:F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/gRzea2meHWO3_C2R_6twKnEWa6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.134.0/24
IPv6:
2a13:edc0:1::-2a13:edc0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2c:c6:27:78:c8:fe:07:3f:fd:1d:f5:7a:51:f0:0d:a4:b0:b8:
d3:a9:fa:33:19:cd:38:cf:b9:d3:01:fd:6b:e9:f0:69:2a:8c:
29:bf:ab:5b:17:ad:05:99:50:b6:28:0d:a2:00:2f:ad:49:f0:
22:9a:62:2e:ee:65:79:bd:fe:ff:79:69:0f:ce:68:44:c4:4b:
e2:2c:be:42:9e:07:06:b1:2d:cc:a4:0b:3a:dd:1f:f5:a3:93:
b9:0f:37:48:fc:33:28:00:c4:d5:22:8a:06:14:07:87:67:7f:
3d:ef:c7:73:2d:c2:fb:fd:1e:35:f1:0e:7f:10:fb:b7:34:36:
6f:fa:12:16:62:d7:e8:ef:3c:7e:b3:39:4f:83:59:0d:75:5f:
ff:02:f2:4b:8b:2d:41:00:b9:fe:c3:4b:c9:2a:72:64:a3:08:
87:ed:d9:7d:e8:a1:c7:6a:fe:30:44:5d:bc:08:31:36:68:24:
75:ce:cc:53:a6:a1:f9:c4:30:84:c6:8c:75:ec:f4:99:fb:dc:
10:fb:e4:ed:07:be:60:0d:77:d7:1e:4b:b7:04:9e:05:49:0e:
87:1b:5e:2e:04:c7:9d:a2:93:74:b8:ff:35:57:54:1b:7f:a5:
a0:8a:e0:79:29:67:95:ca:4e:b2:7f:7e:ec:ca:7b:78:23:1a:
68:d6:81:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:47:55 2025 by rpki-client