Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/caN-BZZRTEiUn5E68ovmbD2rr8s.roa
File: caN-BZZRTEiUn5E68ovmbD2rr8s.roa (raw, json)
Hash identifier: Ji9i+JYJ4YlHJ3O0WUYxr+PKJuSoo3SPh7AaHZH3tuw=
Subject key identifier: 71:A3:7E:05:96:51:4C:48:94:9F:91:3A:F2:8B:E6:6C:3D:AB:AF:CB
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01939B3CC214563EE460E82C3DA670E0BDAA
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/caN-BZZRTEiUn5E68ovmbD2rr8s.roa
Signing time: Fri 06 Dec 2024 09:11:10 +0000
ROA not before: Fri 06 Dec 2024 09:11:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397423
IP address blocks: 77.93.143.0/24 maxlen: 24
89.213.173.0/24 maxlen: 24
109.176.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Dec 2024 09:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:3c:c2:14:56:3e:e4:60:e8:2c:3d:a6:70:e0:bd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 6 09:11:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71a37e0596514c48949f913af28be66c3dabafcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e4:bb:2c:fd:4a:24:80:1c:7a:94:37:60:6c:
36:d5:1e:c1:f3:f1:ea:08:84:14:60:61:0d:57:fe:
04:9f:12:ed:bc:e7:6a:b1:e6:d0:bb:11:d5:b4:39:
2b:bc:ca:73:92:6a:5f:67:56:36:3e:96:44:85:c2:
49:15:65:ac:a9:76:91:ca:39:66:ff:6d:e6:58:a2:
68:65:d5:51:c2:0b:c8:2f:81:81:a3:87:aa:38:ae:
7a:8e:8e:61:7e:e0:65:b8:cc:68:44:f6:c0:f3:df:
de:f4:59:e6:11:24:ec:ea:5b:ee:0d:82:a1:fa:fd:
ef:66:d5:ca:c0:27:2a:95:2f:fc:cd:7f:8e:ec:7c:
8d:f7:7b:d1:ec:0a:cf:fe:92:73:0c:f2:ad:fb:ea:
f0:ad:74:11:45:ea:b3:39:a4:c2:51:dd:87:4c:4c:
3e:a1:2e:b1:c2:4d:e7:0b:6e:fa:e5:d3:6f:16:ef:
14:9a:82:87:42:0b:37:92:40:b9:76:d7:ab:ec:3b:
dd:8f:79:f6:60:56:a5:8f:af:18:a1:9f:99:70:0d:
cc:26:5a:42:cc:29:37:96:88:e8:20:0a:61:fd:9d:
81:ae:c8:bb:6a:4a:d8:c2:fc:91:87:66:c8:9f:1b:
d6:65:a5:0e:3e:80:bb:19:cb:e8:46:68:86:78:80:
9f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A3:7E:05:96:51:4C:48:94:9F:91:3A:F2:8B:E6:6C:3D:AB:AF:CB
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/caN-BZZRTEiUn5E68ovmbD2rr8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.143.0/24
89.213.173.0/24
109.176.18.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:5d:0e:4f:df:45:33:09:6f:51:d6:bb:17:da:6a:8b:e2:1d:
ca:f3:b7:d8:14:e4:7c:ac:dc:07:36:73:a0:64:66:23:18:c6:
b8:0c:01:d1:70:17:2d:d7:1c:35:e3:48:ff:39:d9:ca:c7:77:
45:b6:42:d1:4d:4b:17:00:ba:07:7c:2a:51:d1:b6:ed:9e:88:
5c:46:c4:44:de:ed:cc:ae:f2:ae:90:b1:ed:17:4d:e8:36:97:
2d:53:1a:7c:9e:72:51:5b:16:5e:fb:4e:c2:bd:1d:3c:86:47:
85:e5:69:27:fa:9b:b9:ea:1f:e4:0a:7a:16:c8:e8:a0:cf:9d:
3c:a7:7a:96:55:45:b2:7b:e9:24:c4:ee:d3:70:df:e6:94:8e:
e5:71:c3:2a:d9:21:42:76:3f:c8:02:9e:47:44:0e:8b:4d:46:
5f:a9:4c:f8:1f:44:1c:ba:ba:30:ee:ae:67:14:2b:4d:47:cb:
e1:5d:a8:c8:44:c9:18:ab:c4:84:12:5b:cd:46:67:cb:3e:52:
0f:75:75:21:77:8b:ff:79:72:cd:f2:78:1f:0c:ad:1d:29:90:
33:dd:8f:37:50:a7:94:59:cf:df:96:61:6b:63:92:80:83:0b:
c5:fa:b2:96:4b:bb:56:e3:cd:80:27:51:89:93:9b:66:d8:8a:
e1:0a:c0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:04:31 2025 by rpki-client