Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/Zjdv3TAq6_8SymXEFRp16THecXA.roa
File: Zjdv3TAq6_8SymXEFRp16THecXA.roa (raw, json)
Hash identifier: Mlk+3DLZhT2eaSGVi7oVLZ1bfbB6kJlgMQWUGjfxkg0=
Subject key identifier: 66:37:6F:DD:30:2A:EB:FF:12:CA:65:C4:15:1A:75:E9:31:DE:71:70
Certificate issuer: /CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Certificate serial: 0193206721C76876D3CE0C4B725B9C0078DE
Authority key identifier: 34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/Zjdv3TAq6_8SymXEFRp16THecXA.roa
Signing time: Tue 12 Nov 2024 12:44:09 +0000
ROA not before: Tue 12 Nov 2024 12:44:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51235
IP address blocks: 185.107.244.0/24 maxlen: 24
185.107.245.0/24 maxlen: 24
185.107.246.0/24 maxlen: 24
185.107.247.0/24 maxlen: 24
185.136.180.0/24 maxlen: 24
185.136.181.0/24 maxlen: 24
185.136.182.0/24 maxlen: 24
185.136.183.0/24 maxlen: 24
195.2.234.0/24 maxlen: 24
2a12:5440::/45 maxlen: 45
2a12:5440::/48 maxlen: 48
2a12:5440:1::/48 maxlen: 48
2a12:5440:2::/48 maxlen: 48
2a12:5440:8::/45 maxlen: 45
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:20:67:21:c7:68:76:d3:ce:0c:4b:72:5b:9c:00:78:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Validity
Not Before: Nov 12 12:44:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66376fdd302aebff12ca65c4151a75e931de7170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:6f:49:f7:ed:f6:48:3b:ab:61:de:5f:61:
47:c6:cb:ec:dd:7b:82:1e:c8:c8:3b:0a:db:5f:ff:
ef:57:12:72:9e:f1:15:e8:4f:2a:28:38:bf:5d:26:
39:db:36:8a:f3:f6:04:ba:5c:33:7d:ed:45:8b:9f:
c6:06:ee:f3:9a:ab:e4:2d:d7:bc:48:a8:9b:6f:5d:
61:07:09:27:57:dc:dd:2c:81:5b:86:c2:6f:60:3e:
8d:b2:18:8c:9c:d9:9a:8e:89:f3:ef:64:0a:19:6c:
15:df:1e:61:96:90:b2:83:99:36:90:af:6f:8f:b5:
91:7e:ee:04:80:ee:7e:26:10:bd:d1:8d:32:2f:c7:
27:bd:84:41:e7:f7:1c:f3:5b:b5:80:1b:8f:58:45:
38:ff:a0:a6:aa:29:02:88:dd:04:cf:f2:5b:5c:df:
5d:cb:37:7b:25:fd:6c:23:58:16:03:75:5e:fa:e2:
58:a5:f8:3b:0c:4a:ef:cd:9e:f4:f9:f3:8b:60:e6:
61:a3:02:0c:bf:f4:f3:51:7c:3e:5a:7f:30:b4:0f:
0a:b8:71:2b:5e:2e:fe:ec:a4:0f:ff:54:06:80:f0:
98:a5:3e:2f:72:bf:c5:de:25:5c:1e:79:96:4f:a6:
70:bd:f6:38:a6:d5:d5:d6:ed:6c:f8:48:81:9c:fb:
d0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:37:6F:DD:30:2A:EB:FF:12:CA:65:C4:15:1A:75:E9:31:DE:71:70
X509v3 Authority Key Identifier:
keyid:34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/Zjdv3TAq6_8SymXEFRp16THecXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.244.0/22
185.136.180.0/22
195.2.234.0/24
IPv6:
2a12:5440::/44
Signature Algorithm: sha256WithRSAEncryption
54:10:33:66:ce:4f:62:d9:f8:fe:77:3d:98:08:5e:18:44:b9:
65:ac:84:5d:8f:5b:50:17:1c:d6:d8:d0:7d:3b:e6:97:a7:23:
d2:14:4f:11:84:1d:4d:03:b9:88:99:01:47:a4:8d:ae:b9:46:
0f:4e:33:2c:0b:6f:35:8c:cb:3d:07:bf:ab:dd:42:72:8a:93:
8d:b7:29:93:e1:59:1e:06:1c:e8:a1:10:0b:02:45:14:de:6d:
ba:c4:bc:dc:af:f2:67:59:37:e6:79:bc:35:9b:76:e1:7b:1a:
41:69:de:bf:a3:dc:82:d0:3a:c1:4c:33:54:fe:db:df:77:cc:
4e:d4:65:32:87:23:d2:43:27:b8:df:b6:dd:7c:b7:a2:8b:e3:
6f:47:b0:4f:dc:65:79:6c:e8:18:19:e3:ca:fa:6d:39:fe:5c:
41:36:27:14:31:c7:14:43:f1:5d:73:1b:44:88:0e:23:9d:21:
ef:50:f2:8b:81:b9:7b:c0:38:85:87:63:eb:73:21:1e:75:de:
13:05:ca:12:57:ad:fa:ef:49:79:30:57:e7:cd:00:a8:62:4b:
23:20:46:a8:a5:0c:6e:78:43:c7:47:67:81:aa:7a:86:f9:34:
b0:93:f9:01:40:38:e0:90:99:77:f5:d8:4f:9f:5b:01:1b:ab:
39:90:2b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:35:35 2025 by rpki-client