Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ZV89-3jnx66qsAnwlWn2JaaGbGk.roa
File: ZV89-3jnx66qsAnwlWn2JaaGbGk.roa (raw, json)
Hash identifier: KVqO1U0WM1eNIDiNaPgvReOuXHxtiSqu9QDRdY4iPMY=
Subject key identifier: 65:5F:3D:FB:78:E7:C7:AE:AA:B0:09:F0:95:69:F6:25:A6:86:6C:69
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018DB29196463EAA69A700D3D4EDA676A7FE
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ZV89-3jnx66qsAnwlWn2JaaGbGk.roa
Signing time: Fri 16 Feb 2024 15:38:21 +0000
ROA not before: Fri 16 Feb 2024 15:38:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34754
IP address blocks: 79.100.144.0/20 maxlen: 24
87.254.160.0/19 maxlen: 24
87.254.160.0/23 maxlen: 24
87.254.162.0/23 maxlen: 24
87.254.162.0/24 maxlen: 24
87.254.163.0/24 maxlen: 24
87.254.164.0/23 maxlen: 24
87.254.164.0/24 maxlen: 24
87.254.165.0/24 maxlen: 24
87.254.166.0/23 maxlen: 24
87.254.168.0/24 maxlen: 24
87.254.169.0/24 maxlen: 24
87.254.170.0/23 maxlen: 24
88.87.0.0/19 maxlen: 24
88.87.0.0/24 maxlen: 24
88.87.1.0/24 maxlen: 24
88.87.2.0/24 maxlen: 24
88.87.3.0/24 maxlen: 24
88.87.4.0/24 maxlen: 24
88.87.5.0/24 maxlen: 24
88.87.6.0/23 maxlen: 24
88.87.8.0/23 maxlen: 24
88.87.8.0/24 maxlen: 24
88.87.10.0/23 maxlen: 24
88.87.10.0/24 maxlen: 24
88.87.12.0/23 maxlen: 24
88.87.14.0/24 maxlen: 24
88.87.15.0/24 maxlen: 24
88.87.16.0/23 maxlen: 24
88.87.18.0/23 maxlen: 24
88.87.20.0/23 maxlen: 24
88.87.22.0/23 maxlen: 24
88.87.22.0/24 maxlen: 24
88.87.23.0/24 maxlen: 24
88.87.24.0/22 maxlen: 24
88.87.28.0/23 maxlen: 24
88.87.30.0/24 maxlen: 24
88.87.31.0/24 maxlen: 24
109.199.128.0/19 maxlen: 24
193.228.172.0/23 maxlen: 24
193.228.182.0/23 maxlen: 24
212.50.64.0/19 maxlen: 24
212.50.64.0/22 maxlen: 24
212.50.68.0/22 maxlen: 24
212.50.70.0/24 maxlen: 24
212.50.72.0/22 maxlen: 24
212.50.76.0/22 maxlen: 24
212.50.76.0/24 maxlen: 24
212.50.77.0/24 maxlen: 24
212.50.78.0/24 maxlen: 24
212.50.79.0/24 maxlen: 24
212.50.80.0/23 maxlen: 24
212.50.82.0/23 maxlen: 24
212.50.84.0/23 maxlen: 24
212.50.86.0/23 maxlen: 24
212.50.88.0/23 maxlen: 24
212.50.90.0/23 maxlen: 24
212.50.91.0/24 maxlen: 24
212.50.92.0/24 maxlen: 24
212.50.93.0/24 maxlen: 24
212.50.94.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 15:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b2:91:96:46:3e:aa:69:a7:00:d3:d4:ed:a6:76:a7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Feb 16 15:38:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=655f3dfb78e7c7aeaab009f09569f625a6866c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ac:6e:22:5c:a5:7a:65:bc:f8:33:b9:75:3a:
b7:ab:3e:92:63:72:63:42:ea:9a:87:65:1c:df:fd:
95:29:f2:fa:bc:d6:dc:48:d1:a9:e6:19:6a:c1:d8:
8c:b9:9b:3e:9e:18:72:be:d2:a1:c4:56:c7:f6:1a:
b5:b2:f9:67:5e:c4:ab:47:54:13:1a:2c:1b:30:23:
0e:2b:2d:85:74:2d:67:32:22:f7:f5:5d:93:44:80:
a1:8c:48:a6:bd:70:5c:6f:a1:d1:82:b7:e4:52:ff:
e6:4b:7f:1c:4e:8a:82:15:2a:4b:46:a7:e1:88:e6:
34:6c:13:ff:f8:70:ca:e3:d6:02:0b:b5:6f:7f:89:
c4:28:af:9b:62:b1:7d:d1:a4:8e:d8:87:9e:83:fe:
fd:a7:da:b5:98:47:78:20:6b:9d:9d:66:41:ce:3d:
76:13:cd:25:7e:b3:e0:d7:f5:38:c4:37:d5:40:28:
d3:c2:f9:21:b6:9e:2c:4d:90:26:2b:36:ef:79:e4:
ee:07:b1:85:7d:de:bc:fa:fd:43:65:74:a7:bc:fd:
55:4c:84:70:13:79:a8:2f:f8:e3:06:72:8f:96:1a:
e0:c2:df:86:6b:e2:cd:7c:41:43:13:2c:82:a9:c3:
f0:98:8a:8f:f1:6d:43:e3:8b:bd:37:e6:bd:03:3c:
d6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5F:3D:FB:78:E7:C7:AE:AA:B0:09:F0:95:69:F6:25:A6:86:6C:69
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ZV89-3jnx66qsAnwlWn2JaaGbGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.100.144.0/20
87.254.160.0/19
88.87.0.0/19
109.199.128.0/19
193.228.172.0/23
193.228.182.0/23
212.50.64.0/19
Signature Algorithm: sha256WithRSAEncryption
23:c8:1c:20:cc:4f:4b:96:1d:d1:d0:1d:3b:b2:6e:c4:1c:a0:
00:6a:5a:84:72:50:ed:8a:8a:37:e8:28:1f:df:b7:35:f3:1d:
02:c8:b8:11:3f:f3:91:f8:8f:37:c4:72:4c:3b:40:48:1a:8f:
31:8b:4c:78:9d:59:c7:d7:0d:b3:b3:56:41:30:56:25:79:54:
9c:84:7d:fb:0e:6c:a4:7d:36:da:3c:99:a7:f3:0c:11:fe:6f:
da:7f:91:ce:97:b0:f5:5f:5d:f1:8d:7f:a2:99:06:6b:fa:9b:
b6:4c:d6:ac:da:2e:f5:66:40:04:ef:b4:3b:9e:4f:6a:0a:33:
62:98:84:38:14:a9:f1:42:84:53:fd:e6:4f:97:56:d7:84:6d:
b7:e6:81:17:d3:de:12:01:63:ee:9e:38:d4:28:65:a7:8e:15:
c7:8e:1d:21:04:79:ba:96:ca:6c:f7:93:0a:ca:d5:e4:56:7a:
56:bb:2d:5d:84:b6:bc:b1:8d:d6:3c:c8:31:cc:51:e2:c5:80:
b7:ba:7b:71:ba:dd:a6:e6:09:05:3a:bb:8b:d9:29:15:b9:37:
bc:3e:b1:c9:80:15:0f:a6:c0:28:74:b4:77:3e:d0:b0:e3:2c:
b8:0d:5a:89:91:7a:80:e0:f0:ff:7e:0d:20:b0:84:34:11:f1:
85:b8:62:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:56:39 2025 by rpki-client