Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/ZAtI8a952RCMaa841vFEDDg8_Z4.roa
File: ZAtI8a952RCMaa841vFEDDg8_Z4.roa (raw, json)
Hash identifier: fYVCAs9A30uDrkVf89Wyg4+poRuFX0gR9bPY63D0TvQ=
Subject key identifier: 64:0B:48:F1:AF:79:D9:10:8C:69:AF:38:D6:F1:44:0C:38:3C:FD:9E
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0197752DFDA68B75B6830F780F8D399C0740
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/ZAtI8a952RCMaa841vFEDDg8_Z4.roa
Signing time: Sun 15 Jun 2025 20:00:37 +0000
ROA not before: Sun 15 Jun 2025 20:00:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214922
IP address blocks: 89.44.240.0/24 maxlen: 24
89.44.241.0/24 maxlen: 24
188.212.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jun 2025 08:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:2d:fd:a6:8b:75:b6:83:0f:78:0f:8d:39:9c:07:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jun 15 20:00:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=640b48f1af79d9108c69af38d6f1440c383cfd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e7:d0:38:0b:20:be:14:be:95:a7:fb:70:6d:
a6:8b:0a:43:b5:52:c7:d9:f6:f1:0e:0c:76:62:7b:
10:88:05:5d:36:49:cb:7c:02:64:f8:b4:c4:98:80:
64:85:28:ee:e8:92:a0:bc:f1:cd:04:eb:c0:d0:ba:
db:f5:17:fa:1e:d5:b3:75:83:f2:7c:5f:a1:20:97:
14:15:29:8b:47:fd:ea:c0:3c:03:a6:50:9c:52:0f:
f6:bc:93:a1:18:86:c3:ac:3e:07:9f:0a:96:a2:56:
50:ba:99:7b:35:df:33:4f:95:fb:5c:65:e0:d2:ac:
84:98:98:0c:50:77:88:94:db:4a:ab:b1:6c:18:7d:
0e:b8:5a:93:36:34:b5:c7:ef:10:fa:f5:0b:6c:8c:
4a:d9:c9:f4:66:d2:63:93:40:69:03:08:32:65:ba:
20:d6:8b:db:10:01:70:5c:34:f0:4c:f1:d3:a8:c4:
d3:fd:d8:70:06:8d:5e:7e:bb:d1:94:10:df:f0:da:
0c:4c:6f:55:6c:57:a9:f9:0b:f7:bf:74:85:ef:20:
4d:fa:cf:47:a1:89:b0:c5:7c:21:d7:61:0a:40:6e:
31:fd:7b:52:4e:3a:81:de:ce:68:85:63:d0:dc:e5:
1b:05:66:ff:cd:72:57:e9:76:7d:84:31:69:42:5d:
fa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0B:48:F1:AF:79:D9:10:8C:69:AF:38:D6:F1:44:0C:38:3C:FD:9E
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/ZAtI8a952RCMaa841vFEDDg8_Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.240.0/23
188.212.98.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:c9:a3:6d:62:da:f7:c4:11:c9:01:66:91:c0:fa:a0:39:df:
e2:bd:12:cc:ba:e1:0e:bb:a4:52:35:40:e8:60:e7:0e:a2:7c:
a2:f8:69:a5:8b:4c:af:43:1a:ad:12:71:46:90:dc:2e:d2:94:
d9:dd:d1:5d:76:b7:bd:17:52:aa:42:01:f6:f1:69:9c:ef:c4:
d0:c6:78:97:0b:b5:e4:0a:a2:0e:36:e6:2e:f5:74:1c:c0:18:
1e:e4:75:9b:d7:19:5f:ad:26:17:3e:b2:35:26:0a:ca:c8:7a:
c9:f7:e0:c4:07:d8:ef:f3:bb:64:82:b0:d3:54:c1:84:17:5a:
ed:1a:6e:19:f7:96:74:bf:57:0f:44:e1:8d:59:15:57:2c:ce:
bd:83:c6:fa:c1:e8:20:47:95:fa:4f:b1:ad:0d:20:94:c5:56:
2b:3e:1c:63:c1:0a:85:09:c7:e2:30:a6:b8:2d:3d:29:47:5b:
62:56:fd:d0:ed:ca:4a:9a:6a:0c:63:97:85:af:a4:01:0e:a6:
f4:c1:45:a8:87:5b:03:d9:1e:ce:e6:aa:84:c0:20:c5:76:74:
ab:39:89:8b:76:65:09:c4:32:18:58:8a:84:da:e9:a2:ca:75:
45:aa:61:e6:2d:ec:da:69:99:61:06:73:a0:f9:c8:d4:d3:9b:
04:46:8f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:41 2025 by rpki-client