Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/PZ7REABtnW6ruYw4OozFILmaLTw.roa
File: PZ7REABtnW6ruYw4OozFILmaLTw.roa (raw, json)
Hash identifier: DuRZoZjIp0SGdrLeuj6l5NETAj25DdroD/oFKuic8Bs=
Subject key identifier: 3D:9E:D1:10:00:6D:9D:6E:AB:B9:8C:38:3A:8C:C5:20:B9:9A:2D:3C
Certificate issuer: /CN=597218c925e76e1e9809875f7ed1afa97ef6f79d
Certificate serial: 0197F095A662B540A673B3080A8B4E2BE58A
Authority key identifier: 59:72:18:C9:25:E7:6E:1E:98:09:87:5F:7E:D1:AF:A9:7E:F6:F7:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXIYySXnbh6YCYdfftGvqX72950.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/PZ7REABtnW6ruYw4OozFILmaLTw.roa
Signing time: Wed 09 Jul 2025 19:07:08 +0000
ROA not before: Wed 09 Jul 2025 19:07:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213677
IP address blocks: 185.57.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Jul 2025 08:38:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f0:95:a6:62:b5:40:a6:73:b3:08:0a:8b:4e:2b:e5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597218c925e76e1e9809875f7ed1afa97ef6f79d
Validity
Not Before: Jul 9 19:07:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d9ed110006d9d6eabb98c383a8cc520b99a2d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0e:2c:a1:8d:6b:b7:ac:67:0b:98:d0:d6:bd:
aa:de:ca:15:d1:ac:fc:e6:4b:d7:e4:29:12:ad:f7:
b8:96:f5:95:87:dd:b8:3d:72:e6:94:ba:9f:39:c1:
ca:2a:0c:16:76:77:47:78:e9:db:59:2b:bc:10:25:
41:1c:8f:48:50:a8:8d:5a:a5:4c:44:40:cd:65:0e:
e2:39:19:d9:1f:05:3f:ff:d3:28:ea:8b:46:d5:18:
c5:4c:8a:d8:b4:2a:94:a8:fe:81:89:7d:78:fc:82:
f8:d4:a3:42:2e:5e:1c:9d:69:af:28:7e:64:a4:ca:
84:bb:99:7c:d3:05:f3:a3:08:05:16:c9:e1:3f:ef:
23:8b:9d:85:f9:1b:0b:83:d9:92:5f:e2:26:6b:22:
86:31:d6:63:b6:ca:6d:68:b6:f8:b1:6e:c9:3b:e8:
44:0c:ab:ff:93:68:0c:bc:f5:22:0f:60:58:05:b5:
cc:7e:13:b1:cd:3b:39:0e:4b:0e:b6:a0:e7:03:a3:
90:9d:8c:16:95:6e:39:2f:77:e1:a0:89:a1:63:35:
9a:58:c8:00:7c:f0:ff:fe:39:39:ed:77:00:1b:76:
32:5f:f6:94:b5:b0:9a:ac:6c:e8:6e:65:32:b7:93:
e5:44:3e:45:7a:8e:77:68:02:c2:69:02:df:56:01:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9E:D1:10:00:6D:9D:6E:AB:B9:8C:38:3A:8C:C5:20:B9:9A:2D:3C
X509v3 Authority Key Identifier:
keyid:59:72:18:C9:25:E7:6E:1E:98:09:87:5F:7E:D1:AF:A9:7E:F6:F7:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXIYySXnbh6YCYdfftGvqX72950.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/PZ7REABtnW6ruYw4OozFILmaLTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/568728-4c56-4a8f-afb3-c44f9d7ffdf6/1/WXIYySXnbh6YCYdfftGvqX72950.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.20.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:ae:bd:1a:fc:67:11:c9:df:8e:ad:3e:6b:3b:18:db:14:22:
a6:b2:18:bf:fe:45:27:0e:e8:ca:90:e7:e8:7a:c2:95:1a:7f:
1f:30:97:bd:b6:dd:94:79:e1:b6:71:d7:2d:38:22:fa:d9:72:
44:79:26:2f:d5:30:ca:ed:c7:c6:7f:59:6a:3f:63:57:d3:cb:
d1:74:dd:d9:59:50:08:41:31:d1:bc:cd:3b:6f:a0:f8:3c:64:
ea:0a:17:79:11:9e:32:2e:7f:69:63:5a:86:9b:e5:72:39:2b:
1c:e6:b4:c6:24:19:16:4a:53:e6:a8:24:84:4d:8c:4c:33:95:
1c:e7:59:47:c5:a6:bb:07:02:cd:f3:b5:5d:50:be:cb:12:a9:
d9:da:4b:50:74:80:61:81:9c:df:2d:1b:06:d6:5c:35:15:34:
e3:8a:95:b6:1e:f9:55:74:9d:e8:02:cf:19:c1:84:2f:0d:e0:
0c:97:dc:37:12:5f:8d:61:f5:3e:03:30:65:c4:81:aa:24:f3:
26:85:1a:2e:87:48:be:b8:cf:d5:db:f8:e1:e0:78:20:76:17:
b5:f2:e8:62:a5:1b:13:6f:7f:3a:28:06:63:fe:3f:8f:ac:07:
8d:ec:de:2a:01:31:d8:ec:30:4d:6f:bb:3d:8b:2e:6a:87:43:
81:4b:32:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:13:52 2025 by rpki-client