Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/ZuVFiebtHbb8d_L7jzRV95M-_II.roa
File: ZuVFiebtHbb8d_L7jzRV95M-_II.roa (raw, json)
Hash identifier: Ios7FxnLw/phJaAY3NhVlc8kRiXKc8rlFxn847aNzHQ=
Subject key identifier: 66:E5:45:89:E6:ED:1D:B6:FC:77:F2:FB:8F:34:55:F7:93:3E:FC:82
Certificate issuer: /CN=ee28d94d484033f77e6f9381a02da3e242167dae
Certificate serial: 0197CD1A4E35BB105E39A1301396EDB2442F
Authority key identifier: EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/ZuVFiebtHbb8d_L7jzRV95M-_II.roa
Signing time: Wed 02 Jul 2025 21:45:42 +0000
ROA not before: Wed 02 Jul 2025 21:45:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62263
IP address blocks: 45.156.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Jul 2025 21:16:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:1a:4e:35:bb:10:5e:39:a1:30:13:96:ed:b2:44:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee28d94d484033f77e6f9381a02da3e242167dae
Validity
Not Before: Jul 2 21:45:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66e54589e6ed1db6fc77f2fb8f3455f7933efc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:54:39:ed:8a:1c:fb:29:bf:ed:1b:12:77:fd:
f2:d8:de:4e:a8:bf:b2:16:e9:7a:6d:1a:19:51:ea:
80:d2:f5:31:d1:c5:11:eb:75:14:20:79:52:a9:57:
fa:61:90:f6:96:82:2e:47:bc:fd:f1:2a:3a:c0:b6:
24:9c:0e:cb:47:7c:dc:57:90:1e:3b:54:69:c9:14:
88:a5:51:bc:12:28:e9:7e:11:8a:39:3e:2e:b6:f2:
60:52:82:e0:fb:73:43:60:28:b2:c2:79:71:f6:56:
5f:b5:82:23:0e:fb:3e:09:24:bd:3a:18:f2:99:80:
22:06:59:92:73:42:c2:89:68:ae:27:7d:27:a6:70:
72:33:27:60:a6:01:87:76:b1:1a:c8:ca:b3:a9:a1:
28:89:1e:3d:44:d9:fa:9b:b4:bf:ae:d7:45:b5:d3:
10:30:25:cb:e0:a9:61:0b:18:f3:57:69:f3:7d:a6:
c0:2d:1e:31:f3:84:4b:c9:fa:07:1d:c2:3a:32:30:
cc:4f:6d:fa:4e:18:24:1b:dc:76:1b:1f:12:e4:5c:
f6:c1:ca:51:d4:2d:a4:90:af:ed:9d:f6:e9:84:b0:
c3:94:f1:91:9f:c7:75:e5:71:44:2f:f9:88:af:00:
28:ca:a9:68:6e:c6:03:3e:28:ac:92:21:65:5e:10:
ac:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E5:45:89:E6:ED:1D:B6:FC:77:F2:FB:8F:34:55:F7:93:3E:FC:82
X509v3 Authority Key Identifier:
keyid:EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/ZuVFiebtHbb8d_L7jzRV95M-_II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.117.0/24
Signature Algorithm: sha256WithRSAEncryption
49:01:a3:4a:7b:df:9f:39:7b:a7:45:d3:e9:3d:79:7f:5f:30:
80:7b:92:ce:25:8e:c9:2f:be:2e:c5:56:bc:01:78:17:54:23:
26:1d:99:57:23:73:d8:17:1c:b4:8f:1e:b2:0e:b3:92:44:51:
05:9f:45:9e:69:f1:a5:3e:fc:f3:fa:ca:b8:91:bf:52:b4:57:
42:15:90:96:c4:a7:a6:fc:a4:ba:f8:64:f2:01:d4:f3:1f:e4:
3f:78:72:f0:ee:38:7d:96:4a:fd:de:95:02:d5:3f:44:19:d4:
78:aa:f2:f0:1f:8c:ca:ae:b1:74:b7:16:a8:2b:a3:29:19:46:
10:ac:6b:96:1b:10:90:39:e0:05:08:2d:9f:01:08:2e:f1:d9:
be:65:ee:63:0f:ca:79:c7:f8:16:b0:bf:27:61:54:b5:71:53:
55:be:9b:7b:e3:9c:bb:17:58:f4:50:5f:73:54:24:f1:33:aa:
6d:a8:9d:ef:80:2c:e1:c8:a1:1e:51:4a:18:30:34:2c:b6:8a:
8d:2e:f0:61:12:11:2b:bd:cd:81:91:98:1c:61:11:63:ea:19:
4d:21:d7:94:57:58:93:b8:ae:16:4d:58:47:7f:7a:bf:a8:de:
c5:98:00:62:9c:fd:10:35:11:4d:49:13:14:fb:b8:ca:ac:20:
5c:df:3d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:35:59 2025 by rpki-client