Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/ZRQoeX-F7vny8-_x_9kh5Ywhwck.roa
File: ZRQoeX-F7vny8-_x_9kh5Ywhwck.roa (raw, json)
Hash identifier: +IWY4qp+Oa8IUBBfLO0Xd5P7ApDyNRK/I/ZeFHg7NZ4=
Subject key identifier: 65:14:28:79:7F:85:EE:F9:F2:F3:EF:F1:FF:D9:21:E5:8C:21:C1:C9
Certificate issuer: /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial: 01980E247BFBB1127A9C670744E44BCFC450
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/ZRQoeX-F7vny8-_x_9kh5Ywhwck.roa
Signing time: Tue 15 Jul 2025 12:52:08 +0000
ROA not before: Tue 15 Jul 2025 12:52:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35485
IP address blocks: 93.94.32.0/24 maxlen: 24
93.174.64.0/21 maxlen: 24
158.58.136.0/21 maxlen: 24
185.84.176.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Jul 2025 14:04:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0e:24:7b:fb:b1:12:7a:9c:67:07:44:e4:4b:cf:c4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Validity
Not Before: Jul 15 12:52:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=651428797f85eef9f2f3eff1ffd921e58c21c1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2a:17:7e:2e:72:43:2e:f7:04:5f:1d:d4:32:
79:16:6d:28:21:d2:89:99:b1:fd:9e:95:53:98:37:
67:07:e2:23:b8:4b:b8:7a:c3:4d:3d:7f:0c:5c:89:
9d:14:74:64:66:c6:5d:3b:8c:4c:68:b8:4d:95:05:
4e:1f:15:72:d4:a1:36:f5:15:33:84:03:d2:7f:bf:
94:b3:73:b7:98:d2:5e:49:d7:77:5c:d0:4f:9f:d6:
12:1c:ce:20:27:03:28:cf:0c:c8:39:dc:c4:3b:21:
7c:65:fa:8c:ba:d9:09:c4:ed:dc:57:d0:da:90:14:
69:3d:45:3d:83:92:e8:e9:a6:1c:f7:37:49:71:14:
fd:7c:37:b0:19:60:e3:f5:31:d3:4f:05:8a:b5:0d:
7a:08:fb:64:3f:49:82:ea:07:b2:54:24:69:34:1f:
54:d5:6a:a3:55:d1:78:30:0e:fe:19:3a:cc:41:58:
34:69:91:7f:fa:23:8b:f0:6c:f3:b9:b3:52:78:63:
d0:14:f0:79:5e:80:79:e6:6a:e2:9d:ae:ac:88:3f:
78:b2:eb:b9:12:0b:87:a4:7e:da:14:ee:1c:cf:a5:
7c:95:83:4f:65:57:20:51:2b:ba:57:1f:54:0f:3b:
1a:2b:0f:8b:f9:dc:5e:c1:cb:89:ba:e0:da:f0:47:
35:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:14:28:79:7F:85:EE:F9:F2:F3:EF:F1:FF:D9:21:E5:8C:21:C1:C9
X509v3 Authority Key Identifier:
keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/ZRQoeX-F7vny8-_x_9kh5Ywhwck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.32.0/24
93.174.64.0/21
158.58.136.0/21
185.84.176.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:87:d0:09:79:61:c2:a4:b7:c5:ea:43:71:a8:91:28:56:94:
c4:f4:dd:26:c9:1f:fe:f9:e8:91:bb:6d:39:78:94:ad:e5:fa:
2e:f3:3d:91:5c:0d:30:8e:95:65:9f:df:b1:5c:8b:b3:d0:01:
27:9f:f1:03:63:df:1a:39:5e:b0:e3:bd:05:86:18:48:b8:8a:
98:9e:44:1f:07:39:dc:1c:24:68:90:86:8f:31:34:cc:3f:19:
7e:fb:91:53:27:1c:87:4d:66:99:d1:e7:13:14:f2:0a:ea:99:
eb:54:83:e8:a7:ad:05:69:7c:bf:41:20:bd:08:67:f4:d4:dc:
db:8c:29:e3:bb:7a:d9:ad:ca:5b:9d:87:36:8c:56:07:bd:5e:
67:47:43:59:3d:f7:7f:c6:11:7a:49:06:8d:4b:72:07:5f:ff:
cb:98:77:5e:b1:21:23:9e:08:21:5b:70:66:48:7c:a5:95:b6:
fd:1a:7f:de:bd:8a:29:87:2c:69:25:78:4f:c1:41:d7:ad:e2:
a7:c0:e3:6c:e1:1b:8d:4a:74:b7:e2:c4:16:75:4f:18:e2:d6:
0b:73:56:5e:24:ee:9a:f3:7d:28:b1:43:a3:65:31:a6:ba:6f:
37:88:90:c4:8a:4c:a8:0e:4f:81:03:d6:ba:5e:7d:5b:d4:53:
97:af:e0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:23:41 2025 by rpki-client