Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rZGt6YTwzR-ofDpVD_mRj3SqWkg.roa
File: rZGt6YTwzR-ofDpVD_mRj3SqWkg.roa (raw, json)
Hash identifier: ZgwUc6YcAXgrz3eG4/f5RydbuxuGC/z3xaTgYg7S9x8=
Subject key identifier: AD:91:AD:E9:84:F0:CD:1F:A8:7C:3A:55:0F:F9:91:8F:74:AA:5A:48
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0195957F69BD112F3BB3221F96F5CC63CCD7
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rZGt6YTwzR-ofDpVD_mRj3SqWkg.roa
Signing time: Fri 14 Mar 2025 16:31:49 +0000
ROA not before: Fri 14 Mar 2025 16:31:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401152
IP address blocks: 64.188.100.0/22 maxlen: 24
64.188.120.0/22 maxlen: 24
64.188.124.0/24 maxlen: 24
64.188.125.0/24 maxlen: 24
64.188.126.0/24 maxlen: 24
64.188.127.0/24 maxlen: 24
185.216.104.0/22 maxlen: 24
193.23.192.0/21 maxlen: 24
193.23.204.0/22 maxlen: 24
193.23.208.0/22 maxlen: 24
193.23.218.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 18:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:95:7f:69:bd:11:2f:3b:b3:22:1f:96:f5:cc:63:cc:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 14 16:31:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad91ade984f0cd1fa87c3a550ff9918f74aa5a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:69:a4:c3:fd:2e:6c:59:ba:b9:1c:4f:2a:b8:
44:48:84:17:eb:d9:1e:8a:91:16:c2:25:ac:75:84:
f1:ce:a2:04:35:21:9b:d2:6c:b7:fe:1b:93:7c:42:
2d:2a:84:b9:e9:f1:ec:fd:05:f3:ad:0d:a7:cc:7b:
93:3c:87:e9:02:61:1d:a9:6c:c7:b9:86:3a:4e:7a:
a2:24:b4:68:dc:ed:54:ff:ac:64:b4:5e:b2:b6:b0:
3b:31:64:5f:7a:a7:1b:e8:37:a5:d5:56:bc:eb:17:
0f:80:4b:46:36:39:2b:df:aa:87:a8:7d:35:f7:a0:
ac:a8:ae:f4:cf:d6:8a:f5:a5:17:81:5c:02:71:0a:
c7:02:95:36:8f:86:cc:a5:9a:5a:4d:08:9d:a2:a8:
90:00:b3:d3:8b:13:cb:e2:e4:67:c5:db:6e:04:9d:
b5:3b:26:a3:9c:29:53:b3:0e:fb:5e:3a:2a:b4:90:
f4:2f:51:7a:92:0f:43:a6:a7:93:de:15:e6:bb:04:
0d:29:25:49:34:d5:ca:47:aa:f7:0b:ee:ab:56:42:
44:d0:17:2c:6b:9c:0f:30:ca:43:d6:fd:f2:eb:fa:
00:b1:9c:eb:c4:f5:26:ec:e8:9c:ae:df:c5:50:f8:
b3:88:d2:4b:eb:12:d9:84:72:78:7f:bc:5d:78:1b:
0b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:91:AD:E9:84:F0:CD:1F:A8:7C:3A:55:0F:F9:91:8F:74:AA:5A:48
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rZGt6YTwzR-ofDpVD_mRj3SqWkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.100.0/22
64.188.120.0/21
185.216.104.0/22
193.23.192.0/21
193.23.204.0-193.23.211.255
193.23.218.0/23
Signature Algorithm: sha256WithRSAEncryption
37:13:46:4c:e2:92:67:40:ed:da:dd:af:25:9a:5a:b5:ec:af:
35:2b:2f:69:08:46:aa:23:f9:6c:11:e9:5f:1c:66:e7:5d:5f:
2f:5a:1c:69:63:c6:4a:fc:f4:73:2a:61:23:2b:85:1a:b6:0d:
2d:d2:80:93:b8:3f:33:30:9d:6f:c7:56:81:d1:f8:55:7e:2d:
c5:c4:64:e2:00:a0:d7:7a:5a:7d:0c:e2:55:91:86:c1:e4:a7:
18:51:52:00:f3:20:88:1b:ee:10:20:f3:7e:a4:ec:44:be:4e:
b0:70:56:95:16:8e:70:bd:c9:28:33:c7:3b:7d:40:3e:91:a3:
49:92:73:1f:3f:36:ec:6a:be:18:fe:9c:76:f5:a8:2e:3c:3b:
59:02:cb:ed:de:bf:eb:53:53:21:7f:ea:1e:06:a6:0a:6c:1d:
1a:85:bf:93:b9:c5:7e:82:9d:9a:99:a4:93:fd:45:86:54:55:
cb:2e:c6:14:54:52:d3:c9:79:18:47:f0:be:4c:d6:2f:46:28:
42:f7:7b:db:3a:10:32:85:02:23:e8:b3:20:fa:e0:d1:5b:a4:
32:89:63:51:86:af:bb:ab:49:bf:86:9a:6c:44:51:37:40:52:
30:23:3f:52:73:78:f1:15:1f:a5:21:bc:1e:72:98:b5:50:6b:
c8:f2:85:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:27:30 2025 by rpki-client