Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ZKTXtGWYStmGR_LUlMAlrsQhwZo.roa
File: ZKTXtGWYStmGR_LUlMAlrsQhwZo.roa (raw, json)
Hash identifier: wuZmVG/Mnljhv+T5fYuIu70l4SinwINI11rNqY25U3g=
Subject key identifier: 64:A4:D7:B4:65:98:4A:D9:86:47:F2:D4:94:C0:25:AE:C4:21:C1:9A
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 0197D43F86BD9A207745323EAD5F29F59167
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ZKTXtGWYStmGR_LUlMAlrsQhwZo.roa
Signing time: Fri 04 Jul 2025 07:03:42 +0000
ROA not before: Fri 04 Jul 2025 07:03:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 37.148.128.0/22 maxlen: 24
93.88.153.0/24 maxlen: 24
93.88.154.0/23 maxlen: 24
93.88.157.0/24 maxlen: 24
152.89.84.0/24 maxlen: 24
152.89.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Jul 2025 07:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:3f:86:bd:9a:20:77:45:32:3e:ad:5f:29:f5:91:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Jul 4 07:03:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64a4d7b465984ad98647f2d494c025aec421c19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:56:66:79:d4:86:8d:ca:7c:72:ac:bb:a4:4b:
91:d7:14:9f:b9:83:df:a8:35:f3:16:b5:01:3d:8d:
b2:34:21:5a:6b:49:9a:a4:c3:8a:f0:c9:45:0c:ab:
24:10:59:5a:dc:f7:fb:16:77:a6:c6:e8:1d:d5:71:
9d:0c:e7:6c:2b:ca:f4:e5:2b:be:f7:42:42:06:09:
d0:93:14:e7:88:21:9f:30:9c:ec:9a:66:09:59:49:
af:89:07:c6:e3:74:63:0d:89:4c:14:43:57:e3:1a:
dc:34:8a:f0:aa:7a:85:1c:c6:90:02:76:03:73:73:
1e:95:87:89:e7:4f:a8:93:58:dd:b5:f0:78:02:68:
a3:ec:c6:f8:51:cf:f6:41:70:f4:af:36:9b:6b:44:
49:fc:f0:07:25:da:01:ef:9d:e6:c0:94:af:5f:c1:
ae:fb:67:14:2b:f8:11:54:e9:58:9d:eb:4c:cd:b8:
d4:9c:32:9e:d0:3b:27:ea:66:67:de:8e:b7:d7:be:
32:d9:2d:4b:df:bf:10:00:aa:5b:e1:45:1a:8b:2c:
90:bd:9b:b9:7a:21:84:d8:aa:7b:2c:8d:b5:66:c7:
68:bc:a0:1b:58:72:e4:99:6c:26:6b:35:f2:a6:c3:
9a:f5:86:e3:20:11:0a:85:08:e9:17:0d:1e:a0:56:
52:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A4:D7:B4:65:98:4A:D9:86:47:F2:D4:94:C0:25:AE:C4:21:C1:9A
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/ZKTXtGWYStmGR_LUlMAlrsQhwZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.128.0/22
93.88.153.0-93.88.155.255
93.88.157.0/24
152.89.84.0/24
152.89.87.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:9e:79:b6:87:fd:29:20:0b:5b:b5:58:5d:f1:bb:f7:39:f9:
c7:09:e1:7d:f8:38:0a:71:b8:52:d7:1e:5f:50:af:e2:e1:93:
40:12:3d:af:42:e1:bb:87:30:04:f5:18:04:7f:b8:d7:11:06:
3d:49:cf:fb:2e:ed:a2:0a:68:a6:d6:e6:df:c6:11:ad:51:92:
47:93:e9:40:64:02:68:cc:30:04:8e:b5:fd:9a:45:f8:9f:4e:
7c:0c:a6:fe:92:87:5a:8a:d6:b4:72:7b:c8:d1:94:25:98:b4:
ae:70:27:75:1b:b1:6b:65:fc:76:8f:8b:8d:34:b3:79:e7:f1:
09:94:df:6d:72:cb:b7:04:66:3e:51:69:f8:dd:cb:af:5d:17:
cc:ae:a6:31:4c:32:4a:95:90:7d:e0:26:c4:a4:ce:72:f5:c3:
5b:bc:68:4e:0e:f2:b5:81:77:d0:23:e0:b0:e6:29:b0:93:4d:
3c:8c:d9:d3:ae:d0:03:01:5d:a7:38:bc:5f:70:32:f7:0a:c0:
19:91:31:d2:86:31:7d:e0:3e:23:3c:74:40:aa:a8:33:89:45:
dc:09:e4:69:50:ad:41:26:54:ae:46:61:e3:bd:26:31:ec:34:
5d:c1:46:d7:30:49:b6:7b:5f:4b:21:09:cb:73:c5:f7:53:13:
e5:6f:3c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:50:57 2025 by rpki-client