Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZuX93bTG2k1CoAxwaxOCYLdMEMo.roa
File: ZuX93bTG2k1CoAxwaxOCYLdMEMo.roa (raw, json)
Hash identifier: ac7zEtnb7Q6zkFUQC/RNclUOmJECy/n2obcxrXEIFyg=
Subject key identifier: 66:E5:FD:DD:B4:C6:DA:4D:42:A0:0C:70:6B:13:82:60:B7:4C:10:CA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193A60766B7BEC7C1A972E702ACFBE244C7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZuX93bTG2k1CoAxwaxOCYLdMEMo.roa
Signing time: Sun 08 Dec 2024 11:28:43 +0000
ROA not before: Sun 08 Dec 2024 11:28:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207388
IP address blocks: 192.145.28.0/22 maxlen: 24
212.87.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Dec 2024 02:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a6:07:66:b7:be:c7:c1:a9:72:e7:02:ac:fb:e2:44:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 8 11:28:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66e5fdddb4c6da4d42a00c706b138260b74c10ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:19:76:64:05:15:25:8c:26:5c:66:3a:6e:4f:
15:79:41:7f:d0:fd:6e:e0:76:b5:6b:e4:cc:52:4b:
7e:e8:ca:f0:66:27:d2:19:97:33:94:f0:5d:98:02:
d1:78:75:63:18:37:8b:51:1c:d5:5a:49:88:87:60:
62:71:47:b7:f7:35:66:4e:f3:82:41:dc:32:50:6f:
c0:da:94:c5:9a:45:36:50:82:00:18:b9:dc:de:a7:
68:ef:17:80:b3:ca:95:7c:90:c2:81:6a:a1:b1:9a:
61:16:dd:21:50:3f:f6:7d:42:31:5a:30:9d:00:e1:
88:17:ef:ae:21:c7:b6:a1:07:31:2f:15:9e:58:fa:
72:48:3c:0a:64:6d:d1:68:d4:a1:02:e3:10:c8:b3:
24:72:3b:6b:c2:b5:67:cc:a7:bd:1c:53:13:bd:06:
7d:05:71:62:66:dc:0d:58:ee:1a:32:e1:ba:b9:1b:
bc:c3:0d:21:cd:b2:0b:51:4a:20:04:7b:6c:da:c4:
d8:c5:d0:3c:a4:f8:c9:7d:58:44:92:97:23:f3:75:
3c:b2:1b:a5:a1:4c:48:d8:e0:24:63:73:ec:84:67:
8e:fa:dd:7d:03:54:fc:74:3b:17:44:e6:42:f6:35:
f6:49:77:75:ae:c7:0d:34:b3:17:36:05:3d:80:1b:
0b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E5:FD:DD:B4:C6:DA:4D:42:A0:0C:70:6B:13:82:60:B7:4C:10:CA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZuX93bTG2k1CoAxwaxOCYLdMEMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.28.0/22
212.87.223.0/24
Signature Algorithm: sha256WithRSAEncryption
30:b2:cb:86:86:93:4d:a3:a3:12:04:2f:35:8a:00:4b:31:b4:
4b:d8:6d:23:7c:ee:59:df:1d:ec:02:81:2f:c8:e2:15:df:74:
10:0c:01:9b:2b:c4:ab:ba:d4:49:14:d8:3a:78:19:f5:ef:c3:
d4:df:c6:34:b8:fc:e8:bf:b7:f8:59:b9:47:2f:ae:fc:91:66:
c6:36:5e:2c:e4:27:da:27:96:60:cf:c7:b6:f9:82:59:66:de:
35:4e:63:83:e3:a0:53:97:6a:41:db:fa:e4:c3:06:71:4e:97:
28:8c:09:21:13:20:7b:c2:7a:52:2b:75:57:b7:26:dd:6d:c9:
4a:81:bf:ab:15:7d:0a:d5:98:f6:65:b9:86:2a:7a:8a:54:77:
32:48:7d:6e:e5:4c:0e:67:d7:f2:5c:fd:0c:52:54:8a:7b:ec:
7e:8a:40:21:f2:d9:b6:d2:68:74:59:3a:60:ad:21:01:c2:c3:
a7:fc:ef:5b:47:51:ef:dc:2b:46:77:b0:3e:ea:27:df:19:28:
7e:09:0c:2b:5b:c8:02:5c:83:58:4d:4f:e3:4d:a2:53:ae:82:
ca:e6:92:2c:cb:65:b4:70:67:f3:92:0c:63:d2:ac:e3:b4:78:
ce:2e:14:b0:6d:d7:6e:53:8b:62:2d:4d:23:f9:f8:07:36:fb:
47:85:1b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:29:03 2025 by rpki-client