Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/zBUjqIsof7K7HG4P_ZeqYp56oXs.roa
File: zBUjqIsof7K7HG4P_ZeqYp56oXs.roa (raw, json)
Hash identifier: CEVQ0ISNlky7OaM6g9uEmdGE24tg55ZIO75DtRTlE5s=
Subject key identifier: CC:15:23:A8:8B:28:7F:B2:BB:1C:6E:0F:FD:97:AA:62:9E:7A:A1:7B
Certificate issuer: /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Certificate serial: 01957361BC3ACFFBE7853A75F36F9A475DCC
Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/zBUjqIsof7K7HG4P_ZeqYp56oXs.roa
Signing time: Sat 08 Mar 2025 01:32:19 +0000
ROA not before: Sat 08 Mar 2025 01:32:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25577
IP address blocks: 31.3.208.0/21 maxlen: 21
81.27.64.0/19 maxlen: 19
82.197.72.0/22 maxlen: 22
2001:9d8::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 08 Mar 2025 02:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:73:61:bc:3a:cf:fb:e7:85:3a:75:f3:6f:9a:47:5d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Validity
Not Before: Mar 8 01:32:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc1523a88b287fb2bb1c6e0ffd97aa629e7aa17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ed:6b:10:a9:29:f9:87:1e:c3:1c:e0:b2:ef:
b6:60:4e:df:d3:b2:80:37:d6:0e:fb:a2:1f:6f:15:
4c:bd:9f:ca:16:ff:ba:ea:01:b7:ca:b5:69:52:f6:
6b:20:59:b7:c9:fc:04:fc:cb:75:c3:9c:6b:6b:23:
8e:2e:8e:1e:0a:a5:97:da:8e:c3:6e:69:14:2c:b6:
ba:78:31:af:46:15:94:49:b3:62:91:f3:f3:bf:ca:
79:ac:c5:03:0f:ef:14:51:2b:85:a2:0a:19:b2:15:
87:6c:34:a5:cf:eb:c1:68:0f:fb:52:9e:11:08:39:
7b:dc:2b:b0:cb:e6:61:84:ac:b4:90:1e:d4:d7:4e:
0e:89:f7:38:52:1d:70:c8:68:5a:d4:df:93:10:20:
8c:59:23:49:f6:04:0f:a0:96:9f:6b:d2:2c:7f:be:
1a:9a:fa:70:ba:26:0e:38:4d:a9:ab:12:9c:8e:dc:
09:dc:61:1c:3c:57:5d:b1:ec:8c:e6:71:1d:b9:89:
b6:d9:ec:65:94:8c:5b:9f:68:4c:17:24:86:45:71:
da:3a:f5:7c:65:ad:35:8d:b0:20:22:31:6d:89:d3:
86:83:71:75:c6:82:29:c1:82:42:b6:88:a9:22:c2:
af:e0:9a:f9:f3:7e:7a:0c:01:7d:49:90:3a:49:12:
87:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:15:23:A8:8B:28:7F:B2:BB:1C:6E:0F:FD:97:AA:62:9E:7A:A1:7B
X509v3 Authority Key Identifier:
keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/zBUjqIsof7K7HG4P_ZeqYp56oXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.208.0/21
81.27.64.0/19
82.197.72.0/22
IPv6:
2001:9d8::/32
Signature Algorithm: sha256WithRSAEncryption
b7:b6:41:90:63:95:25:53:06:d8:58:88:dd:01:cf:57:05:28:
7a:bc:09:23:c9:47:e1:a7:2d:dd:c7:2d:02:50:a5:a9:b0:8a:
59:82:71:dd:ec:b6:0f:c5:b9:d5:c2:ee:38:80:7e:33:ae:17:
38:b8:c5:e2:20:13:97:05:e5:30:e1:a3:f1:d4:85:0e:e7:aa:
4f:0a:b1:71:52:70:74:f6:b2:c6:f5:59:7a:a9:12:e2:88:55:
b4:df:ca:b2:a4:88:03:a9:f9:c4:9f:0b:ca:44:1b:52:83:e5:
0d:b8:a1:37:ad:d8:28:ca:3f:6e:59:df:2a:a6:ad:0f:01:9b:
cf:58:bc:09:d0:57:a4:7b:73:c5:0a:07:f9:50:68:cf:68:cc:
f4:36:a8:24:4f:c7:6c:78:c2:0a:5e:d0:4d:82:18:6a:05:d8:
09:f1:86:8d:bd:1a:50:fc:b4:73:18:5c:e2:e8:0c:eb:8e:53:
f7:bb:6a:8d:cd:15:0e:b3:2f:3b:ba:c0:03:c4:d8:28:6c:4b:
df:a7:6c:cc:03:fb:e5:a9:36:d9:4f:22:27:14:a7:df:1c:3d:
83:74:b4:37:de:48:46:0f:c7:a9:45:86:44:27:2a:93:2c:06:
f0:58:a4:97:2a:da:d7:14:08:00:16:3d:bc:f7:7d:b3:29:39:
a5:0a:2d:55
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZVzYbw6z/vnhTp182+aR13MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZDE5MGIyMzhkOTdhZjc5MDBiZGNiZDAyMzA0Yjc4MmZm
Y2FmMmEwHhcNMjUwMzA4MDEzMjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzE1MjNhODhiMjg3ZmIyYmIxYzZlMGZmZDk3YWE2MjllN2FhMTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2O1rEKkp+Ycewxzgsu+2YE7f07KA
N9YO+6IfbxVMvZ/KFv+66gG3yrVpUvZrIFm3yfwE/Mt1w5xrayOOLo4eCqWX2o7D
bmkULLa6eDGvRhWUSbNikfPzv8p5rMUDD+8UUSuFogoZshWHbDSlz+vBaA/7Up4R
CDl73Cuwy+ZhhKy0kB7U104Oifc4Uh1wyGha1N+TECCMWSNJ9gQPoJafa9Isf74a
mvpwuiYOOE2pqxKcjtwJ3GEcPFddseyM5nEduYm22exllIxbn2hMFySGRXHaOvV8
Za01jbAgIjFtidOGg3F1xoIpwYJCtoipIsKv4Jr58356DAF9SZA6SRKH5QIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFMwVI6iLKH+yuxxuD/2XqmKeeqF7MB8GA1UdIwQY
MBaAFGLRkLI42Xr3kAvcvQIwS3gv/K8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81YTMzN2YtYzg0My00NWY0LThkOTkt
MTYzZmI3MDAzZTVkLzEvekJVanFJc29mN0s3SEc0UF9aZXFZcDU2b1hzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81YTMzN2YtYzg0My00NWY0LThkOTktMTYzZmI3MDAzZTVk
LzEvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDHwPQAwQF
URtAAwQCUsVIMA0EAgACMAcDBQAgAQnYMA0GCSqGSIb3DQEBCwUAA4IBAQC3tkGQ
Y5UlUwbYWIjdAc9XBSh6vAkjyUfhpy3dxy0CUKWpsIpZgnHd7LYPxbnVwu44gH4z
rhc4uMXiIBOXBeUw4aPx1IUO56pPCrFxUnB09rLG9Vl6qRLiiFW038qypIgDqfnE
nwvKRBtSg+UNuKE3rdgoyj9uWd8qpq0PAZvPWLwJ0Feke3PFCgf5UGjPaMz0Nqgk
T8dseMIKXtBNghhqBdgJ8YaNvRpQ/LRzGFzi6AzrjlP3u2qNzRUOsy87usADxNgo
bEvfp2zMA/vlqTbZTyInFKffHD2DdLQ33khGD8epRYZEJyqTLAbwWKSXKtrXFAgA
Fj28932zKTmlCi1V
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:34 2025 by rpki-client