Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/Zl4iZomtmEmjbR4xvsGVs_llDAg.roa
File: Zl4iZomtmEmjbR4xvsGVs_llDAg.roa (raw, json)
Hash identifier: andz1Gntl+WyCtTtkrHMQcRrFWnFAoGFcmk1Qt35zDQ=
Subject key identifier: 66:5E:22:66:89:AD:98:49:A3:6D:1E:31:BE:C1:95:B3:F9:65:0C:08
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 0195C83E7A4AE602ACBB9C704C60B0746C4B
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/Zl4iZomtmEmjbR4xvsGVs_llDAg.roa
Signing time: Mon 24 Mar 2025 13:01:32 +0000
ROA not before: Mon 24 Mar 2025 13:01:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 45.94.52.0/24 maxlen: 24
212.30.56.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 24 Mar 2025 17:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:3e:7a:4a:e6:02:ac:bb:9c:70:4c:60:b0:74:6c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Mar 24 13:01:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=665e226689ad9849a36d1e31bec195b3f9650c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:d0:44:ec:b3:c7:ef:a9:e6:d3:f1:56:3a:
63:b5:47:7f:e1:fb:8d:f7:f4:40:6f:2c:cb:45:03:
a4:86:8b:3a:c4:d0:0b:bd:76:47:72:4d:e2:d2:0b:
1a:2a:12:83:f9:c2:d6:dd:c7:0c:35:41:33:e8:b4:
89:b6:f7:3f:19:68:56:26:3e:a8:a3:70:81:b5:1a:
59:9a:38:7b:6e:0b:d4:3f:18:cd:16:3f:41:60:e6:
9e:44:9a:67:ee:e7:4b:e9:da:04:a9:9a:61:89:7d:
c5:a4:ef:96:92:3c:44:35:6c:56:e9:17:d4:3c:36:
ee:66:a8:3f:70:60:d6:69:8d:f1:70:67:c1:53:63:
0e:07:0d:bc:6d:6d:1f:73:e9:88:8e:e8:6e:8b:39:
2b:4c:45:e3:8f:6a:23:16:f4:49:09:63:dc:e9:7f:
25:47:fb:fd:f8:95:62:96:bb:3a:f6:2d:e7:cf:7f:
f9:a7:bc:26:2d:30:48:05:ad:ae:aa:ac:92:c8:2c:
6b:c1:a0:91:3b:bb:1a:04:3c:54:a6:d6:23:c9:fd:
0f:a8:f9:aa:9e:a1:14:df:db:34:fc:33:8c:9f:ca:
22:a8:fb:a8:c3:33:79:8c:83:7b:dd:28:a1:86:e3:
62:26:2d:4e:e4:bd:d2:c5:5c:4e:ca:7b:6b:d4:e3:
b1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5E:22:66:89:AD:98:49:A3:6D:1E:31:BE:C1:95:B3:F9:65:0C:08
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/Zl4iZomtmEmjbR4xvsGVs_llDAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.52.0/24
212.30.56.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:66:ec:83:9b:81:76:4e:59:82:13:2d:b3:0c:cd:db:8d:5d:
70:aa:ed:49:cd:86:6f:67:d6:f6:1d:23:4e:45:1b:ba:d2:21:
89:c9:37:39:62:d1:62:df:62:00:22:95:77:c5:f4:f3:31:eb:
05:99:41:99:35:45:33:72:76:8d:a0:a5:d7:ee:9d:e4:8f:75:
56:8e:fd:18:65:11:c0:1b:69:be:e2:d9:a9:9d:52:30:a0:39:
bc:b0:23:ec:6f:b3:e6:59:cd:74:0a:b8:29:3c:b7:84:fc:c0:
1c:86:ca:35:64:3a:39:8e:e6:40:fa:75:29:0b:42:fb:0c:48:
ee:de:25:a6:10:d3:d3:9f:8b:d5:bf:c8:c0:b9:d3:b9:96:b4:
ed:0f:f9:47:bd:92:a4:e4:1e:d1:b0:42:f7:ba:b8:90:61:71:
e4:55:6c:b9:5c:5f:47:52:70:94:2d:28:0d:26:49:ac:93:ae:
1b:e5:1d:b0:65:19:44:6e:0d:5d:fd:e9:db:a4:b8:b4:f4:80:
80:51:04:5e:6c:bb:9a:d7:cb:87:8b:45:7b:46:aa:82:09:4c:
e1:a8:22:b4:a6:63:2b:b6:87:b9:47:dd:28:c5:4c:5b:3b:06:
52:6d:f5:b3:e0:d2:a7:5f:84:bb:c6:16:16:dd:fd:b2:81:db:
d1:ef:ae:49
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZXIPnpK5gKsu5xwTGCwdGxLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy
MzQxMmYwHhcNMjUwMzI0MTMwMTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjVlMjI2Njg5YWQ5ODQ5YTM2ZDFlMzFiZWMxOTViM2Y5NjUwYzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqrQROyzx++p5tPxVjpjtUd/4fuN
9/RAbyzLRQOkhos6xNALvXZHck3i0gsaKhKD+cLW3ccMNUEz6LSJtvc/GWhWJj6o
o3CBtRpZmjh7bgvUPxjNFj9BYOaeRJpn7udL6doEqZphiX3FpO+WkjxENWxW6RfU
PDbuZqg/cGDWaY3xcGfBU2MOBw28bW0fc+mIjuhuizkrTEXjj2ojFvRJCWPc6X8l
R/v9+JVilrs69i3nz3/5p7wmLTBIBa2uqqySyCxrwaCRO7saBDxUptYjyf0PqPmq
nqEU39s0/DOMn8oiqPuowzN5jIN73SihhuNiJi1O5L3SxVxOyntr1OOxjwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGZeImaJrZhJo20eMb7BlbP5ZQwIMB8GA1UdIwQY
MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt
MWUwNDY1NTEzYjYzLzEvWmw0aVpvbXRtRW1qYlI0eHZzR1ZzX2xsREFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz
LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALV40AwQC
1B44MA0GCSqGSIb3DQEBCwUAA4IBAQA9ZuyDm4F2TlmCEy2zDM3bjV1wqu1JzYZv
Z9b2HSNORRu60iGJyTc5YtFi32IAIpV3xfTzMesFmUGZNUUzcnaNoKXX7p3kj3VW
jv0YZRHAG2m+4tmpnVIwoDm8sCPsb7PmWc10CrgpPLeE/MAchso1ZDo5juZA+nUp
C0L7DEju3iWmENPTn4vVv8jAudO5lrTtD/lHvZKk5B7RsEL3uriQYXHkVWy5XF9H
UnCULSgNJkmsk64b5R2wZRlEbg1d/enbpLi09ICAUQRebLua18uHi0V7RqqCCUzh
qCK0pmMrtoe5R90oxUxbOwZSbfWz4NKnX4S7xhYW3f2ygdvR765J
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:24:31 2025 by rpki-client