Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/ZeDmKUrJtmis2Ydmsw5iiCAu4ok.roa
File: ZeDmKUrJtmis2Ydmsw5iiCAu4ok.roa (raw, json)
Hash identifier: rrasFIs2/yeWp7Q8kAZa8COSFBN/Lfdc47Vp0hXjtqc=
Subject key identifier: 65:E0:E6:29:4A:C9:B6:68:AC:D9:87:66:B3:0E:62:88:20:2E:E2:89
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 01942687C48794E17DC4B9B1010A3D84E9CB
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/ZeDmKUrJtmis2Ydmsw5iiCAu4ok.roa
Signing time: Thu 02 Jan 2025 10:20:19 +0000
ROA not before: Thu 02 Jan 2025 10:20:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 213.178.140.0/24 maxlen: 24
213.178.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 11:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:87:c4:87:94:e1:7d:c4:b9:b1:01:0a:3d:84:e9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: Jan 2 10:20:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65e0e6294ac9b668acd98766b30e6288202ee289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:1f:f0:ac:ae:dc:e5:1a:12:e0:ab:ad:89:
89:27:da:bb:0d:2b:d0:57:7e:d4:74:28:25:d5:dd:
8d:64:6c:87:43:23:42:21:e0:ac:6e:c9:7d:64:40:
f3:21:7b:81:4d:8a:53:9b:f5:01:b1:d0:de:c9:f3:
34:83:bf:6f:a5:10:70:a8:98:fc:d4:9e:a9:1a:1b:
3d:c7:98:76:47:cf:95:c5:ae:b6:d7:10:e2:2d:66:
10:a3:5a:0c:c9:61:08:0e:30:76:a4:c1:f7:27:f7:
6e:9e:fb:42:b3:2c:4c:b9:9b:75:97:0e:6e:92:3a:
94:18:d2:a1:c3:03:95:16:9c:c4:92:22:9b:17:ae:
ba:b1:4a:52:12:30:41:6d:b4:9e:e9:c4:d9:ae:fa:
31:14:12:b4:7d:ec:6d:e8:4c:20:bd:1a:1f:71:ed:
11:fb:42:28:ee:73:4f:3a:3c:53:cb:a4:dd:a7:18:
e6:f5:64:d0:69:c1:76:14:54:3d:f0:93:a6:fb:7a:
1f:a0:af:b8:47:a5:d9:b6:87:20:db:65:e4:95:54:
df:49:b3:75:39:db:6c:61:02:e6:97:53:f9:b4:f5:
7c:e4:74:da:7b:4c:a2:f2:4f:dc:8e:9a:72:fb:23:
ce:c2:f5:f0:95:03:08:d3:ad:15:6c:a8:f2:6d:1b:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E0:E6:29:4A:C9:B6:68:AC:D9:87:66:B3:0E:62:88:20:2E:E2:89
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/ZeDmKUrJtmis2Ydmsw5iiCAu4ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.178.140.0/23
Signature Algorithm: sha256WithRSAEncryption
21:cb:7d:bc:a8:44:9e:5e:09:c6:57:5a:83:4c:07:48:96:23:
25:e1:f1:ba:02:38:7f:ed:58:2d:5d:15:b1:9c:0b:6d:02:46:
be:07:29:f5:36:ac:48:ab:d6:c0:9d:bf:3b:2b:95:e6:cc:cd:
e9:51:89:d5:b8:3b:be:f5:f5:82:bf:32:57:7a:e7:24:b0:6b:
d6:9e:00:78:de:f2:d5:89:b1:f3:5a:ab:1e:be:16:18:d2:d3:
28:dd:04:27:87:1f:17:d9:20:7a:24:dc:f7:46:a1:8d:77:a5:
ff:bc:83:59:6d:fa:af:95:45:9c:65:b7:72:d0:de:05:90:2b:
86:04:4b:45:18:2d:65:53:92:f2:de:1e:4d:42:fe:6b:43:92:
f6:9b:d4:2d:de:26:71:16:b3:34:ac:fb:50:9a:f5:60:69:06:
ef:9b:e1:3d:2d:55:dc:b3:39:25:13:54:21:b3:72:ad:b4:d4:
a0:1a:b1:cb:0b:60:e7:11:c0:df:a5:c7:7d:69:9f:df:5a:35:
92:86:b6:e9:ab:4d:9c:2a:f5:04:a5:fe:a1:dc:f3:1a:6e:eb:
72:bf:57:3a:52:4d:10:09:03:d1:28:66:f7:6e:db:04:0a:6d:
64:38:bf:0b:77:b7:a0:d2:a4:28:4e:6e:80:db:25:b4:97:56:
50:5f:bd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:34:14 2025 by rpki-client