Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/ZYmP6i9_NhMp49ZX1kn21ZoJGiM.roa
File: ZYmP6i9_NhMp49ZX1kn21ZoJGiM.roa (raw, json)
Hash identifier: SkHaqbp2tam2kFLkeU1wq8nrWK0llA1DZcwWmK+FFOo=
Subject key identifier: 65:89:8F:EA:2F:7F:36:13:29:E3:D6:57:D6:49:F6:D5:9A:09:1A:23
Certificate issuer: /CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Certificate serial: 0196F123637DDC193C95F21D9C84730DA27A
Authority key identifier: D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/ZYmP6i9_NhMp49ZX1kn21ZoJGiM.roa
Signing time: Wed 21 May 2025 04:39:10 +0000
ROA not before: Wed 21 May 2025 04:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 193.200.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 May 2025 18:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:23:63:7d:dc:19:3c:95:f2:1d:9c:84:73:0d:a2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Validity
Not Before: May 21 04:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65898fea2f7f361329e3d657d649f6d59a091a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:03:5d:4d:7b:7d:ee:dd:d0:ee:7f:38:0d:d4:
ad:b3:0d:c7:f8:b5:4c:7a:6e:06:33:66:d5:5a:5f:
2f:26:c4:5b:91:2e:cf:be:fc:df:e2:15:c4:c7:d8:
55:68:83:86:fb:3b:1b:4a:96:f6:60:6a:1c:8e:0d:
31:0d:e3:4b:7f:67:1a:92:c1:4f:91:97:22:45:b8:
95:f2:97:27:d7:cb:48:26:89:b4:3b:f9:25:bc:29:
7a:e1:af:59:e6:3e:31:b0:c8:59:4d:85:b0:2c:e2:
dc:e2:da:82:90:56:b6:32:25:82:65:05:6c:ea:08:
84:4b:d1:3b:1a:e7:0c:2a:d2:3c:39:77:38:3d:f5:
ca:09:34:15:bc:ba:a5:a2:ac:a7:1c:58:09:e9:4f:
9f:0e:a0:10:81:97:5f:32:51:92:52:60:c0:db:39:
aa:ad:30:21:fd:f2:48:f7:6b:44:98:c1:d0:68:d9:
76:8c:59:a4:d3:f5:7b:a6:23:92:96:dd:c9:43:26:
65:fa:da:f4:09:1d:1f:97:17:e4:13:02:83:d3:58:
51:7a:44:39:2a:21:fd:0a:e2:18:94:b8:79:17:7c:
e6:bf:4c:34:79:e8:0c:b0:6a:87:0a:e6:b7:12:28:
7b:72:dc:7e:2f:e7:bd:09:41:d1:1a:d3:49:c9:10:
c6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:89:8F:EA:2F:7F:36:13:29:E3:D6:57:D6:49:F6:D5:9A:09:1A:23
X509v3 Authority Key Identifier:
keyid:D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/ZYmP6i9_NhMp49ZX1kn21ZoJGiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.78.0/24
Signature Algorithm: sha256WithRSAEncryption
32:e9:a6:ad:f2:a7:47:2c:1c:38:c6:1c:e1:e1:c6:80:75:c4:
26:39:0b:61:95:67:cc:10:ab:ee:6f:37:aa:16:b5:ea:2a:55:
95:d2:ba:47:d5:e0:72:bc:e2:d3:8c:d0:41:aa:16:04:f0:c4:
df:eb:5f:40:a0:c0:47:1a:15:fa:c7:20:64:30:d7:60:a8:71:
30:63:ae:03:82:81:a1:70:e4:4a:fc:d6:ad:51:cb:fa:d7:7c:
5c:2f:2b:64:23:af:f1:fa:c8:0f:40:8a:41:11:3d:cf:11:41:
77:d9:99:49:cb:f6:33:34:c5:fb:6c:be:27:28:9d:c9:e4:5c:
4c:43:b9:31:7c:bf:43:3b:31:6a:21:68:d9:63:b6:ca:d2:17:
af:1c:25:f5:ad:4d:df:01:a1:6d:74:6c:57:03:66:46:a0:fa:
d5:d4:2f:3a:71:ab:b3:6e:90:c3:7b:42:28:f9:13:fe:e4:cc:
36:0a:08:b0:ff:78:94:b8:93:5b:17:99:52:c2:e0:a6:28:9f:
e1:4c:84:a4:88:c0:5f:1c:2d:51:69:59:a3:3f:10:fb:fa:e3:
64:46:35:bb:ac:4b:cd:4d:24:24:33:71:73:0f:ac:97:5e:93:
5b:61:bf:45:66:9d:27:bc:68:79:17:f1:f6:92:1b:31:fc:e5:
e2:f7:6e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:37:06 2025 by rpki-client