Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zs_9LeXruhMTTyqjZYJe-ko9We0.roa
File: zs_9LeXruhMTTyqjZYJe-ko9We0.roa (raw, json)
Hash identifier: ehtNRSSEPsbF/IJvtZa8jrQp8YwOuBL5DzOZiodkOCU=
Subject key identifier: CE:CF:FD:2D:E5:EB:BA:13:13:4F:2A:A3:65:82:5E:FA:4A:3D:59:ED
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194DAF219E0653303FFE8104A26533BF69D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zs_9LeXruhMTTyqjZYJe-ko9We0.roa
Signing time: Thu 06 Feb 2025 11:08:06 +0000
ROA not before: Thu 06 Feb 2025 11:08:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 163.5.12.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Feb 2025 12:28:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:f2:19:e0:65:33:03:ff:e8:10:4a:26:53:3b:f6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 6 11:08:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cecffd2de5ebba13134f2aa365825efa4a3d59ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:72:fd:8c:dc:0d:80:18:6d:d1:82:b0:02:e1:
5e:8c:82:09:73:3b:a6:ba:c2:ee:50:85:32:b7:de:
cd:b8:db:23:1f:74:7c:5c:c8:27:34:a1:a0:36:74:
b4:b0:19:89:46:77:6e:32:76:87:3e:56:90:6c:3c:
41:de:4e:29:63:b3:0d:70:2b:b0:5c:dc:f4:80:4d:
f8:9f:be:99:02:17:fe:d5:d9:20:37:8b:8b:9c:ba:
82:fc:33:7e:27:e9:ae:f6:cb:d6:32:a5:3f:f8:a7:
a9:20:02:f2:70:57:f0:48:71:f6:35:7f:2c:9a:ce:
dc:92:8d:f6:94:98:c1:a5:6b:b8:c9:db:c5:4d:9f:
23:f4:01:0d:a5:29:3f:5b:47:a3:00:70:c6:0c:a1:
48:78:0e:f6:2a:9b:1a:df:36:54:54:6f:0c:eb:e4:
a8:11:f9:56:99:0a:bf:fb:0b:9f:07:46:5a:37:dd:
8f:81:ae:91:8e:47:f3:9f:82:c7:f6:07:f1:ab:f4:
e8:c2:95:52:9f:94:68:f5:e7:dc:95:9a:a9:41:e6:
e1:7b:65:12:69:f2:7a:be:33:ae:18:12:13:fb:76:
b3:54:3d:71:b1:f0:33:a4:17:e0:d3:cd:ca:19:31:
f2:b7:75:62:85:ca:1e:fe:ec:3d:be:4e:c3:36:a9:
0e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CF:FD:2D:E5:EB:BA:13:13:4F:2A:A3:65:82:5E:FA:4A:3D:59:ED
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zs_9LeXruhMTTyqjZYJe-ko9We0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.12.0/24
163.5.136.0/24
Signature Algorithm: sha256WithRSAEncryption
16:47:ec:cf:88:84:5b:c4:4b:1a:63:e4:f9:91:98:da:50:ff:
d9:1c:d0:3f:97:02:79:6a:bc:24:61:ef:a3:76:08:d3:01:79:
9c:b6:23:d7:82:67:62:b4:cb:8e:23:8f:c9:e5:a7:87:5b:57:
e0:53:c3:6a:89:1e:8e:69:1d:3a:ec:f6:76:85:c7:ff:6e:0e:
d3:ad:e7:c8:f2:8c:da:06:f5:42:86:cd:08:51:be:20:1f:a3:
13:0d:4a:4b:0d:c5:7a:66:1e:a3:dc:b4:2c:ed:00:0c:05:db:
9b:c0:a7:a1:56:2f:16:e6:68:05:14:fc:86:e6:a1:cc:57:07:
ef:4b:bf:b6:1d:29:86:2f:d4:59:a7:cf:40:ed:9e:74:71:e7:
21:a2:e1:3c:75:95:9d:ff:63:bf:19:59:d5:97:75:43:2d:a1:
e7:16:b6:74:4d:6d:c3:f0:fc:38:a8:b4:e5:00:a5:b6:c6:f9:
d9:2b:d3:6e:0a:3f:62:f3:0e:a7:c4:22:f5:6f:42:f8:a6:23:
dc:54:df:85:23:3b:90:0a:a7:2d:13:31:20:a0:9b:b4:d8:3d:
1a:43:db:0a:b2:55:08:49:51:1d:da:74:e8:4e:01:f6:99:a5:
99:e6:c5:14:b3:47:42:24:92:cc:3d:88:8b:f2:ec:8f:fd:30:
57:50:9e:aa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZTa8hngZTMD/+gQSiZTO/adMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwMjA2MTEwODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWNmZmQyZGU1ZWJiYTEzMTM0ZjJhYTM2NTgyNWVmYTRhM2Q1OWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznL9jNwNgBht0YKwAuFejIIJczum
usLuUIUyt97NuNsjH3R8XMgnNKGgNnS0sBmJRnduMnaHPlaQbDxB3k4pY7MNcCuw
XNz0gE34n76ZAhf+1dkgN4uLnLqC/DN+J+mu9svWMqU/+KepIALycFfwSHH2NX8s
ms7cko32lJjBpWu4ydvFTZ8j9AENpSk/W0ejAHDGDKFIeA72Kpsa3zZUVG8M6+So
EflWmQq/+wufB0ZaN92Pga6Rjkfzn4LH9gfxq/TowpVSn5Ro9efclZqpQebhe2US
afJ6vjOuGBIT+3azVD1xsfAzpBfg083KGTHyt3Vihcoe/uw9vk7DNqkOyQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM7P/S3l67oTE08qo2WCXvpKPVntMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvenNfOUxlWHJ1aE1UVHlxalpZSmUta285V2UwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowUMAwQA
owWIMA0GCSqGSIb3DQEBCwUAA4IBAQAWR+zPiIRbxEsaY+T5kZjaUP/ZHNA/lwJ5
arwkYe+jdgjTAXmctiPXgmditMuOI4/J5aeHW1fgU8NqiR6OaR067PZ2hcf/bg7T
refI8ozaBvVChs0IUb4gH6MTDUpLDcV6Zh6j3LQs7QAMBdubwKehVi8W5mgFFPyG
5qHMVwfvS7+2HSmGL9RZp89A7Z50cechouE8dZWd/2O/GVnVl3VDLaHnFrZ0TW3D
8Pw4qLTlAKW2xvnZK9NuCj9i8w6nxCL1b0L4piPcVN+FIzuQCqctEzEgoJu02D0a
Q9sKslUISVEd2nToTgH2maWZ5sUUs0dCJJLMPYiL8uyP/TBXUJ6q
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:11 2025 by rpki-client