Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/ZlmPh4YzeoEKd3FbmGquvY84ppQ.roa
File: ZlmPh4YzeoEKd3FbmGquvY84ppQ.roa (raw, json)
Hash identifier: 8Qr+xtnEfOLaLda8nw58rE+tyQ3szTk7PPzTDTHKgcQ=
Subject key identifier: 66:59:8F:87:86:33:7A:81:0A:77:71:5B:98:6A:AE:BD:8F:38:A6:94
Certificate issuer: /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial: 01971BEB0C9F6214B440EB3084E0278412E9
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/ZlmPh4YzeoEKd3FbmGquvY84ppQ.roa
Signing time: Thu 29 May 2025 12:01:18 +0000
ROA not before: Thu 29 May 2025 12:01:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211440
IP address blocks: 45.94.238.0/24 maxlen: 24
45.148.44.0/24 maxlen: 24
45.148.45.0/24 maxlen: 24
45.148.46.0/24 maxlen: 24
45.148.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1b:eb:0c:9f:62:14:b4:40:eb:30:84:e0:27:84:12:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Validity
Not Before: May 29 12:01:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66598f8786337a810a77715b986aaebd8f38a694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e0:d0:d7:32:7b:c4:5d:58:56:c5:e7:2b:80:
a3:21:fb:55:92:2e:5a:39:95:56:dd:f6:43:7d:70:
92:8d:11:28:36:5e:b7:1f:eb:0c:e5:c1:cd:50:9a:
ee:98:11:a7:a1:89:4d:d6:7d:3a:00:78:a9:cf:df:
56:cb:30:98:f6:55:5a:68:42:ed:a0:da:a2:d6:a8:
4b:c8:b4:59:1c:6b:ac:65:be:77:91:ac:67:00:11:
3b:02:0c:2c:2a:dc:11:d2:6a:c8:ae:c8:e9:27:19:
38:24:10:2a:3d:29:2f:64:82:e3:b5:96:b2:01:14:
46:0c:aa:44:ce:d2:bf:57:95:7a:8d:39:e6:68:c8:
43:f0:dc:8e:ab:62:f5:d0:93:bf:42:5f:b2:5f:da:
3f:69:30:8d:da:0f:cc:e2:c4:66:7a:2b:cd:bf:1d:
04:1c:b7:2c:46:27:f7:63:77:a4:c9:8a:25:77:5d:
fe:92:af:5b:a3:20:0e:b7:0f:cb:1d:3a:31:8c:dd:
4b:08:61:2c:c9:79:7e:c9:41:e2:fe:b0:23:1c:45:
37:f3:40:d1:58:ee:d6:03:45:36:32:61:13:a0:ef:
b3:22:bd:65:6b:ea:b4:9d:6b:82:bc:a8:19:58:4a:
64:8c:29:d3:d6:7d:c7:82:51:1f:a4:19:18:9d:15:
1b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:59:8F:87:86:33:7A:81:0A:77:71:5B:98:6A:AE:BD:8F:38:A6:94
X509v3 Authority Key Identifier:
keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/ZlmPh4YzeoEKd3FbmGquvY84ppQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.238.0/24
45.148.44.0/22
Signature Algorithm: sha256WithRSAEncryption
93:fc:3b:61:35:1e:0d:56:a8:83:c7:26:b4:75:41:06:0f:5b:
7e:3c:e4:04:3a:66:c3:86:12:46:be:be:30:f5:2f:73:40:b7:
78:ce:a1:9c:1c:74:87:d1:9a:72:f8:29:e9:9b:6b:75:60:8b:
b2:ea:72:80:ff:12:09:d9:3b:e7:14:9c:41:73:12:7c:9f:c0:
6a:1f:fc:82:82:14:f6:f2:36:20:e9:89:ab:a1:f0:e4:58:2d:
4f:8e:ac:64:c7:c4:6d:22:92:65:84:ac:9a:20:18:7c:5e:8a:
f5:12:7d:a9:f0:f9:05:05:f2:11:73:6f:eb:b4:7c:69:47:76:
a2:3f:87:65:85:b6:5c:fc:0a:82:c4:a2:01:c2:38:ab:25:58:
50:2b:c2:d1:12:9d:c3:8f:c6:87:f5:b3:6b:01:a6:05:fa:3f:
a8:ab:56:bc:f5:65:17:01:47:0e:a2:a9:d8:4c:c6:9e:94:20:
35:00:ad:ea:25:3a:34:ca:22:a4:79:ec:56:e4:bd:73:31:f2:
97:e9:b8:a2:00:36:35:58:b4:c9:49:d5:7f:7f:8d:e3:93:2d:
8d:d3:d9:8a:e8:13:cf:e6:eb:7d:12:1f:fd:e5:ca:d1:e0:f3:
2c:10:0a:a2:f0:0b:73:23:ef:bd:9a:56:50:6e:ea:67:59:bf:
34:c3:23:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:40:52 2025 by rpki-client