Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/zQNZ8XCkfAT5Dp51XsKSNcUZ46k.roa
File: zQNZ8XCkfAT5Dp51XsKSNcUZ46k.roa (raw, json)
Hash identifier: XK3LYLHfv911brL9GERuRkQU4H0C9g85QiVizH3EAG8=
Subject key identifier: CD:03:59:F1:70:A4:7C:04:F9:0E:9E:75:5E:C2:92:35:C5:19:E3:A9
Certificate issuer: /CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Certificate serial: 01970D65A6C1AE0C0DD3361DA2B260A32B80
Authority key identifier: 5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/zQNZ8XCkfAT5Dp51XsKSNcUZ46k.roa
Signing time: Mon 26 May 2025 16:20:54 +0000
ROA not before: Mon 26 May 2025 16:20:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202391
IP address blocks: 91.237.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 May 2025 16:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0d:65:a6:c1:ae:0c:0d:d3:36:1d:a2:b2:60:a3:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Validity
Not Before: May 26 16:20:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd0359f170a47c04f90e9e755ec29235c519e3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fb:a3:68:45:0f:bb:b9:ef:f4:61:72:b9:a0:
03:8f:37:23:c0:7c:54:f5:bd:bc:7d:9a:0d:fa:1e:
56:b7:73:c9:86:83:23:57:88:fc:69:81:bc:e8:57:
54:89:a7:b2:7c:b4:e2:c5:67:1c:01:11:68:e2:fa:
8d:6b:54:1a:c5:38:52:1f:02:f1:2e:6e:7e:f4:03:
95:35:50:cb:cf:1f:c2:4d:60:9c:b8:2d:00:20:37:
45:64:59:44:c2:40:05:a1:f6:91:22:3c:72:87:05:
50:c3:02:10:5c:6e:21:93:b4:5c:8b:fb:b3:0f:35:
ee:e5:11:d2:88:df:7d:91:6d:0c:a2:c4:2e:de:46:
9c:b6:15:59:bc:e1:10:ac:e3:02:f7:18:1d:43:f6:
c6:e7:51:d1:48:3e:e3:f4:9e:df:2e:cd:f0:31:b7:
c6:4e:50:70:cb:bf:aa:8b:63:98:75:ed:e8:98:1e:
f0:0d:e7:e7:d3:fd:45:1c:05:0c:65:8b:3a:b5:d5:
90:e0:5e:39:76:37:e4:e6:7b:6a:91:cf:c3:5c:fe:
9b:47:f0:5f:94:68:e7:3b:aa:f5:33:f4:91:20:27:
21:1e:91:df:ed:2a:c3:02:92:b2:87:8e:1c:b3:00:
d8:fd:1f:db:c7:53:da:f7:3f:c0:06:37:a8:7a:7f:
23:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:03:59:F1:70:A4:7C:04:F9:0E:9E:75:5E:C2:92:35:C5:19:E3:A9
X509v3 Authority Key Identifier:
keyid:5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/zQNZ8XCkfAT5Dp51XsKSNcUZ46k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.254.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:60:44:29:97:bc:96:fc:4a:26:3e:e3:3f:f1:65:7d:82:5d:
e0:99:71:f2:56:fe:64:b1:cf:94:56:34:92:44:62:67:2d:9d:
d5:e2:58:de:a2:1e:4e:1e:ff:6e:e0:37:e4:61:92:55:bf:bc:
68:0f:bf:02:7f:e4:17:5c:49:97:07:a0:ce:81:fa:e5:24:71:
71:b1:95:61:10:c9:ff:b0:9f:6c:b1:6b:c5:dd:c7:b3:e4:f2:
f6:8e:80:72:c8:d7:5f:26:5c:11:24:2a:33:bc:c8:5d:1b:4e:
00:fd:c8:ed:23:76:f6:9b:5f:b5:9d:6a:43:b0:b6:45:f2:f2:
e4:37:fd:53:29:79:b1:45:57:cd:fb:6a:3e:3d:39:63:45:71:
41:90:a0:eb:87:16:b7:e5:f2:28:a6:63:5c:1a:27:49:41:e2:
47:28:d7:3b:91:8c:4c:46:cc:a9:38:b6:f7:c2:b5:85:c8:0a:
90:c1:ba:ac:94:16:fc:19:82:46:29:00:52:2e:2d:90:2e:86:
3a:91:1d:f9:16:83:4b:67:07:e4:29:4e:f0:72:97:5b:b4:e4:
87:b1:4a:a9:53:ff:4b:74:77:c5:73:71:71:ec:7a:44:dc:10:
4e:1f:4e:08:5b:9d:da:4c:65:bc:06:eb:3b:6b:80:bc:83:f3:
cb:05:a9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:17:17 2025 by rpki-client