Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/ZdUtLI4dLqwJHl3mO0STBIhMJjA.roa
File: ZdUtLI4dLqwJHl3mO0STBIhMJjA.roa (raw, json)
Hash identifier: NTSynMpq0Skiwo11YpQ86mOrR6zS/n5TfG+K1fujWFU=
Subject key identifier: 65:D5:2D:2C:8E:1D:2E:AC:09:1E:5D:E6:3B:44:93:04:88:4C:26:30
Certificate issuer: /CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Certificate serial: 018D65E0035D3C8C557AC00196185CB154A5
Authority key identifier: 7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/ZdUtLI4dLqwJHl3mO0STBIhMJjA.roa
Signing time: Thu 01 Feb 2024 18:13:16 +0000
ROA not before: Thu 01 Feb 2024 18:13:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24971
IP address blocks: 37.205.8.0/22 maxlen: 22
37.205.12.0/22 maxlen: 22
45.142.51.0/24 maxlen: 24
185.8.164.0/23 maxlen: 23
185.8.166.0/23 maxlen: 24
2a03:3b40::/40 maxlen: 40
2a03:3b40:100::/40 maxlen: 40
2a03:3b40:200::/39 maxlen: 39
Validation: Failed, certificate revoked on Thu 01 Feb 2024 19:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:65:e0:03:5d:3c:8c:55:7a:c0:01:96:18:5c:b1:54:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Validity
Not Before: Feb 1 18:13:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65d52d2c8e1d2eac091e5de63b449304884c2630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:91:0c:bc:e1:cc:0e:52:78:25:24:62:53:
70:77:8a:06:c4:85:b5:2c:72:2e:56:7a:30:5a:ad:
b3:b4:5b:22:61:a5:cb:02:05:c1:7d:99:98:95:56:
22:70:79:aa:21:af:3a:b8:5a:fc:71:cc:ed:b6:22:
84:50:12:db:4f:30:19:db:b6:1e:20:6d:6f:87:92:
e2:2f:ad:d2:b6:e0:2b:fe:04:97:9b:e9:11:49:8f:
84:34:29:16:6e:43:46:d8:b0:4a:b0:92:01:49:fa:
2e:e1:e0:62:70:0d:87:c2:79:70:c4:65:2e:9e:85:
77:15:ad:1c:03:9a:78:fd:bd:7e:f7:d7:90:05:4b:
92:9c:c7:51:08:dc:a2:6b:9c:75:f5:91:1f:ff:2f:
22:d8:97:49:b4:31:2a:72:71:34:ba:cc:78:e2:87:
32:71:5f:5b:82:21:fd:9d:61:b9:05:22:42:d4:83:
6a:ec:bb:57:d5:05:f2:6b:4b:0c:8b:70:7b:ab:06:
6f:da:b8:dd:46:db:dc:54:06:a8:17:55:a5:78:48:
62:c1:93:f3:85:2d:75:d2:cf:94:dc:f9:12:76:3d:
f1:08:e9:1c:cc:29:27:3f:2a:85:88:dd:ce:01:f6:
75:8f:46:f7:ca:c5:3a:f2:a5:81:13:2c:62:c3:0e:
36:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D5:2D:2C:8E:1D:2E:AC:09:1E:5D:E6:3B:44:93:04:88:4C:26:30
X509v3 Authority Key Identifier:
keyid:7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/ZdUtLI4dLqwJHl3mO0STBIhMJjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.205.8.0/21
45.142.51.0/24
185.8.164.0/22
IPv6:
2a03:3b40::/38
Signature Algorithm: sha256WithRSAEncryption
7a:0c:48:71:49:01:26:61:9a:14:5b:db:1f:0d:34:6d:25:13:
cb:a6:b0:78:57:fd:d8:a3:04:c5:72:47:9e:7d:97:82:9f:88:
c9:fd:a1:5f:dc:11:31:ab:e6:76:4c:20:ff:26:48:e2:c0:af:
b8:5b:50:7b:50:53:93:4e:a4:d2:44:08:b8:eb:fb:20:44:4b:
6f:fd:9c:32:57:26:36:29:a7:f9:73:5b:ae:26:34:31:d3:9b:
8e:a9:7b:f0:b6:6f:e4:03:22:1c:67:8c:e6:70:ae:f3:5d:d7:
d0:fe:4a:39:88:45:37:77:13:2d:8d:b5:db:56:57:fd:b6:f2:
98:fd:ed:4e:20:bc:c1:4e:92:84:30:b8:25:2b:29:39:2d:44:
37:cc:b0:e3:7c:8b:9a:d5:6a:1c:20:76:b6:8b:34:5c:cc:c4:
39:d1:b9:64:a4:92:d5:e6:ba:4d:67:f0:b1:52:80:a9:06:88:
53:46:29:3c:24:aa:f9:28:bd:d2:f8:65:1f:16:d8:56:d9:44:
69:82:f5:67:51:8b:d4:36:96:6d:0f:f1:da:f9:45:f6:d4:2a:
59:6a:be:c2:94:63:2b:06:7f:e5:b2:94:b1:00:63:17:3d:f5:
ba:12:fc:a3:0d:d5:0b:4a:57:15:bf:97:b5:a8:df:4a:b4:24:
4f:ae:af:82
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAY1l4ANdPIxVesABlhhcsVSlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMjZjZmNkYTM5NzE2M2Q4MzVjODk3YWRlYTkwNzFlNjFj
OGJjNGQwHhcNMjQwMjAxMTgxMzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWQ1MmQyYzhlMWQyZWFjMDkxZTVkZTYzYjQ0OTMwNDg4NGMyNjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4ORDLzhzA5SeCUkYlNwd4oGxIW1
LHIuVnowWq2ztFsiYaXLAgXBfZmYlVYicHmqIa86uFr8cczttiKEUBLbTzAZ27Ye
IG1vh5LiL63StuAr/gSXm+kRSY+ENCkWbkNG2LBKsJIBSfou4eBicA2HwnlwxGUu
noV3Fa0cA5p4/b1+99eQBUuSnMdRCNyia5x19ZEf/y8i2JdJtDEqcnE0usx44ocy
cV9bgiH9nWG5BSJC1INq7LtX1QXya0sMi3B7qwZv2rjdRtvcVAaoF1WleEhiwZPz
hS110s+U3PkSdj3xCOkczCknPyqFiN3OAfZ1j0b3ysU68qWBEyxiww42zwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGXVLSyOHS6sCR5d5jtEkwSITCYwMB8GA1UdIwQY
MBaAFHsmz82jlxY9g1yJet6pBx5hyLxNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84OTc1N2EtOTExYS00MWI3LWJhZDEt
NmNkNTFjODRjMDE1LzEvWmRVdExJNGRMcXdKSGwzbU8wU1RCSWhNSmpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi84OTc1N2EtOTExYS00MWI3LWJhZDEtNmNkNTFjODRjMDE1
LzEvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAYBAIAATASAwQDJc0IAwQA
LY4zAwQCuQikMA4EAgACMAgDBgIqAztAADANBgkqhkiG9w0BAQsFAAOCAQEAegxI
cUkBJmGaFFvbHw00bSUTy6aweFf92KMExXJHnn2Xgp+Iyf2hX9wRMavmdkwg/yZI
4sCvuFtQe1BTk06k0kQIuOv7IERLb/2cMlcmNimn+XNbriY0MdObjql78LZv5AMi
HGeM5nCu813X0P5KOYhFN3cTLY2121ZX/bbymP3tTiC8wU6ShDC4JSspOS1EN8yw
43yLmtVqHCB2tos0XMzEOdG5ZKSS1ea6TWfwsVKAqQaIU0YpPCSq+Si90vhlHxbY
VtlEaYL1Z1GL1DaWbQ/x2vlF9tQqWWq+wpRjKwZ/5bKUsQBjFz31uhL8ow3VC0pX
Fb+XtajfSrQkT66vgg==
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:39:37 2025 by rpki-client