Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/czzIfyXFBFXt7AhKEtCoGKbQWlE.roa
File: czzIfyXFBFXt7AhKEtCoGKbQWlE.roa (raw, json)
Hash identifier: nDDQmoC+AxEjGCrwgbnZNkjqn4vDOhO6RuiWw/SrisU=
Subject key identifier: 73:3C:C8:7F:25:C5:04:55:ED:EC:08:4A:12:D0:A8:18:A6:D0:5A:51
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019424B3B058D1313929888399BA749C6B79
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/czzIfyXFBFXt7AhKEtCoGKbQWlE.roa
Signing time: Thu 02 Jan 2025 01:49:03 +0000
ROA not before: Thu 02 Jan 2025 01:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53856
IP address blocks: 94.131.64.0/22 maxlen: 24
94.131.72.0/21 maxlen: 24
95.164.24.0/22 maxlen: 22
95.164.28.0/22 maxlen: 22
95.164.96.0/21 maxlen: 21
95.164.104.0/21 maxlen: 21
Validation: Failed, certificate revoked on Sun 05 Jan 2025 22:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b0:58:d1:31:39:29:88:83:99:ba:74:9c:6b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 2 01:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=733cc87f25c50455edec084a12d0a818a6d05a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7a:ee:a1:0b:b5:ae:7c:6d:df:72:44:e2:e3:
62:c5:d4:49:66:12:aa:d0:1e:32:61:48:ea:d1:80:
01:65:d2:87:24:b4:bf:0a:6d:c1:66:53:2c:a8:07:
51:3a:46:1f:a3:32:ed:39:6e:75:20:b3:94:eb:42:
d7:0c:9a:42:2b:59:0f:a3:77:cd:54:9d:33:c1:37:
4c:9a:8f:a4:8d:45:e3:f0:b1:2f:57:da:9f:cf:89:
20:bd:db:42:ec:23:a3:ef:e6:ce:67:44:1d:05:7c:
2d:e3:e6:4c:0c:75:b6:a7:dc:3b:c9:82:2e:43:f3:
c1:f6:5b:ab:54:6e:36:b7:c1:bb:9d:ee:68:2b:d2:
d4:2e:49:1b:d0:73:fc:90:e5:0a:74:4b:ab:9d:0e:
64:2c:a2:92:87:e7:f8:13:0a:37:e9:71:8e:fa:67:
a2:2a:c5:32:dc:4d:d5:70:fe:91:71:6e:b0:6f:1d:
e3:d5:d1:f1:0b:2f:78:7d:f4:53:8a:d6:0f:d5:5e:
4e:e6:3d:5f:4f:68:f5:3f:33:1a:95:23:f9:2d:c7:
ae:d7:35:48:8f:14:e3:0d:a9:bf:0f:e9:d6:e2:d9:
52:50:31:4c:2e:7e:c9:2e:3b:8d:f6:c2:60:fd:3c:
a9:b5:ee:a4:72:63:37:fa:34:26:ba:30:16:7d:1c:
7f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3C:C8:7F:25:C5:04:55:ED:EC:08:4A:12:D0:A8:18:A6:D0:5A:51
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/czzIfyXFBFXt7AhKEtCoGKbQWlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.64.0/22
94.131.72.0/21
95.164.24.0/21
95.164.96.0/20
Signature Algorithm: sha256WithRSAEncryption
48:05:17:e9:40:eb:82:11:7c:e6:9c:22:d0:d6:d8:4b:52:dd:
3a:95:e5:44:19:d1:ff:27:37:9f:83:60:d9:f5:5c:d9:8e:4d:
43:e6:b4:60:2f:5b:8a:3b:31:12:5c:3c:82:ae:1d:a8:52:08:
f7:c8:2c:fc:c1:1e:61:1d:90:e0:c3:27:b7:b4:26:69:7f:d4:
a6:17:48:0f:54:27:ed:cb:08:bb:eb:0e:3a:13:fb:59:0e:9f:
0a:8e:09:6d:18:81:97:da:ab:71:e9:11:87:c1:54:d9:36:50:
67:fa:5b:3d:1b:03:fe:37:3f:28:5a:b7:c6:d3:8b:84:5c:f8:
ce:05:7c:b2:d8:ef:16:30:dd:67:dd:56:76:58:7c:fe:a9:42:
10:01:57:9f:96:36:89:ff:93:43:1d:e8:28:7f:5c:9e:2e:06:
96:06:58:92:65:da:16:97:e1:48:87:f0:ac:76:64:29:60:7e:
a4:ab:01:9f:57:7e:85:33:b0:21:d3:db:b8:78:11:4c:ca:5c:
d7:de:43:8c:3d:61:83:e1:ea:b4:49:ca:84:23:f8:10:72:2f:
f9:3e:ca:47:7b:da:ae:c5:35:a7:e1:71:98:53:59:ed:a9:65:
1c:9d:cc:37:8a:bd:02:66:44:c0:74:b9:6a:89:12:67:0f:e7:
87:1e:af:2e
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQks7BY0TE5KYiDmbp0nGt5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj
NjJhMDMwHhcNMjUwMTAyMDE0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzNjYzg3ZjI1YzUwNDU1ZWRlYzA4NGExMmQwYTgxOGE2ZDA1YTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnruoQu1rnxt33JE4uNixdRJZhKq
0B4yYUjq0YABZdKHJLS/Cm3BZlMsqAdROkYfozLtOW51ILOU60LXDJpCK1kPo3fN
VJ0zwTdMmo+kjUXj8LEvV9qfz4kgvdtC7COj7+bOZ0QdBXwt4+ZMDHW2p9w7yYIu
Q/PB9lurVG42t8G7ne5oK9LULkkb0HP8kOUKdEurnQ5kLKKSh+f4Ewo36XGO+mei
KsUy3E3VcP6RcW6wbx3j1dHxCy94ffRTitYP1V5O5j1fT2j1PzMalSP5Lceu1zVI
jxTjDam/D+nW4tlSUDFMLn7JLjuN9sJg/Typte6kcmM3+jQmujAWfRx/zQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHM8yH8lxQRV7ewIShLQqBim0FpRMB8GA1UdIwQY
MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt
ZTk3MjRhN2E2YmM4LzEvY3p6SWZ5WEZCRlh0N0FoS0V0Q29HS2JRV2xFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4
LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCXoNAAwQD
XoNIAwQDX6QYAwQEX6RgMA0GCSqGSIb3DQEBCwUAA4IBAQBIBRfpQOuCEXzmnCLQ
1thLUt06leVEGdH/Jzefg2DZ9VzZjk1D5rRgL1uKOzESXDyCrh2oUgj3yCz8wR5h
HZDgwye3tCZpf9SmF0gPVCftywi76w46E/tZDp8KjgltGIGX2qtx6RGHwVTZNlBn
+ls9GwP+Nz8oWrfG04uEXPjOBXyy2O8WMN1n3VZ2WHz+qUIQAVefljaJ/5NDHego
f1yeLgaWBliSZdoWl+FIh/CsdmQpYH6kqwGfV36FM7Ah09u4eBFMylzX3kOMPWGD
4eq0ScqEI/gQci/5PspHe9quxTWn4XGYU1ntqWUcncw3ir0CZkTAdLlqiRJnD+eH
Hq8u
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:53:30 2025 by rpki-client