Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/ZUv6KoBPbkPCWor7vzygksNw1jk.roa
File: ZUv6KoBPbkPCWor7vzygksNw1jk.roa (raw, json)
Hash identifier: jq5qU2SwHlSLZwTA+6sjWS8SijH5T8qR/6dHyWZtIE0=
Subject key identifier: 65:4B:FA:2A:80:4F:6E:43:C2:5A:8A:FB:BF:3C:A0:92:C3:70:D6:39
Certificate issuer: /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial: 01936D1F06B81F6B20E609AED203B8BFA911
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/ZUv6KoBPbkPCWor7vzygksNw1jk.roa
Signing time: Wed 27 Nov 2024 10:16:10 +0000
ROA not before: Wed 27 Nov 2024 10:16:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208866
IP address blocks: 45.82.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:1f:06:b8:1f:6b:20:e6:09:ae:d2:03:b8:bf:a9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Validity
Not Before: Nov 27 10:16:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=654bfa2a804f6e43c25a8afbbf3ca092c370d639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0a:e3:0b:cc:d8:9d:92:8d:6c:32:5c:9e:e8:
34:99:ba:ad:2f:5f:67:41:43:50:7b:d0:a8:59:fa:
c5:d2:46:ef:cd:bc:68:10:ae:54:c8:1e:8a:27:96:
9f:b2:4f:8f:32:7f:e4:6e:84:9d:27:1b:be:3c:8a:
46:e3:3c:f0:9d:e1:91:b3:68:80:dd:ab:33:57:c8:
80:c9:2b:40:40:76:17:63:da:d5:93:23:0d:70:22:
17:ce:75:ec:66:f3:52:13:3e:81:14:32:f5:22:55:
19:a8:6e:f4:8e:34:be:68:1b:8c:a9:01:59:12:6b:
1e:9d:10:fc:5b:cc:10:9b:fe:09:64:4b:0e:5e:6d:
4e:a9:2a:03:b0:68:6c:f5:0d:44:66:9b:89:9f:bb:
4d:d3:82:59:da:c1:08:d9:a1:44:6c:90:ff:ad:33:
eb:78:eb:d4:b3:f3:aa:6a:90:74:45:6d:0f:20:4a:
7e:86:22:e7:5a:65:b8:c4:46:e0:10:a0:80:71:75:
87:f8:a7:54:db:7b:a0:ac:b0:74:24:c6:b5:2a:5d:
aa:36:66:1f:32:60:dd:92:a7:de:20:e7:b3:5e:0b:
66:a3:a8:37:e4:19:08:3a:4d:f4:4b:f2:5d:57:3a:
e4:ca:a5:3c:45:06:8a:f2:fe:42:b1:07:08:b0:ca:
04:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4B:FA:2A:80:4F:6E:43:C2:5A:8A:FB:BF:3C:A0:92:C3:70:D6:39
X509v3 Authority Key Identifier:
keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/ZUv6KoBPbkPCWor7vzygksNw1jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:1c:d4:76:60:41:a8:fd:67:4c:38:88:d1:e7:0f:68:b4:4c:
90:c6:f3:d6:f8:22:20:1c:c2:1a:61:af:fa:95:23:3b:47:bf:
fb:5d:3c:65:9c:f0:04:a5:01:ba:72:3d:af:e6:64:b2:b9:71:
b2:60:e4:06:50:d4:c6:38:93:4c:dd:a9:57:06:d2:eb:33:33:
ac:df:85:dc:8d:f3:df:bb:53:15:7c:b8:c6:26:7e:76:27:04:
bc:1f:7d:5e:01:4f:0f:56:30:8f:c1:a4:d6:28:ac:a3:1d:36:
e3:c6:45:06:36:40:4a:d7:b0:f4:76:ed:ce:47:3e:ab:08:8c:
d8:58:e0:f0:6f:87:5e:e2:ea:27:7e:1b:44:4d:50:b7:b4:12:
54:3c:29:d4:ff:d1:98:9f:45:26:bd:08:9c:c1:5f:b7:eb:72:
b2:65:55:87:11:c7:ec:8f:11:6b:16:7d:b6:92:59:6f:f9:4d:
e3:bf:10:f1:31:87:f7:34:65:6c:3b:cb:ab:89:02:9d:0f:27:
58:45:e1:fb:5f:a0:0b:e7:47:89:09:1b:31:eb:f9:9a:65:fe:
bc:fb:b5:b8:f3:36:c2:e6:d9:1b:aa:f6:c6:66:f0:d0:64:77:
8c:fc:b4:27:2a:b2:16:14:14:6e:f4:a8:df:e8:cb:f8:2f:08:
3a:00:67:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNtHwa4H2sg5gmu0gO4v6kRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZjVmY2VkYmRiODRkZDUyZmM2NzcwZDdjY2ZkM2ZjNjY4
NGZhNDEwHhcNMjQxMTI3MTAxNjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTRiZmEyYTgwNGY2ZTQzYzI1YThhZmJiZjNjYTA5MmMzNzBkNjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywrjC8zYnZKNbDJcnug0mbqtL19n
QUNQe9CoWfrF0kbvzbxoEK5UyB6KJ5afsk+PMn/kboSdJxu+PIpG4zzwneGRs2iA
3aszV8iAyStAQHYXY9rVkyMNcCIXznXsZvNSEz6BFDL1IlUZqG70jjS+aBuMqQFZ
EmsenRD8W8wQm/4JZEsOXm1OqSoDsGhs9Q1EZpuJn7tN04JZ2sEI2aFEbJD/rTPr
eOvUs/OqapB0RW0PIEp+hiLnWmW4xEbgEKCAcXWH+KdU23ugrLB0JMa1Kl2qNmYf
MmDdkqfeIOezXgtmo6g35BkIOk30S/JdVzrkyqU8RQaK8v5CsQcIsMoE9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGVL+iqAT25DwlqK+788oJLDcNY5MB8GA1UdIwQY
MBaAFJH1/O29uE3VL8Z3DXzP0/xmhPpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMt
OGNjOTgzMzYxMWU2LzEvWlV2NktvQlBia1BDV29yN3Z6eWdrc053MWprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMtOGNjOTgzMzYxMWU2
LzEva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVI/MA0G
CSqGSIb3DQEBCwUAA4IBAQBLHNR2YEGo/WdMOIjR5w9otEyQxvPW+CIgHMIaYa/6
lSM7R7/7XTxlnPAEpQG6cj2v5mSyuXGyYOQGUNTGOJNM3alXBtLrMzOs34XcjfPf
u1MVfLjGJn52JwS8H31eAU8PVjCPwaTWKKyjHTbjxkUGNkBK17D0du3ORz6rCIzY
WODwb4de4uonfhtETVC3tBJUPCnU/9GYn0UmvQicwV+363KyZVWHEcfsjxFrFn22
kllv+U3jvxDxMYf3NGVsO8uriQKdDydYReH7X6AL50eJCRsx6/maZf68+7W48zbC
5tkbqvbGZvDQZHeM/LQnKrIWFBRu9Kjf6Mv4Lwg6AGfL
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:09:52 2025 by rpki-client