Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ZyC2HB8kxIrXXOMyTtppFsRxsT4.roa
File: ZyC2HB8kxIrXXOMyTtppFsRxsT4.roa (raw, json)
Hash identifier: 2XzGT4m94FVrvlbn9dSoXEXhUSHz+7wz2mSbYlUBuTU=
Subject key identifier: 67:20:B6:1C:1F:24:C4:8A:D7:5C:E3:32:4E:DA:69:16:C4:71:B1:3E
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0196EDF20E21D8D0C228B80923E7EC2208DE
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ZyC2HB8kxIrXXOMyTtppFsRxsT4.roa
Signing time: Tue 20 May 2025 13:46:25 +0000
ROA not before: Tue 20 May 2025 13:46:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20115
IP address blocks: 92.71.32.0/20 maxlen: 24
92.71.64.0/18 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 May 2025 04:46:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:f2:0e:21:d8:d0:c2:28:b8:09:23:e7:ec:22:08:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: May 20 13:46:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6720b61c1f24c48ad75ce3324eda6916c471b13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fd:e6:48:c4:81:4f:1e:05:04:b6:ad:4f:a5:
db:76:95:ac:d4:51:01:f2:6c:16:c2:ac:af:39:26:
23:5b:e0:db:11:5a:eb:3a:3d:f1:1b:30:b4:3a:ad:
be:04:dc:60:cd:c6:59:05:82:76:b7:d2:6d:42:51:
ed:32:2b:dc:db:f9:b6:80:f1:bc:7a:db:f0:3e:82:
e1:de:c9:dd:ed:1e:f8:b4:db:aa:d0:1a:c9:5a:d0:
89:0e:54:8f:41:3d:4e:30:c3:39:6f:d7:4a:61:60:
aa:87:82:09:0a:3a:36:01:aa:78:2c:f6:4a:ed:a2:
02:30:5b:7e:09:07:a0:c0:b1:91:d5:66:7e:a5:f0:
aa:24:40:6e:e4:35:da:48:b1:c5:8f:be:b9:03:a7:
f8:0c:08:77:18:aa:ce:d4:60:e5:33:4f:bb:11:84:
51:cf:d2:8d:36:bf:95:03:c5:dd:d5:d7:68:25:90:
75:21:6e:6d:4b:e1:bc:8e:af:49:53:3a:98:82:1b:
bd:40:d8:c2:60:49:e6:51:e9:de:0a:7c:0f:8f:21:
57:f1:f3:05:ff:30:54:91:b3:73:50:bf:42:76:9d:
a5:19:f7:a1:87:33:41:32:cd:e3:49:c9:a7:c5:71:
7a:cb:1d:04:98:4f:65:a2:20:e7:14:3a:62:a5:6a:
fc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:20:B6:1C:1F:24:C4:8A:D7:5C:E3:32:4E:DA:69:16:C4:71:B1:3E
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ZyC2HB8kxIrXXOMyTtppFsRxsT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.71.32.0/20
92.71.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b7:71:38:2d:2e:51:16:18:c9:11:d0:29:7f:20:be:2b:cf:b9:
e5:f5:f3:04:b7:d5:f0:0b:c0:38:8f:01:76:3b:3f:de:f6:ae:
c0:32:3f:ee:87:41:5a:b2:b1:20:89:37:69:b5:37:c8:f6:c7:
7b:bf:d1:ef:30:94:38:a4:16:bc:25:71:a3:cf:2a:bc:40:99:
8b:4d:47:c2:08:9f:4a:95:ee:86:51:fb:32:fa:65:c5:6b:29:
ec:85:92:e5:a6:f6:cb:a6:70:03:02:ae:57:37:76:df:e8:37:
f2:c8:92:b2:2b:a3:6f:a7:13:0f:d5:a5:d6:9e:6f:a2:06:bb:
52:41:f4:3a:53:15:f8:ed:87:15:8e:24:62:29:68:cc:45:ef:
0b:5e:86:cb:73:dd:a4:0c:d8:94:5e:c1:98:b7:de:ee:bf:a9:
4c:38:71:5b:e2:cc:68:92:b2:f0:70:89:6c:6b:d3:6d:61:0b:
58:12:da:c5:67:4d:9e:9b:2d:79:2f:f0:64:d1:ea:a3:25:57:
a3:43:91:72:b5:6f:2b:09:7e:87:9d:ef:9a:d3:f2:6b:98:61:
25:72:a3:4c:39:8c:38:74:0b:8f:1a:7d:cf:72:a7:f8:16:f2:
02:e3:24:8b:e2:cf:0b:d5:71:4b:54:6e:2a:f8:7a:aa:b2:b1:
0c:87:da:da
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZbt8g4h2NDCKLgJI+fsIgjeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjUwNTIwMTM0NjI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzIwYjYxYzFmMjRjNDhhZDc1Y2UzMzI0ZWRhNjkxNmM0NzFiMTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf3mSMSBTx4FBLatT6XbdpWs1FEB
8mwWwqyvOSYjW+DbEVrrOj3xGzC0Oq2+BNxgzcZZBYJ2t9JtQlHtMivc2/m2gPG8
etvwPoLh3snd7R74tNuq0BrJWtCJDlSPQT1OMMM5b9dKYWCqh4IJCjo2Aap4LPZK
7aICMFt+CQegwLGR1WZ+pfCqJEBu5DXaSLHFj765A6f4DAh3GKrO1GDlM0+7EYRR
z9KNNr+VA8Xd1ddoJZB1IW5tS+G8jq9JUzqYghu9QNjCYEnmUeneCnwPjyFX8fMF
/zBUkbNzUL9Cdp2lGfehhzNBMs3jScmnxXF6yx0EmE9loiDnFDpipWr8ewIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGcgthwfJMSK11zjMk7aaRbEcbE+MB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvWnlDMkhCOGt4SXJYWE9NeVR0cHBGc1J4c1Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEXEcgAwQG
XEdAMA0GCSqGSIb3DQEBCwUAA4IBAQC3cTgtLlEWGMkR0Cl/IL4rz7nl9fMEt9Xw
C8A4jwF2Oz/e9q7AMj/uh0FasrEgiTdptTfI9sd7v9HvMJQ4pBa8JXGjzyq8QJmL
TUfCCJ9Kle6GUfsy+mXFaynshZLlpvbLpnADAq5XN3bf6DfyyJKyK6NvpxMP1aXW
nm+iBrtSQfQ6UxX47YcVjiRiKWjMRe8LXobLc92kDNiUXsGYt97uv6lMOHFb4sxo
krLwcIlsa9NtYQtYEtrFZ02emy15L/Bk0eqjJVejQ5FytW8rCX6Hne+a0/JrmGEl
cqNMOYw4dAuPGn3Pcqf4FvIC4ySL4s8L1XFLVG4q+HqqsrEMh9ra
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:37:20 2025 by rpki-client