Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/ZW2mHMqARKmkVjvsXK-ANHlrnOg.roa
File: ZW2mHMqARKmkVjvsXK-ANHlrnOg.roa (raw, json)
Hash identifier: n5gQpck2cCnXDMgh0JvWH1wgdgqHNK55ZTzXqxp4wZY=
Subject key identifier: 65:6D:A6:1C:CA:80:44:A9:A4:56:3B:EC:5C:AF:80:34:79:6B:9C:E8
Certificate issuer: /CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Certificate serial: 018CC801C04D1FA2B908C1E6EA17B7422542
Authority key identifier: 1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/ZW2mHMqARKmkVjvsXK-ANHlrnOg.roa
Signing time: Tue 02 Jan 2024 02:30:07 +0000
ROA not before: Tue 02 Jan 2024 02:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61194
IP address blocks: 46.245.208.0/21 maxlen: 21
5.159.40.0/21 maxlen: 21
185.61.60.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:c0:4d:1f:a2:b9:08:c1:e6:ea:17:b7:42:25:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Validity
Not Before: Jan 2 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=656da61cca8044a9a4563bec5caf8034796b9ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:43:ab:84:3d:0d:3d:15:db:ea:7d:5d:7a:8a:
c1:77:78:ab:3d:95:12:ea:f5:54:a1:30:7d:75:dd:
ce:34:47:75:22:b2:46:1b:e8:3c:fa:b8:0f:00:a1:
b3:d9:d2:9a:25:d1:ad:0e:2e:f5:03:8f:a1:18:6c:
9c:ba:fa:ee:d7:15:f4:88:56:d5:a0:94:e5:c3:08:
3f:e0:7a:1a:e5:2f:89:0b:27:25:d0:2f:21:67:0a:
aa:9a:6c:22:71:22:35:6a:c8:93:7e:22:c0:02:a2:
8b:84:9f:be:2f:54:77:78:e7:6a:23:2e:cc:65:4a:
00:3a:2a:65:d4:0c:0f:6c:15:d0:a4:10:6c:eb:c2:
f2:29:27:82:af:3c:04:47:82:52:dc:e7:24:14:50:
71:05:48:a2:6b:85:1c:fc:3b:5b:8e:8f:bf:84:80:
bf:59:43:95:b3:1f:ac:85:3f:1f:9c:85:17:1d:33:
82:0a:a9:34:64:6f:6d:2b:64:1a:11:1c:87:8a:fe:
d5:27:86:a9:70:af:15:38:4f:cc:89:2d:de:e4:d4:
b5:75:dd:e2:69:f4:64:e6:5c:58:65:38:b8:c8:71:
ce:4c:09:b3:60:ee:9b:38:6f:8f:6a:f7:4e:a9:65:
06:2a:a0:cf:a2:8a:8c:f2:37:8d:46:88:5d:ff:15:
ae:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6D:A6:1C:CA:80:44:A9:A4:56:3B:EC:5C:AF:80:34:79:6B:9C:E8
X509v3 Authority Key Identifier:
keyid:1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/ZW2mHMqARKmkVjvsXK-ANHlrnOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.40.0/21
46.245.208.0/21
185.61.60.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:0a:c4:fe:8f:85:45:55:a8:bc:fa:9d:43:9b:26:39:ec:19:
b2:c4:5d:09:38:fc:ff:17:a7:f4:3e:9e:47:6e:0b:81:9b:78:
3d:87:af:f4:af:14:d2:84:65:e6:3f:c3:2a:19:91:cd:0b:8c:
ad:5f:d2:93:df:11:bc:9c:4e:39:6e:9b:f5:5b:77:41:bc:06:
d7:18:9c:b1:88:ac:fc:c5:22:be:d4:75:3a:b1:25:45:30:bc:
01:57:f4:9c:d1:30:7c:f4:40:39:e6:58:de:d8:27:ef:4e:a6:
3d:4b:98:63:eb:cf:4e:ce:44:47:cc:03:f1:ea:2a:68:57:7b:
c1:59:e8:d7:cd:71:0f:c2:f4:ce:0e:66:d7:36:0a:72:25:0d:
13:08:15:14:bc:de:22:6d:15:07:42:de:99:6b:0a:72:8c:9f:
94:1e:54:2d:70:11:89:98:e2:b0:e8:5f:3f:bf:9b:30:e0:f1:
ad:77:04:7c:14:4e:16:b2:fe:c3:38:15:f6:ab:eb:8d:0a:7e:
3a:36:c4:18:e6:82:58:e8:6c:6f:25:71:d0:9c:e6:92:96:92:
8b:7f:55:29:98:b7:2c:e3:9f:14:8b:e9:e7:9a:84:bd:db:01:
99:ad:86:1b:7d:df:4f:16:25:25:c6:7f:0b:a9:3b:33:82:b6:
63:60:0b:fb
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzIAcBNH6K5CMHm6he3QiVCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNTA0YjFiYjcxNjhlNjgwYjE5NTQyZjhmNzMwMzg2MTQ0
YzhhNWYwHhcNMjQwMTAyMDIzMDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTZkYTYxY2NhODA0NGE5YTQ1NjNiZWM1Y2FmODAzNDc5NmI5Y2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEOrhD0NPRXb6n1deorBd3irPZUS
6vVUoTB9dd3ONEd1IrJGG+g8+rgPAKGz2dKaJdGtDi71A4+hGGycuvru1xX0iFbV
oJTlwwg/4Hoa5S+JCycl0C8hZwqqmmwicSI1asiTfiLAAqKLhJ++L1R3eOdqIy7M
ZUoAOipl1AwPbBXQpBBs68LyKSeCrzwER4JS3OckFFBxBUiia4Uc/Dtbjo+/hIC/
WUOVsx+shT8fnIUXHTOCCqk0ZG9tK2QaERyHiv7VJ4apcK8VOE/MiS3e5NS1dd3i
afRk5lxYZTi4yHHOTAmzYO6bOG+PavdOqWUGKqDPooqM8jeNRohd/xWufwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGVtphzKgESppFY77FyvgDR5a5zoMB8GA1UdIwQY
MBaAFB9QSxu3Fo5oCxlUL49zA4YUTIpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDFCTEc3Y1dqbWdMR1ZRdmozTURoaFJNaWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zYzc0YTgtOWY3Mi00YzA2LWI1MTYt
MzViYjYwZWEwN2MxLzEvWlcybUhNcUFSS21rVmp2c1hLLUFOSGxybk9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8zYzc0YTgtOWY3Mi00YzA2LWI1MTYtMzViYjYwZWEwN2Mx
LzEvSDFCTEc3Y1dqbWdMR1ZRdmozTURoaFJNaWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDBZ8oAwQD
LvXQAwQCuT08MA0GCSqGSIb3DQEBCwUAA4IBAQBsCsT+j4VFVai8+p1DmyY57Bmy
xF0JOPz/F6f0Pp5HbguBm3g9h6/0rxTShGXmP8MqGZHNC4ytX9KT3xG8nE45bpv1
W3dBvAbXGJyxiKz8xSK+1HU6sSVFMLwBV/Sc0TB89EA55lje2CfvTqY9S5hj689O
zkRHzAPx6ipoV3vBWejXzXEPwvTODmbXNgpyJQ0TCBUUvN4ibRUHQt6ZawpyjJ+U
HlQtcBGJmOKw6F8/v5sw4PGtdwR8FE4Wsv7DOBX2q+uNCn46NsQY5oJY6GxvJXHQ
nOaSlpKLf1UpmLcs458Ui+nnmoS92wGZrYYbfd9PFiUlxn8LqTszgrZjYAv7
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:23:10 2025 by rpki-client