Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/Z9kTgEsSFGvTaeJeGvZe__Zxcoc.roa
File: Z9kTgEsSFGvTaeJeGvZe__Zxcoc.roa (raw, json)
Hash identifier: NV3E+iUevlwdIPelHnCpNazrkIqYlVjsQxfRp3GQXaw=
Subject key identifier: 67:D9:13:80:4B:12:14:6B:D3:69:E2:5E:1A:F6:5E:FF:F6:71:72:87
Certificate issuer: /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial: 01941E6405AF91F06EBB9B2083AE6C005439
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/Z9kTgEsSFGvTaeJeGvZe__Zxcoc.roa
Signing time: Tue 31 Dec 2024 20:24:19 +0000
ROA not before: Tue 31 Dec 2024 20:24:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214024
IP address blocks: 45.87.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1e:64:05:af:91:f0:6e:bb:9b:20:83:ae:6c:00:54:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Validity
Not Before: Dec 31 20:24:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67d913804b12146bd369e25e1af65efff6717287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4a:b6:43:8b:1d:3a:a3:17:b0:e9:e1:bb:78:
05:b9:84:e9:d3:8c:ff:b2:85:8b:bf:2e:10:90:e4:
0d:73:40:e9:cd:7a:70:c0:39:5c:b1:d4:7b:83:bb:
02:61:c8:d2:00:5a:c7:37:ca:c0:96:eb:20:a1:ea:
10:2c:d5:c9:b0:74:ca:ad:61:10:b1:83:e8:f7:b3:
f1:72:81:3f:78:61:e9:ea:db:58:c7:48:a6:d0:d1:
6d:e4:58:8b:e8:91:b3:0b:c2:10:84:13:ab:f0:ec:
7c:d9:d6:b0:c5:ff:79:98:44:93:17:cd:5f:e5:c6:
83:37:1b:38:df:c6:57:50:cf:e0:92:a9:fb:d3:18:
72:51:a1:32:43:f3:6c:2a:70:ec:ee:7e:5c:13:92:
b2:2d:07:18:95:5b:4d:c1:d2:e2:05:08:e2:a1:61:
00:ba:96:4a:51:ec:ec:92:fe:cd:0d:3e:0d:66:d9:
c4:5a:71:a7:a7:1a:71:76:c5:65:f1:92:72:13:8a:
2a:4f:04:77:db:86:73:05:0e:30:a7:59:dd:50:2c:
76:93:09:52:cd:3b:e2:f5:53:c4:ee:1c:60:30:f0:
ab:b9:9c:a1:5a:f4:4c:46:4d:dd:23:9e:79:7e:28:
49:ac:b4:98:fb:4c:4c:78:68:d7:5c:5e:1a:c7:23:
12:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D9:13:80:4B:12:14:6B:D3:69:E2:5E:1A:F6:5E:FF:F6:71:72:87
X509v3 Authority Key Identifier:
keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/Z9kTgEsSFGvTaeJeGvZe__Zxcoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.101.0/24
Signature Algorithm: sha256WithRSAEncryption
26:35:93:32:6f:25:20:ce:64:2b:0e:69:03:e4:2c:1a:58:96:
0a:4f:80:e8:28:13:d5:5b:24:cf:79:9c:13:5e:c0:ab:62:c5:
b4:bc:92:ee:a4:3a:46:c7:1b:f7:d5:b0:70:6a:b2:37:50:af:
57:2c:05:66:fe:cb:04:0f:2b:ec:e4:f5:69:2e:49:b3:0f:da:
03:52:5a:15:7c:c0:8f:b9:c3:4a:7e:70:ae:74:a5:3e:68:ab:
34:19:13:22:d6:2d:fa:de:75:d5:0f:8c:1b:28:e7:8f:21:26:
08:42:d9:a3:bb:74:28:91:a0:d9:08:be:7d:24:6d:66:1e:e8:
87:44:8a:0b:d4:f8:87:17:32:12:55:73:63:14:6e:9d:18:f2:
3b:ee:f8:2c:58:b0:e7:b0:21:da:d1:61:b4:83:b9:9b:a3:9d:
93:78:27:1d:4b:0a:a2:e6:cf:ac:c7:39:94:c7:41:6c:c9:ae:
22:be:b3:3f:2b:b7:0d:e0:21:b0:1d:a6:ac:8a:27:be:e7:22:
0c:64:00:fc:be:f9:18:55:8b:ca:a1:ad:83:71:ef:3a:22:b5:
a8:96:c2:70:2c:41:78:cf:60:fc:b9:ec:62:3a:88:49:c0:4d:
98:a2:72:68:3e:f1:96:83:6a:30:8f:36:a6:5b:28:fc:14:69:
cb:33:be:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQeZAWvkfBuu5sgg65sAFQ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNDFhZGRjOWE0ZWVhMjQ2ZDQyZjk4YzdjNzJiMzBiNjhk
NjdhOTcwHhcNMjQxMjMxMjAyNDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2Q5MTM4MDRiMTIxNDZiZDM2OWUyNWUxYWY2NWVmZmY2NzE3Mjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Uq2Q4sdOqMXsOnhu3gFuYTp04z/
soWLvy4QkOQNc0DpzXpwwDlcsdR7g7sCYcjSAFrHN8rAlusgoeoQLNXJsHTKrWEQ
sYPo97PxcoE/eGHp6ttYx0im0NFt5FiL6JGzC8IQhBOr8Ox82dawxf95mESTF81f
5caDNxs438ZXUM/gkqn70xhyUaEyQ/NsKnDs7n5cE5KyLQcYlVtNwdLiBQjioWEA
upZKUezskv7NDT4NZtnEWnGnpxpxdsVl8ZJyE4oqTwR324ZzBQ4wp1ndUCx2kwlS
zTvi9VPE7hxgMPCruZyhWvRMRk3dI555fihJrLSY+0xMeGjXXF4axyMS2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGfZE4BLEhRr02niXhr2Xv/2cXKHMB8GA1UdIwQY
MBaAFL9BrdyaTuokbUL5jHxyswto1nqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEt
ZWVhZDUwOGJlNGVlLzEvWjlrVGdFc1NGR3ZUYWVKZUd2WmVfX1p4Y29jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEtZWVhZDUwOGJlNGVl
LzEvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVdlMA0G
CSqGSIb3DQEBCwUAA4IBAQAmNZMybyUgzmQrDmkD5CwaWJYKT4DoKBPVWyTPeZwT
XsCrYsW0vJLupDpGxxv31bBwarI3UK9XLAVm/ssEDyvs5PVpLkmzD9oDUloVfMCP
ucNKfnCudKU+aKs0GRMi1i363nXVD4wbKOePISYIQtmju3QokaDZCL59JG1mHuiH
RIoL1PiHFzISVXNjFG6dGPI77vgsWLDnsCHa0WG0g7mbo52TeCcdSwqi5s+sxzmU
x0Fsya4ivrM/K7cN4CGwHaasiie+5yIMZAD8vvkYVYvKoa2Dce86IrWolsJwLEF4
z2D8uexiOohJwE2YonJoPvGWg2owjzamWyj8FGnLM74R
-----END CERTIFICATE-----
Generated at Sun Apr 13 11:51:49 2025 by rpki-client