Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zL0A1ezlyM1ob2HBhfJadm0PBWg.roa
File: zL0A1ezlyM1ob2HBhfJadm0PBWg.roa (raw, json)
Hash identifier: kWYl0f8fUIYeuR0WLkueDWE0YZgZIyBvDYDucWXdPJ8=
Subject key identifier: CC:BD:00:D5:EC:E5:C8:CD:68:6F:61:C1:85:F2:5A:76:6D:0F:05:68
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0195763C55A3043EE296050F2758BB318925
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zL0A1ezlyM1ob2HBhfJadm0PBWg.roa
Signing time: Sat 08 Mar 2025 14:50:20 +0000
ROA not before: Sat 08 Mar 2025 14:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 146.19.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 11:43:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:76:3c:55:a3:04:3e:e2:96:05:0f:27:58:bb:31:89:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 8 14:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccbd00d5ece5c8cd686f61c185f25a766d0f0568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:f2:e8:30:25:bb:cc:14:3a:76:85:40:71:
c1:a5:97:2e:40:1b:63:84:08:f5:02:cc:f2:bc:1b:
75:90:9f:3c:2b:40:03:59:ff:63:03:b8:7d:10:34:
3a:d2:4a:17:93:c3:63:46:1f:cb:4c:e5:db:b5:ac:
a7:15:25:af:8d:05:e8:02:80:ff:35:d5:c8:b0:a3:
71:06:e2:46:b7:94:d8:c7:5d:d4:9d:24:26:13:64:
1a:14:3d:57:89:67:b6:ed:2f:dc:00:02:a9:0f:92:
a0:14:3e:ba:92:d4:f4:9a:47:ce:b6:e9:6b:eb:60:
b4:b4:b0:f7:f8:e4:17:7e:5d:dc:9f:56:5f:6b:be:
0c:80:7e:14:7b:c7:e9:ae:3f:88:ef:bf:1d:57:b3:
fc:e9:58:7b:35:98:3a:51:3c:01:cf:b9:3c:90:2a:
67:2d:9b:ee:26:df:f2:a2:be:68:a7:6f:49:08:41:
8c:2e:09:8d:e6:ea:ee:7b:38:e5:50:40:ea:4e:19:
7c:19:2a:5a:6a:3a:80:db:29:92:98:25:d9:33:2c:
72:87:d5:2d:81:9b:58:c9:d4:72:43:c3:73:96:ed:
60:18:2d:45:89:54:90:9c:b4:bc:48:de:30:7b:29:
3d:58:73:21:a6:4e:7d:67:13:99:8f:55:66:e3:4a:
40:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BD:00:D5:EC:E5:C8:CD:68:6F:61:C1:85:F2:5A:76:6D:0F:05:68
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zL0A1ezlyM1ob2HBhfJadm0PBWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.102.0/24
Signature Algorithm: sha256WithRSAEncryption
51:8d:c6:37:40:54:a8:b3:3b:24:77:3e:d2:6e:fe:60:4c:a9:
8c:63:53:d8:b8:ff:c2:6d:8d:5b:58:ea:ba:9d:91:80:af:06:
05:19:52:3b:44:0e:ed:5a:74:ff:e4:f4:54:43:9d:a5:88:e2:
c7:9e:26:b8:14:56:c2:ed:bc:cf:24:6b:1f:c2:c4:0e:dd:0b:
9a:36:58:57:d6:69:a4:81:1e:72:08:2f:b0:a7:ed:10:25:9d:
e2:33:75:0d:c8:2a:7f:41:54:28:12:f7:5b:71:6c:3d:f7:2c:
cf:c3:d0:64:b8:0b:fa:cc:e6:a4:b9:92:d4:d7:e4:42:fa:21:
37:ed:c0:9d:5a:97:c1:25:4d:67:b4:a1:d6:c2:b3:38:2f:40:
2e:94:5b:e4:a1:08:98:d7:9e:d2:5a:77:22:70:b1:90:cb:21:
be:71:c2:d2:75:29:f8:0d:4c:bb:12:4a:5e:5d:95:0c:4a:17:
27:be:4e:71:97:fb:f7:08:af:0f:6b:63:4c:55:77:f7:41:9b:
98:e0:0d:24:f9:4c:2b:ce:03:89:3d:ab:9e:89:c3:74:f0:bd:
e3:7d:0e:33:34:11:d7:27:39:58:fd:90:96:51:09:de:a0:da:
6e:64:f2:58:51:5f:05:29:df:9d:10:39:93:14:5b:98:cc:1f:
81:8e:4d:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZV2PFWjBD7ilgUPJ1i7MYklMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMzA4MTQ1MDIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2JkMDBkNWVjZTVjOGNkNjg2ZjYxYzE4NWYyNWE3NjZkMGYwNTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn3y6DAlu8wUOnaFQHHBpZcuQBtj
hAj1AszyvBt1kJ88K0ADWf9jA7h9EDQ60koXk8NjRh/LTOXbtaynFSWvjQXoAoD/
NdXIsKNxBuJGt5TYx13UnSQmE2QaFD1XiWe27S/cAAKpD5KgFD66ktT0mkfOtulr
62C0tLD3+OQXfl3cn1Zfa74MgH4Ue8fprj+I778dV7P86Vh7NZg6UTwBz7k8kCpn
LZvuJt/yor5op29JCEGMLgmN5uruezjlUEDqThl8GSpaajqA2ymSmCXZMyxyh9Ut
gZtYydRyQ8Nzlu1gGC1FiVSQnLS8SN4weyk9WHMhpk59ZxOZj1Vm40pA2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMy9ANXs5cjNaG9hwYXyWnZtDwVoMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvekwwQTFlemx5TTFvYjJIQmhmSmFkbTBQQldnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNmMA0G
CSqGSIb3DQEBCwUAA4IBAQBRjcY3QFSoszskdz7Sbv5gTKmMY1PYuP/CbY1bWOq6
nZGArwYFGVI7RA7tWnT/5PRUQ52liOLHnia4FFbC7bzPJGsfwsQO3QuaNlhX1mmk
gR5yCC+wp+0QJZ3iM3UNyCp/QVQoEvdbcWw99yzPw9BkuAv6zOakuZLU1+RC+iE3
7cCdWpfBJU1ntKHWwrM4L0AulFvkoQiY157SWncicLGQyyG+ccLSdSn4DUy7Ekpe
XZUMShcnvk5xl/v3CK8Pa2NMVXf3QZuY4A0k+UwrzgOJPaueicN08L3jfQ4zNBHX
JzlY/ZCWUQneoNpuZPJYUV8FKd+dEDmTFFuYzB+Bjk15
-----END CERTIFICATE-----
Generated at Mon Apr 21 03:31:17 2025 by rpki-client