Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/ZVVCuo--SWd9UJDoOeknaRoiYv8.roa
File: ZVVCuo--SWd9UJDoOeknaRoiYv8.roa (raw, json)
Hash identifier: HnU9E5Vg3BLVXqd3NvT+Y5SKJUfOYSHlvmi7O0Wzogo=
Subject key identifier: 65:55:42:BA:8F:BE:49:67:7D:50:90:E8:39:E9:27:69:1A:22:62:FF
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 0196F70D6F0AD69A79FA4332C4BC48354943
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/ZVVCuo--SWd9UJDoOeknaRoiYv8.roa
Signing time: Thu 22 May 2025 08:12:54 +0000
ROA not before: Thu 22 May 2025 08:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 84.37.20.0/23 maxlen: 24
84.37.64.0/23 maxlen: 24
84.37.70.0/23 maxlen: 24
84.37.106.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 22 May 2025 09:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:0d:6f:0a:d6:9a:79:fa:43:32:c4:bc:48:35:49:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: May 22 08:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=655542ba8fbe49677d5090e839e927691a2262ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:de:30:ab:7a:4e:d1:59:db:9f:15:b2:08:
6e:96:81:0a:8e:d7:0e:17:36:19:69:54:2f:8e:ee:
69:03:60:bc:ae:e1:08:f8:cf:0c:4e:74:b4:ca:85:
f4:1e:87:40:65:78:fd:9c:93:72:e4:09:16:0a:a0:
fa:31:4b:63:f8:10:bd:dc:e6:86:21:f3:b4:56:1a:
ae:52:08:7e:d2:37:57:02:2b:f2:b4:7a:b3:02:20:
bb:57:4f:d1:a5:e7:78:a4:d9:49:b8:a9:72:ee:8c:
6e:2f:36:23:5c:8f:fe:83:ae:22:e5:9b:f0:ef:12:
ca:08:eb:e3:63:23:6b:c8:83:26:c1:f0:ab:c8:2e:
7c:84:4f:4c:5c:a2:9a:5d:99:f4:26:01:ae:fb:23:
bb:9d:d3:f1:9d:29:1e:45:8e:84:f9:f9:29:2f:93:
07:80:da:40:59:c2:a5:47:c7:1b:9a:4b:ae:03:6c:
e1:7e:0f:bb:e6:fb:53:27:3d:0f:4e:45:0b:f9:7c:
be:b1:17:62:6d:c9:5c:2d:43:0b:7f:e0:d9:4c:6d:
f0:a1:1a:21:85:1a:c5:fb:01:be:76:e2:c4:55:1a:
dd:82:f4:67:b7:38:db:cb:f4:86:15:6c:7a:34:31:
d5:29:2c:ae:b8:00:c5:d6:73:ee:18:ed:81:6b:0b:
a1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:55:42:BA:8F:BE:49:67:7D:50:90:E8:39:E9:27:69:1A:22:62:FF
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/ZVVCuo--SWd9UJDoOeknaRoiYv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.37.20.0/23
84.37.64.0/23
84.37.70.0/23
84.37.106.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:19:8e:2e:8e:f7:3f:9e:00:c6:e8:56:c7:b1:c8:40:a7:99:
80:87:f3:3f:6a:04:a8:84:4f:1f:35:2b:df:33:1d:a7:24:4f:
86:29:4f:18:5c:89:22:6f:ac:78:47:92:e1:1b:2b:b1:b3:09:
49:8b:87:1a:da:e5:b8:83:7a:4b:fe:0f:e8:a7:06:cc:ed:98:
01:c0:d2:db:82:b3:80:34:aa:40:c4:68:c5:19:2f:8f:20:a7:
c8:8a:df:53:bc:01:00:77:6e:5e:14:b7:96:1f:43:e5:eb:a2:
c1:83:97:ea:8b:76:07:29:ca:eb:33:32:c4:e6:b9:da:e1:4c:
c8:0a:dc:b3:93:5d:c2:8d:03:1b:01:8f:85:45:2a:2f:09:0a:
52:63:ac:4a:52:90:04:4f:b4:00:0b:a0:74:60:63:c0:e0:e4:
0a:84:ad:6d:eb:81:87:5e:3e:af:56:92:f7:d6:90:34:a7:93:
3d:e0:7a:39:b8:a9:c2:1c:a5:83:00:b8:45:ae:f5:54:24:3c:
e0:9d:e4:05:bb:71:61:30:09:63:d2:84:39:cf:7b:bd:a8:0c:
9f:76:b0:f9:95:34:d7:8d:80:1e:6d:74:37:02:39:ac:11:ce:
39:1f:e2:e0:1c:9c:b3:f6:c3:58:a1:ba:0b:5a:8f:82:47:05:
0d:5a:55:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:41:35 2025 by rpki-client