Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZT0F_-tgp9sYTw9eGdkKbjxSArM.roa
File: ZT0F_-tgp9sYTw9eGdkKbjxSArM.roa (raw, json)
Hash identifier: g7ho00ZmIhPoXJEqyI4z0vc3hwI7QHteHslPZWaBPbE=
Subject key identifier: 65:3D:05:FF:EB:60:A7:DB:18:4F:0F:5E:19:D9:0A:6E:3C:52:02:B3
Certificate issuer: /CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Certificate serial: 018FB9FFD6AC27B615C4BC14E8EF70D34874
Authority key identifier: 64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZT0F_-tgp9sYTw9eGdkKbjxSArM.roa
Signing time: Mon 27 May 2024 12:21:42 +0000
ROA not before: Mon 27 May 2024 12:21:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43973
IP address blocks: 79.142.16.0/20 maxlen: 20
79.142.16.0/24 maxlen: 24
79.142.17.0/24 maxlen: 24
79.142.18.0/24 maxlen: 24
79.142.19.0/24 maxlen: 24
79.142.20.0/24 maxlen: 24
79.142.21.0/24 maxlen: 24
79.142.22.0/23 maxlen: 23
79.142.22.0/24 maxlen: 24
79.142.23.0/24 maxlen: 24
79.142.25.0/24 maxlen: 24
79.142.26.0/23 maxlen: 23
79.142.26.0/24 maxlen: 24
79.142.27.0/24 maxlen: 24
79.142.28.0/23 maxlen: 23
79.142.28.0/24 maxlen: 24
79.142.29.0/24 maxlen: 24
79.142.30.0/23 maxlen: 23
91.232.230.0/24 maxlen: 24
91.232.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 May 2024 08:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b9:ff:d6:ac:27:b6:15:c4:bc:14:e8:ef:70:d3:48:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Validity
Not Before: May 27 12:21:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=653d05ffeb60a7db184f0f5e19d90a6e3c5202b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:2f:f2:ae:65:cf:cb:56:cf:c0:e6:76:3d:
cb:24:75:47:25:8b:41:0f:50:2c:95:f2:b9:09:64:
18:5e:5b:1a:b1:33:86:97:42:e3:e9:d4:7c:52:d7:
3f:6d:eb:79:c9:fa:af:85:ed:71:0a:e2:b8:4d:02:
06:08:60:64:47:d8:b6:f2:cb:8b:19:23:01:14:db:
f9:92:d3:74:c9:54:98:b2:aa:85:05:f4:85:c7:cb:
9f:6b:db:b3:90:41:47:a0:df:ae:cc:5d:83:0a:72:
85:f0:c6:4b:40:92:0a:b7:05:7b:09:04:a4:b1:b3:
85:20:0a:67:52:97:a2:a5:54:9c:9b:26:c8:5c:0f:
7d:62:39:ac:2b:ff:11:65:48:ad:5c:c2:76:e3:aa:
17:04:30:e9:87:e2:04:56:7f:b9:5d:55:3b:7e:f1:
c4:b2:7a:e2:2a:c0:5b:46:de:03:b9:03:25:2a:af:
4f:dc:07:84:c7:94:02:41:4a:c9:f8:17:db:24:7d:
53:df:ec:2c:aa:e6:57:01:b8:dd:bb:0d:5b:9b:c3:
81:aa:44:01:42:e3:83:db:2c:20:2d:3e:8f:41:ff:
a7:57:cd:5e:30:d5:94:c8:37:a0:52:26:1b:74:60:
dc:10:0c:5a:14:89:eb:4a:1a:5d:4c:2f:be:c1:67:
a1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3D:05:FF:EB:60:A7:DB:18:4F:0F:5E:19:D9:0A:6E:3C:52:02:B3
X509v3 Authority Key Identifier:
keyid:64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZT0F_-tgp9sYTw9eGdkKbjxSArM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.142.16.0/20
91.232.230.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:43:30:86:fc:96:86:a4:d0:61:84:be:a2:31:61:71:52:ff:
c2:9d:d2:5f:55:06:d7:f8:53:d7:77:c2:2f:c2:d4:54:7f:ac:
d7:a2:0b:7b:23:10:05:11:ea:e4:e1:ad:d6:ad:f8:8a:8a:04:
57:01:33:76:cf:89:70:38:8a:b0:53:e6:ed:79:b7:51:8f:21:
82:2d:34:af:d6:78:79:93:42:c1:16:f5:11:ef:e5:95:41:0d:
92:fb:94:04:4f:97:a6:01:a7:14:e2:ff:31:a3:ef:67:cf:18:
d7:d5:e2:76:fe:ad:df:ec:35:72:db:f1:3e:a8:91:ba:e0:17:
29:de:83:83:ff:f4:6a:20:0c:d0:08:e5:98:6e:58:88:6d:26:
2e:f6:e9:9b:55:93:d8:d8:e4:e1:c5:d1:b8:92:fc:3a:bd:a7:
df:51:2a:f0:61:04:99:11:16:41:a5:f0:98:44:df:08:f1:87:
01:4f:ad:39:d9:e3:2f:98:9e:89:e5:a7:41:16:ff:dd:91:fc:
ed:f8:a2:45:ac:f2:28:01:8d:76:10:04:16:84:b7:9a:b2:f9:
e7:20:c5:62:c5:8c:41:1f:28:42:5d:aa:7d:5d:c5:5b:f1:8e:
9d:86:92:55:2e:6e:9b:73:ec:bb:04:6e:96:9f:6e:9d:b7:b2:
83:fe:92:10
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY+5/9asJ7YVxLwU6O9w00h0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTZiYzcyMWM3NDBjMTBmYzdiMGQ4YjFiMzU4YTJkMzVm
NDg4YjcwHhcNMjQwNTI3MTIyMTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTNkMDVmZmViNjBhN2RiMTg0ZjBmNWUxOWQ5MGE2ZTNjNTIwMmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn8v8q5lz8tWz8Dmdj3LJHVHJYtB
D1AslfK5CWQYXlsasTOGl0Lj6dR8Utc/bet5yfqvhe1xCuK4TQIGCGBkR9i28suL
GSMBFNv5ktN0yVSYsqqFBfSFx8ufa9uzkEFHoN+uzF2DCnKF8MZLQJIKtwV7CQSk
sbOFIApnUpeipVScmybIXA99YjmsK/8RZUitXMJ246oXBDDph+IEVn+5XVU7fvHE
snriKsBbRt4DuQMlKq9P3AeEx5QCQUrJ+BfbJH1T3+wsquZXAbjduw1bm8OBqkQB
QuOD2ywgLT6PQf+nV81eMNWUyDegUiYbdGDcEAxaFInrShpdTC++wWeh/wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGU9Bf/rYKfbGE8PXhnZCm48UgKzMB8GA1UdIwQY
MBaAFGQWvHIcdAwQ/HsNixs1ii019Ii3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJhOGNoeDBEQkQ4ZXcyTEd6V0tMVFgwaUxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy82ZGIyNjQtNzNkNC00M2FjLWE5N2Ut
NTkwYjFiMmE0NjA5LzEvWlQwRl8tdGdwOXNZVHc5ZUdka0tianhTQXJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy82ZGIyNjQtNzNkNC00M2FjLWE5N2UtNTkwYjFiMmE0NjA5
LzEvWkJhOGNoeDBEQkQ4ZXcyTEd6V0tMVFgwaUxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQET44QAwQB
W+jmMA0GCSqGSIb3DQEBCwUAA4IBAQArQzCG/JaGpNBhhL6iMWFxUv/CndJfVQbX
+FPXd8IvwtRUf6zXogt7IxAFEerk4a3WrfiKigRXATN2z4lwOIqwU+btebdRjyGC
LTSv1nh5k0LBFvUR7+WVQQ2S+5QET5emAacU4v8xo+9nzxjX1eJ2/q3f7DVy2/E+
qJG64Bcp3oOD//RqIAzQCOWYbliIbSYu9umbVZPY2OThxdG4kvw6vaffUSrwYQSZ
ERZBpfCYRN8I8YcBT6052eMvmJ6J5adBFv/dkfzt+KJFrPIoAY12EAQWhLeasvnn
IMVixYxBHyhCXap9XcVb8Y6dhpJVLm6bc+y7BG6Wn26dt7KD/pIQ
-----END CERTIFICATE-----
Generated at Tue Apr 22 16:05:06 2025 by rpki-client