Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/ZQ7CHRMZuOHWtk9Y31HrntSdLQc.roa
File: ZQ7CHRMZuOHWtk9Y31HrntSdLQc.roa (raw, json)
Hash identifier: 3lvykLwGKjrEUqHOB/ypBbcCIBnGO/Oso6mVwe/2ddI=
Subject key identifier: 65:0E:C2:1D:13:19:B8:E1:D6:B6:4F:58:DF:51:EB:9E:D4:9D:2D:07
Certificate issuer: /CN=aedc8f327a461964c0a87a9c7809401c57c86d41
Certificate serial: 01930B7A681EE63A292733F114F9392C1AA9
Authority key identifier: AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/ZQ7CHRMZuOHWtk9Y31HrntSdLQc.roa
Signing time: Fri 08 Nov 2024 11:13:11 +0000
ROA not before: Fri 08 Nov 2024 11:13:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61189
IP address blocks: 85.194.200.0/22 maxlen: 22
85.194.200.0/23 maxlen: 23
85.194.201.0/24 maxlen: 24
85.194.202.0/23 maxlen: 23
185.7.252.0/22 maxlen: 22
185.7.252.0/23 maxlen: 23
185.7.254.0/23 maxlen: 23
2a03:29c0::/32 maxlen: 32
2a03:29c0:1000::/36 maxlen: 36
2a03:29c0:2000::/36 maxlen: 36
2a03:29c0:8000::/33 maxlen: 33
2a03:29c0:a000::/35 maxlen: 35
2a03:29c0:f1ff::/48 maxlen: 48
2a03:29c0:fffe::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0b:7a:68:1e:e6:3a:29:27:33:f1:14:f9:39:2c:1a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedc8f327a461964c0a87a9c7809401c57c86d41
Validity
Not Before: Nov 8 11:13:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=650ec21d1319b8e1d6b64f58df51eb9ed49d2d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dd:89:7b:b7:f9:0a:93:6a:ed:5a:85:01:b0:
6c:29:6a:ff:79:e8:b1:ec:f3:b4:e9:a9:12:a0:23:
b6:72:d4:e7:bd:1e:7d:f6:67:3c:f8:70:dd:30:2c:
b6:e5:33:e9:2e:0f:0b:ac:f9:ed:3d:e8:49:bc:43:
fc:a1:ef:34:63:ed:1f:52:80:63:83:f8:f4:4a:5c:
3e:76:48:48:ab:b6:1c:7a:24:7b:f7:1b:e3:dc:78:
f3:cb:38:0e:6a:c3:89:f3:fd:8b:db:83:48:be:d9:
cf:c1:fd:a3:59:7a:d3:53:d0:75:92:64:dc:c4:d4:
e3:6a:18:fb:06:77:7f:66:11:04:12:53:24:06:09:
bb:3f:57:49:c6:ca:39:1d:93:27:7c:23:74:74:93:
2f:77:98:d2:87:73:a4:a9:59:7e:ce:79:40:18:fe:
be:18:a0:81:4f:15:8e:63:41:8e:d2:27:b2:eb:1b:
06:fd:65:de:98:69:5c:d1:eb:df:10:12:29:4e:c6:
18:89:43:ae:33:28:44:88:b0:ba:25:30:8c:1e:d0:
a8:8b:5b:a6:10:26:a9:d3:ef:65:a1:1f:10:52:6a:
0f:70:f5:aa:44:42:96:99:84:42:7c:65:a8:1b:48:
54:53:e8:f2:28:65:e3:ce:31:47:c4:d4:f2:4c:4d:
61:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0E:C2:1D:13:19:B8:E1:D6:B6:4F:58:DF:51:EB:9E:D4:9D:2D:07
X509v3 Authority Key Identifier:
keyid:AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/ZQ7CHRMZuOHWtk9Y31HrntSdLQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.194.200.0/22
185.7.252.0/22
IPv6:
2a03:29c0::/32
Signature Algorithm: sha256WithRSAEncryption
46:dc:f5:a0:04:18:f2:27:42:60:ad:12:b1:94:a1:54:ab:3f:
a5:5d:a6:5c:e8:0b:5c:cf:b6:8b:3e:69:f5:8f:c8:ac:b8:5e:
2f:f0:5a:e3:1e:0a:b4:d2:3d:90:10:1b:01:14:a0:be:98:a6:
82:11:b0:cc:41:12:98:2d:87:1a:e8:d2:68:ab:1b:6c:06:1d:
70:b1:13:6d:58:3a:76:aa:df:b9:da:ba:38:16:41:49:04:55:
e9:b6:a7:a9:51:18:71:0a:8e:08:10:a5:ad:ab:3c:aa:58:95:
68:ad:22:2d:4f:90:0b:0d:d7:c9:c3:f9:ef:89:92:f4:0b:27:
34:d2:55:9f:e4:68:56:a5:05:f7:4d:ae:3b:57:a8:a7:96:4a:
20:ca:a3:17:86:10:c4:d1:10:93:f9:0f:15:91:5d:c0:45:30:
95:70:79:6b:af:f5:eb:0e:87:d8:de:4d:0b:bf:d4:2b:2a:73:
0f:5a:33:66:fe:76:fb:40:eb:4b:1a:a0:10:e5:2a:6f:52:07:
58:81:ce:41:ab:f6:3a:7e:0f:c3:8a:99:f9:30:0e:57:80:55:
f6:49:ed:5c:5e:0f:44:84:2b:ac:a4:6f:d3:1e:e9:36:87:a2:
f2:92:cb:05:f9:8c:9f:b0:52:0e:b1:4c:df:57:16:a4:6c:85:
49:b4:6e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:43 2025 by rpki-client