Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZsymaGgjLaQXylzRqXgoEXfPP9A.roa
File: ZsymaGgjLaQXylzRqXgoEXfPP9A.roa (raw, json)
Hash identifier: PFKh8Hw9FQbd83oDuLzM8SF8I/o/WgrOhsT5Umnmor0=
Subject key identifier: 66:CC:A6:68:68:23:2D:A4:17:CA:5C:D1:A9:78:28:11:77:CF:3F:D0
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194B244E3AD638EDBFF9E7A33A3189F7DAD
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZsymaGgjLaQXylzRqXgoEXfPP9A.roa
Signing time: Wed 29 Jan 2025 13:34:06 +0000
ROA not before: Wed 29 Jan 2025 13:34:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 188.213.0.0/24 maxlen: 24
193.124.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 14:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:44:e3:ad:63:8e:db:ff:9e:7a:33:a3:18:9f:7d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 29 13:34:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66cca66868232da417ca5cd1a978281177cf3fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:fc:b0:59:7d:93:30:f7:b7:ee:18:b8:39:
a6:98:57:d9:c1:b3:57:6d:21:47:5a:94:36:54:95:
67:1c:c6:40:5f:00:65:ac:40:b2:89:94:2b:a4:06:
72:cc:87:4f:aa:47:1f:0d:1c:a5:71:bd:e8:0b:3b:
23:0b:cf:97:12:11:43:98:be:60:a2:53:ac:07:e6:
ba:c4:9e:14:a1:6f:37:24:ed:f0:3a:5f:cc:1d:fd:
a7:62:1e:80:27:e5:e9:2c:33:c5:03:ee:ba:b5:6d:
b5:f3:d0:66:8f:f7:b1:cd:1e:4f:ec:6e:b8:f6:16:
53:55:11:17:e9:c2:b0:f3:57:12:4d:45:69:68:aa:
46:21:ce:5e:20:2d:bd:c5:ee:d0:ff:4e:fd:27:41:
9c:27:48:2b:22:3e:13:b5:7b:83:62:07:30:f5:cf:
13:82:7f:6a:df:0d:8b:65:3f:b7:67:7a:96:2b:38:
fe:cc:0f:51:4e:8c:1e:26:b4:de:91:5d:6c:29:cb:
8c:13:cc:85:b7:4e:0d:23:24:9d:93:f9:8d:fc:bc:
1f:3b:3b:23:6c:0e:d8:1c:1f:00:c3:54:61:93:ab:
f0:8b:87:28:98:04:73:a2:a2:86:32:da:a0:88:6f:
b2:cc:d8:79:5e:cb:3b:52:c2:a9:70:bf:d3:34:6a:
2a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CC:A6:68:68:23:2D:A4:17:CA:5C:D1:A9:78:28:11:77:CF:3F:D0
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZsymaGgjLaQXylzRqXgoEXfPP9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.0.0/24
193.124.225.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:99:aa:52:d8:d7:77:e8:ac:d4:ff:a5:d6:aa:61:09:ea:4a:
0e:23:9a:3f:cc:d0:e0:3b:8f:3a:b0:b7:e4:ea:e2:b5:de:11:
d3:ca:57:85:9e:a2:7b:52:08:91:4d:37:81:6b:8a:73:a8:56:
56:f0:96:fe:ec:bf:a4:d6:02:93:96:76:2f:ae:71:9d:92:c6:
c3:21:7e:e1:22:38:17:73:b2:67:12:ae:06:51:7d:8f:9f:ec:
ab:22:9b:9d:4e:40:dd:f2:46:ae:b7:38:7e:fe:d7:4d:6c:61:
fe:76:aa:eb:5a:fa:c2:8d:5e:77:42:36:20:03:4c:a9:ea:da:
2f:41:65:53:58:6d:79:af:31:0d:b0:07:56:da:02:bf:1a:35:
30:df:26:28:73:0c:db:12:b8:67:4e:44:48:9b:2e:6a:1e:9b:
9a:34:4f:c7:76:5a:a4:0c:23:51:e5:20:60:92:71:7a:55:46:
15:c6:8d:dc:6c:0e:21:a9:64:fa:92:ae:71:ea:61:d1:70:a7:
e0:d1:b5:3c:9c:7e:45:93:ed:bf:29:c6:69:48:22:b6:58:8e:
f1:6d:37:8a:2b:b2:fb:f3:b8:4b:97:80:44:dc:75:79:0a:07:
ea:90:44:cf:6a:11:b0:bf:eb:92:3c:2d:43:5b:fa:df:c1:e7:
f0:30:51:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:21 2025 by rpki-client