Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zwwQQjA0q7kIyd-iB6N5vjW4GZM.roa
File: zwwQQjA0q7kIyd-iB6N5vjW4GZM.roa (raw, json)
Hash identifier: FtFghBxKaiRvaYePvXKX2Z7/FzjHxCD3rVpc71fBwZY=
Subject key identifier: CF:0C:10:42:30:34:AB:B9:08:C9:DF:A2:07:A3:79:BE:35:B8:19:93
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01942827720F46B9AD80643B755838E6B2F3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zwwQQjA0q7kIyd-iB6N5vjW4GZM.roa
Signing time: Thu 02 Jan 2025 17:54:20 +0000
ROA not before: Thu 02 Jan 2025 17:54:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214309
IP address blocks: 89.35.130.0/24 maxlen: 24
188.213.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:72:0f:46:b9:ad:80:64:3b:75:58:38:e6:b2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf0c10423034abb908c9dfa207a379be35b81993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:a2:07:56:6d:e3:a9:2f:3a:13:ea:0d:57:
35:56:28:76:92:b5:a2:34:d7:b9:8b:d5:4e:a7:af:
ff:15:f8:02:77:59:14:ac:79:41:9d:9b:9e:bc:b3:
93:b9:90:f5:35:eb:ea:3a:65:b6:5a:4f:ed:43:ce:
d4:43:db:0d:91:7d:aa:36:d5:30:65:42:09:37:f0:
2a:db:64:a7:9f:53:85:29:7b:3b:48:f5:14:d5:b3:
9c:ef:c4:c9:03:00:a7:b1:73:54:78:0d:2a:b3:9f:
17:b7:c1:8c:eb:24:2d:54:29:aa:61:fb:ab:37:ba:
af:21:7a:53:9e:07:3f:d7:92:e8:2f:22:3c:ba:93:
e6:91:bf:bc:84:d0:6b:bf:bc:08:a6:e2:0a:d4:f7:
f4:c0:b4:19:54:7f:1f:b9:2a:a8:21:c9:f6:b2:f6:
b8:58:ee:b3:96:00:a3:82:07:ce:cd:ce:0e:d1:f2:
3b:a1:42:22:aa:f7:6f:85:b3:6a:bd:72:52:09:e0:
da:bc:1b:5a:c2:48:27:7f:55:62:cb:bc:05:08:94:
6e:f4:6d:27:a5:1c:11:44:68:26:19:4a:d2:76:5d:
18:cc:31:b1:25:cb:ff:05:90:c8:b9:43:26:fd:15:
41:6a:c0:4b:ca:75:94:95:2b:0a:ad:2b:ad:bb:49:
7f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0C:10:42:30:34:AB:B9:08:C9:DF:A2:07:A3:79:BE:35:B8:19:93
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zwwQQjA0q7kIyd-iB6N5vjW4GZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.130.0/24
188.213.0.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ff:65:1a:6e:74:21:c7:b4:92:07:11:e2:6b:dc:ab:52:60:
84:39:3e:fc:09:4b:e7:e5:48:1c:ac:12:a0:4c:75:20:e0:3c:
4a:d1:79:b2:d0:1c:3c:b3:44:cb:b8:08:25:9f:6e:35:d8:19:
2d:90:38:70:bb:9e:39:59:e4:33:95:f2:3e:d0:df:7b:ce:59:
ed:de:73:4e:ea:1d:ff:6c:57:b2:5a:cc:be:9e:ca:e9:1e:ff:
95:62:18:21:ea:7b:33:87:25:97:ed:71:50:0e:2b:b3:d2:71:
69:da:6b:91:da:41:14:9a:8f:3d:3e:19:d6:f8:fb:9e:8d:6c:
15:2e:b5:45:a0:a2:ef:37:c4:14:2a:5d:d5:ee:a4:ed:92:9f:
5d:b1:33:56:fe:29:31:8d:5f:38:32:9c:2f:fa:6c:e4:e3:21:
37:61:1b:a8:ec:97:83:1c:24:4c:59:bb:5e:81:33:ec:20:e9:
56:cf:94:fb:f9:bf:de:c4:e5:e1:4c:7d:20:7b:4f:d1:8a:f2:
96:6b:22:cd:c2:6d:bc:3d:b4:82:4a:1b:31:88:62:f7:a1:9c:
13:d8:b6:7a:9f:21:50:8a:c3:32:5f:94:3f:4e:02:f9:fb:c6:
d2:4d:3a:2e:50:b5:8c:5b:1a:48:eb:fa:62:1b:29:fc:bd:e5:
38:1d:cd:81
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoJ3IPRrmtgGQ7dVg45rLzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwMTAyMTc1NDIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjBjMTA0MjMwMzRhYmI5MDhjOWRmYTIwN2EzNzliZTM1YjgxOTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuryiB1Zt46kvOhPqDVc1Vih2krWi
NNe5i9VOp6//FfgCd1kUrHlBnZuevLOTuZD1NevqOmW2Wk/tQ87UQ9sNkX2qNtUw
ZUIJN/Aq22Snn1OFKXs7SPUU1bOc78TJAwCnsXNUeA0qs58Xt8GM6yQtVCmqYfur
N7qvIXpTngc/15LoLyI8upPmkb+8hNBrv7wIpuIK1Pf0wLQZVH8fuSqoIcn2sva4
WO6zlgCjggfOzc4O0fI7oUIiqvdvhbNqvXJSCeDavBtawkgnf1Viy7wFCJRu9G0n
pRwRRGgmGUrSdl0YzDGxJcv/BZDIuUMm/RVBasBLynWUlSsKrSutu0l/pQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM8MEEIwNKu5CMnfogejeb41uBmTMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvend3UVFqQTBxN2tJeWQtaUI2TjV2alc0R1pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSOCAwQA
vNUAMA0GCSqGSIb3DQEBCwUAA4IBAQAz/2UabnQhx7SSBxHia9yrUmCEOT78CUvn
5UgcrBKgTHUg4DxK0Xmy0Bw8s0TLuAgln2412BktkDhwu545WeQzlfI+0N97zlnt
3nNO6h3/bFeyWsy+nsrpHv+VYhgh6nszhyWX7XFQDiuz0nFp2muR2kEUmo89PhnW
+PuejWwVLrVFoKLvN8QUKl3V7qTtkp9dsTNW/ikxjV84Mpwv+mzk4yE3YRuo7JeD
HCRMWbtegTPsIOlWz5T7+b/exOXhTH0ge0/RivKWayLNwm28PbSCShsxiGL3oZwT
2LZ6nyFQisMyX5Q/TgL5+8bSTTouULWMWxpI6/piGyn8veU4Hc2B
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:44 2025 by rpki-client