Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/ZzCxcR0d3qxkGr0b7MQr76X4UZ0.roa
File: ZzCxcR0d3qxkGr0b7MQr76X4UZ0.roa (raw, json)
Hash identifier: EF8R5W3qzYr7EkrXK36VASTW+f3rzwkBKm2Aqo1MwTA=
Subject key identifier: 67:30:B1:71:1D:1D:DE:AC:64:1A:BD:1B:EC:C4:2B:EF:A5:F8:51:9D
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 0194D096BB88055844C91208ED18FB1CC5FA
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/ZzCxcR0d3qxkGr0b7MQr76X4UZ0.roa
Signing time: Tue 04 Feb 2025 10:52:06 +0000
ROA not before: Tue 04 Feb 2025 10:52:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42666
IP address blocks: 185.35.92.0/22 maxlen: 22
185.35.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Feb 2025 11:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d0:96:bb:88:05:58:44:c9:12:08:ed:18:fb:1c:c5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Feb 4 10:52:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6730b1711d1ddeac641abd1becc42befa5f8519d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:30:fd:f7:f2:61:9b:49:5c:15:27:52:08:
e6:39:aa:7e:2f:b7:13:22:5f:67:1d:c5:0e:ef:05:
4d:e3:c5:0a:c4:9f:7b:40:d3:f6:55:bb:25:e9:3e:
ea:f7:69:ea:52:5b:26:0b:e7:99:4a:b8:20:0b:b3:
af:4f:70:5c:c7:1c:c9:2f:e8:5d:81:ba:36:73:ee:
42:7e:09:cc:1d:3e:e6:8d:d9:cb:70:92:92:b6:6f:
c1:c4:09:76:af:d5:6a:28:a4:0f:23:28:e8:0f:8e:
61:80:de:ef:3a:43:41:03:7c:c7:7d:c8:fb:bf:2f:
c1:da:99:1c:e4:9e:e3:dc:d8:2f:d3:e3:7d:bb:ef:
a5:00:cd:58:4d:bd:13:68:02:aa:1f:12:da:58:c4:
1e:ec:1c:ae:a4:f0:56:66:39:d7:54:74:5d:42:5d:
92:c9:e9:e4:5d:8a:aa:6a:bb:1f:7d:e8:11:34:c4:
e7:57:16:a0:0f:44:25:59:55:3d:93:b7:44:50:a6:
7d:5a:7c:f5:ed:4a:4a:33:74:b2:af:7d:a1:3e:31:
7b:0d:f4:38:69:c5:39:08:58:ab:b2:04:16:4e:9c:
bb:3b:7e:29:39:1d:fd:8c:6a:c5:d3:9d:06:bd:55:
fb:a0:34:c6:fb:28:4d:2e:8d:08:07:92:43:f0:cf:
1f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:30:B1:71:1D:1D:DE:AC:64:1A:BD:1B:EC:C4:2B:EF:A5:F8:51:9D
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/ZzCxcR0d3qxkGr0b7MQr76X4UZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.92.0/22
Signature Algorithm: sha256WithRSAEncryption
36:57:e7:00:15:c5:25:9e:df:c3:e0:df:62:86:e4:04:f0:bb:
d8:13:3a:45:39:5a:9a:6e:43:61:76:2d:17:b3:4e:c5:3a:42:
14:38:42:0f:bb:d9:88:1c:34:26:ac:47:5d:74:55:b4:9c:12:
03:d5:d0:39:55:6f:a5:78:1e:5d:5c:86:18:1c:94:c3:0c:2b:
25:57:73:50:ff:4b:cf:4f:02:46:80:45:34:56:81:31:7d:12:
1a:b0:6d:d5:f4:e1:ae:23:23:4d:4c:e4:3a:bb:e9:f3:8b:25:
4d:93:97:92:44:e2:ea:6a:12:83:de:e6:d1:77:1f:ca:4f:44:
da:93:02:7d:2a:90:04:12:d7:e2:5a:a4:79:a5:1d:3f:5d:36:
76:8f:9b:3a:10:3a:f1:15:db:57:a1:01:68:7c:41:5c:d2:00:
bc:86:f9:c5:c2:42:95:53:d2:a0:87:ae:2e:66:0c:e3:12:16:
31:af:7b:4a:17:fe:95:ab:d3:14:b8:00:d6:57:0c:ff:83:5a:
02:59:32:9c:7e:af:22:d3:40:03:7e:20:7a:0c:2b:1c:81:5f:
c9:d5:8b:3f:56:66:f7:9b:57:4d:3c:4a:27:8e:4f:21:4c:09:
18:d0:91:b7:32:52:c4:74:96:ec:cf:87:a0:82:c5:2f:ec:46:
77:7a:b3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:46:52 2025 by rpki-client