Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/zVk__Sv-FlDWYrXiGunT6Cnrv5c.roa
File: zVk__Sv-FlDWYrXiGunT6Cnrv5c.roa (raw, json)
Hash identifier: 2lQOD+2E6e0QdP8zVQmLdmGqD7H6nt76qjEZRZp8RRc=
Subject key identifier: CD:59:3F:FD:2B:FE:16:50:D6:62:B5:E2:1A:E9:D3:E8:29:EB:BF:97
Certificate issuer: /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial: 0193092D9141D5A723CDBDEB6D146A5F2A5D
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/zVk__Sv-FlDWYrXiGunT6Cnrv5c.roa
Signing time: Fri 08 Nov 2024 00:30:01 +0000
ROA not before: Fri 08 Nov 2024 00:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49683
IP address blocks: 31.25.234.0/24 maxlen: 24
171.22.172.0/24 maxlen: 24
185.44.64.0/24 maxlen: 24
185.44.65.0/24 maxlen: 24
185.44.66.0/24 maxlen: 24
185.44.67.0/24 maxlen: 24
185.85.240.0/24 maxlen: 24
185.85.241.0/24 maxlen: 24
185.85.242.0/24 maxlen: 24
185.85.243.0/24 maxlen: 24
185.116.236.0/24 maxlen: 24
185.116.237.0/24 maxlen: 24
185.116.239.0/24 maxlen: 24
185.122.164.0/24 maxlen: 24
185.122.165.0/24 maxlen: 24
185.122.166.0/24 maxlen: 24
185.122.167.0/24 maxlen: 24
185.168.192.0/24 maxlen: 24
185.168.193.0/24 maxlen: 24
185.168.194.0/24 maxlen: 24
185.168.195.0/24 maxlen: 24
185.184.68.0/24 maxlen: 24
185.184.69.0/24 maxlen: 24
185.184.70.0/24 maxlen: 24
185.184.71.0/24 maxlen: 24
185.189.56.0/24 maxlen: 24
185.189.57.0/24 maxlen: 24
185.189.58.0/24 maxlen: 24
185.189.59.0/24 maxlen: 24
2a0a:2f00:1::/48 maxlen: 48
2a0a:2f00:2::/48 maxlen: 48
2a0a:2f00:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 28 Nov 2024 07:51:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:09:2d:91:41:d5:a7:23:cd:bd:eb:6d:14:6a:5f:2a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
Validity
Not Before: Nov 8 00:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd593ffd2bfe1650d662b5e21ae9d3e829ebbf97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:31:93:ac:3f:e8:f0:f3:92:d4:3b:ca:20:
3a:1f:ea:90:9e:51:64:7d:27:87:84:4e:8a:71:cc:
24:03:2a:bc:a0:7f:a1:30:ab:ae:5a:9c:22:59:18:
27:87:c8:a5:0f:ec:9f:09:e8:3a:3a:f0:81:14:11:
3d:b2:86:1e:30:4a:78:1c:e7:42:04:08:ec:9f:b1:
71:05:9b:19:ea:01:cd:e5:73:8d:ad:5e:93:48:89:
2e:58:83:6d:31:d1:13:38:cd:c5:a0:9b:79:11:a5:
4d:2f:7e:54:88:99:42:dd:7b:03:35:c9:ac:de:50:
44:35:ae:12:02:3f:ba:bb:25:83:ba:dc:a2:b0:6e:
60:99:53:60:47:c8:9b:1d:37:21:b7:48:b8:18:57:
bc:39:b2:00:11:5a:45:eb:a7:7a:ff:29:fd:ae:58:
ef:63:cf:0e:6c:c2:55:8b:8d:3d:d0:d3:16:8e:91:
17:2e:dc:90:a4:83:6b:b1:51:04:0b:fc:7d:51:13:
6a:f9:f8:80:2c:b4:ac:bb:6e:e5:2f:25:2c:c7:27:
cd:e6:8b:98:ec:05:67:1b:70:f6:55:b9:98:e8:82:
8f:66:54:50:9d:83:92:f9:97:50:5b:40:57:9d:cf:
bb:57:e9:11:1d:ad:fc:35:8b:13:10:66:e2:96:6b:
a3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:59:3F:FD:2B:FE:16:50:D6:62:B5:E2:1A:E9:D3:E8:29:EB:BF:97
X509v3 Authority Key Identifier:
keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/zVk__Sv-FlDWYrXiGunT6Cnrv5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.234.0/24
171.22.172.0/24
185.44.64.0/22
185.85.240.0/22
185.116.236.0/23
185.116.239.0/24
185.122.164.0/22
185.168.192.0/22
185.184.68.0/22
185.189.56.0/22
IPv6:
2a0a:2f00:1::-2a0a:2f00:3:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4f:31:8e:35:bb:d0:0b:dd:8b:d0:cc:6f:a4:5d:48:00:7c:e0:
2a:53:9a:7e:0b:75:cb:9c:da:7d:71:a1:9b:19:df:d1:7f:c0:
f0:e0:8b:4e:8b:9e:99:11:63:8a:81:68:25:32:20:ec:87:57:
17:fd:fc:54:a5:ec:da:29:9d:73:5f:9e:16:f6:89:30:b7:97:
bd:67:c5:04:6e:98:92:19:4b:1a:d9:e6:a5:04:0d:81:fb:a5:
8a:10:cb:40:b2:0c:b9:8a:06:bc:e8:4a:28:7f:bd:89:fe:ec:
c1:20:16:42:f6:ac:cb:cd:99:61:54:a9:b9:e7:a1:ee:eb:b7:
20:b7:2f:ce:d8:f1:ad:11:25:3d:72:bb:b6:65:18:9f:d3:ac:
c5:3a:6c:4b:cd:f0:0a:80:82:67:69:e1:9c:89:36:54:e8:84:
86:41:59:fb:97:75:01:1d:48:c5:6f:85:c3:38:af:29:c5:ff:
92:8b:bd:69:bd:0e:19:33:28:56:3a:28:6e:ff:ed:9e:90:dd:
a8:58:d0:56:39:35:11:67:b4:b2:7e:bc:51:40:ff:d4:49:ea:
c6:86:ee:28:80:f6:65:90:61:e9:32:f9:81:56:c3:d8:77:cf:
5a:f7:98:01:bd:f0:00:10:dc:55:2a:7e:2a:70:21:f3:88:e4:
f5:6e:2b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:50:18 2025 by rpki-client