Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/ZfNoj4zmmlBS14Pgiw2ORD9PSyU.roa
File: ZfNoj4zmmlBS14Pgiw2ORD9PSyU.roa (raw, json)
Hash identifier: UMH6rlhLH+/lQNb1MpeTfyVf3vgCeeo7baNd12P3j7A=
Subject key identifier: 65:F3:68:8F:8C:E6:9A:50:52:D7:83:E0:8B:0D:8E:44:3F:4F:4B:25
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 018CC7933B895C9D6FF36FDE5AD29520B3C9
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/ZfNoj4zmmlBS14Pgiw2ORD9PSyU.roa
Signing time: Tue 02 Jan 2024 00:29:24 +0000
ROA not before: Tue 02 Jan 2024 00:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42708
IP address blocks: 37.252.8.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:3b:89:5c:9d:6f:f3:6f:de:5a:d2:95:20:b3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jan 2 00:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65f3688f8ce69a5052d783e08b0d8e443f4f4b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5e:4a:f8:9c:fb:a6:62:a4:83:7e:4e:fa:6e:
5b:41:39:81:07:7c:20:7a:af:9f:76:32:47:59:7e:
e2:df:22:af:dc:b2:94:ea:f2:dd:f5:1e:c1:0a:22:
e3:3b:ff:7b:cc:62:c1:80:e8:af:fb:77:ce:40:3e:
fe:d3:04:0c:f2:73:1d:32:01:f8:c6:f1:11:b9:72:
d0:25:ea:21:09:80:b8:7b:7a:29:3f:52:4e:3e:c6:
20:8c:46:30:c1:20:2d:4c:7a:48:d2:26:78:5e:d6:
50:a7:3a:bc:82:61:ba:76:28:83:50:c7:13:33:97:
fc:f1:26:94:1c:7f:cf:9c:69:1c:3f:ee:ad:47:7d:
79:e5:6b:1f:1b:26:34:e7:42:85:18:da:14:83:83:
ac:b2:d5:31:c0:96:0f:65:ad:f4:32:66:6e:58:39:
f4:05:d2:57:e9:b3:0a:ac:44:43:ba:82:ab:38:03:
cd:03:4d:fe:c6:a4:67:29:8e:40:5b:0d:54:67:51:
b1:29:8d:76:59:c6:fd:c3:34:68:e1:e0:f3:a2:4e:
be:39:16:a1:cd:59:5e:89:7e:38:3a:0f:88:57:58:
17:4a:41:68:e5:4d:48:c6:d7:9e:08:70:f3:60:2f:
8d:24:63:64:66:e3:3c:50:2a:23:3e:1f:8e:2a:f1:
29:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F3:68:8F:8C:E6:9A:50:52:D7:83:E0:8B:0D:8E:44:3F:4F:4B:25
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/ZfNoj4zmmlBS14Pgiw2ORD9PSyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.8.0/23
Signature Algorithm: sha256WithRSAEncryption
06:d0:90:69:6e:0b:12:35:96:45:78:35:a2:73:4e:7b:4c:40:
12:77:2e:d4:fc:db:f0:ae:73:93:4e:f1:9c:d9:c4:3a:f5:e1:
89:1f:56:ee:07:50:f4:29:e0:d4:6e:3d:38:35:65:a1:53:49:
b7:56:76:9c:85:9b:72:23:98:85:41:99:36:48:00:96:23:15:
2b:fa:80:16:56:5c:80:62:74:8c:27:89:e3:c1:76:8b:93:c4:
80:ce:22:06:61:47:e3:ab:c2:6d:fd:e0:b9:4a:d0:7c:d4:1f:
be:03:14:2d:97:c2:72:9d:52:64:42:c5:67:5b:fe:a9:f6:36:
93:86:ff:ec:15:74:b3:db:ba:fa:6a:fc:29:cc:2d:8d:33:22:
9b:75:00:83:10:e7:0e:b4:f1:8c:c3:fd:e2:72:33:c2:0d:0f:
25:94:7f:ca:78:ef:71:e2:3a:b1:40:d1:fb:f0:2f:31:47:47:
3c:3f:55:a6:5d:56:be:81:fd:dd:a4:99:fb:3e:ab:8d:dd:ff:
fb:d7:64:dd:76:e0:52:47:80:a5:f6:ab:ca:bc:e1:0d:d3:3d:
79:5c:d1:ed:f0:0e:c4:d3:93:c3:2e:94:77:4b:1c:39:de:e0:
42:36:a4:58:97:de:02:3f:09:db:0a:fb:a1:7e:9b:6b:f1:f1:
39:c6:26:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHkzuJXJ1v82/eWtKVILPJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0
NGY0NDQwHhcNMjQwMTAyMDAyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWYzNjg4ZjhjZTY5YTUwNTJkNzgzZTA4YjBkOGU0NDNmNGY0YjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF5K+Jz7pmKkg35O+m5bQTmBB3wg
eq+fdjJHWX7i3yKv3LKU6vLd9R7BCiLjO/97zGLBgOiv+3fOQD7+0wQM8nMdMgH4
xvERuXLQJeohCYC4e3opP1JOPsYgjEYwwSAtTHpI0iZ4XtZQpzq8gmG6diiDUMcT
M5f88SaUHH/PnGkcP+6tR3155WsfGyY050KFGNoUg4OsstUxwJYPZa30MmZuWDn0
BdJX6bMKrERDuoKrOAPNA03+xqRnKY5AWw1UZ1GxKY12Wcb9wzRo4eDzok6+ORah
zVleiX44Og+IV1gXSkFo5U1IxteeCHDzYC+NJGNkZuM8UCojPh+OKvEpwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGXzaI+M5ppQUteD4IsNjkQ/T0slMB8GA1UdIwQY
MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt
ZWU0MzVkM2NkNTg1LzEvWmZOb2o0em1tbEJTMTRQZ2l3Mk9SRDlQU3lVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1
LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJfwIMA0G
CSqGSIb3DQEBCwUAA4IBAQAG0JBpbgsSNZZFeDWic057TEASdy7U/NvwrnOTTvGc
2cQ69eGJH1buB1D0KeDUbj04NWWhU0m3VnachZtyI5iFQZk2SACWIxUr+oAWVlyA
YnSMJ4njwXaLk8SAziIGYUfjq8Jt/eC5StB81B++AxQtl8JynVJkQsVnW/6p9jaT
hv/sFXSz27r6avwpzC2NMyKbdQCDEOcOtPGMw/3icjPCDQ8llH/KeO9x4jqxQNH7
8C8xR0c8P1WmXVa+gf3dpJn7PquN3f/712TdduBSR4Cl9qvKvOEN0z15XNHt8A7E
05PDLpR3Sxw53uBCNqRYl94CPwnbCvuhfptr8fE5xiYD
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:44 2025 by rpki-client