Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Zv7y_Ia9AhakffKGBKxOQJ4Fl0U.roa
File: Zv7y_Ia9AhakffKGBKxOQJ4Fl0U.roa (raw, json)
Hash identifier: +tARsvUDVcjL8w/9hFtFL0LO3ms3l13e5rRDUOmD8WA=
Subject key identifier: 66:FE:F2:FC:86:BD:02:16:A4:7D:F2:86:04:AC:4E:40:9E:05:97:45
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01941FFA66837BDB75EDECD1EE461B90DBC1
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Zv7y_Ia9AhakffKGBKxOQJ4Fl0U.roa
Signing time: Wed 01 Jan 2025 03:48:11 +0000
ROA not before: Wed 01 Jan 2025 03:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34918
IP address blocks: 185.243.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Jan 2025 18:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:66:83:7b:db:75:ed:ec:d1:ee:46:1b:90:db:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 1 03:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66fef2fc86bd0216a47df28604ac4e409e059745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:91:13:34:8e:b4:92:82:eb:42:d0:2d:e6:63:
4a:05:9f:e7:81:1e:cc:e3:a8:ad:25:13:29:2c:0c:
2a:6d:02:c6:c8:c1:b4:8d:26:04:8b:eb:b4:9d:5c:
66:de:a6:00:9c:22:02:6c:1b:77:82:96:3c:e0:22:
44:9d:3c:9c:ad:a1:2d:42:49:11:27:68:45:45:b6:
b7:80:b2:94:89:14:98:4f:52:7b:11:34:43:44:1f:
b8:1f:56:44:52:fc:52:42:f7:79:70:49:d8:6b:fa:
42:00:3c:6c:74:54:32:62:90:31:7a:57:ca:16:3f:
d6:3f:0e:70:0d:f3:be:b7:10:a8:3b:d6:c6:95:dc:
2a:9b:55:58:f0:a0:5c:ae:8b:85:75:df:86:0b:6b:
b4:10:be:5c:a1:ba:89:34:cb:ce:87:e3:40:c3:d9:
04:6d:48:ec:3c:f8:16:d4:60:12:bc:65:54:6f:97:
3a:ee:ea:c6:8c:0e:86:64:63:ed:fd:53:d1:93:fe:
68:ba:39:22:ef:69:fb:9f:48:a6:ae:69:1f:d5:83:
be:5c:7c:10:b4:93:a2:76:5b:62:db:07:b1:0b:cf:
a8:a1:c4:ee:a9:c7:90:52:70:60:92:a4:b1:1d:22:
14:75:cf:76:16:6a:93:1e:9a:ce:fa:9d:f8:78:e5:
0d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FE:F2:FC:86:BD:02:16:A4:7D:F2:86:04:AC:4E:40:9E:05:97:45
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Zv7y_Ia9AhakffKGBKxOQJ4Fl0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.51.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e1:43:86:0a:b8:00:07:4c:79:43:a5:48:11:69:33:aa:f2:
1d:24:13:89:36:d4:26:4c:e3:c7:82:d3:bc:6a:10:6e:f8:ba:
f4:a2:d0:3e:4d:bc:7e:9b:5f:02:50:1f:77:d5:25:48:1b:fa:
86:8b:f8:4e:35:b1:8d:89:e2:bd:16:63:33:c0:a4:7e:3b:ff:
74:5b:5a:00:56:0f:2c:f4:f0:0c:15:2c:c5:7d:8f:be:bc:9d:
04:65:3a:23:c4:3d:32:a4:89:6a:e4:71:2d:de:c4:82:ad:a5:
4e:4b:1a:0e:74:f2:7f:c3:c2:8d:56:6b:5f:86:64:51:d5:18:
70:b4:20:02:fb:2b:12:1a:06:98:7d:e1:12:10:fd:32:21:31:
7d:54:d8:02:4b:1f:98:58:b3:47:65:6d:03:97:8a:7a:55:ee:
e8:bd:3a:73:c7:bf:8b:37:67:76:f3:0a:ea:1f:34:05:6e:66:
63:32:a6:9e:a3:1e:de:9e:0e:f4:ce:40:5b:c0:dd:b8:bb:c5:
5b:6a:8c:55:04:58:b7:cf:b5:60:51:66:62:e1:4a:21:3c:a2:
49:81:eb:23:23:33:ac:c9:63:da:51:6c:96:53:2e:c5:15:23:
97:af:0f:6a:9a:21:4c:7f:1f:6b:57:f6:79:c9:f7:fc:a9:37:
7b:7e:46:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:41:59 2025 by rpki-client