Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/ZtFw_w1xH3PvE5O6ewfGEXZZIJE.roa
File: ZtFw_w1xH3PvE5O6ewfGEXZZIJE.roa (raw, json)
Hash identifier: IQghZRdtNTo5cgCzhI8RmWFeHsUs4sdSbwzaajEUJ5o=
Subject key identifier: 66:D1:70:FF:0D:71:1F:73:EF:13:93:BA:7B:07:C6:11:76:59:20:91
Certificate issuer: /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial: 0194E041A6DE1C07D0D54A0BF65F79561B27
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/ZtFw_w1xH3PvE5O6ewfGEXZZIJE.roa
Signing time: Fri 07 Feb 2025 11:53:06 +0000
ROA not before: Fri 07 Feb 2025 11:53:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206648
IP address blocks: 195.244.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 16:16:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e0:41:a6:de:1c:07:d0:d5:4a:0b:f6:5f:79:56:1b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Validity
Not Before: Feb 7 11:53:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66d170ff0d711f73ef1393ba7b07c61176592091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:3e:ab:6b:1c:bf:a3:28:44:c8:c3:4a:72:
97:ab:7c:2f:ed:fb:f7:31:d2:ec:c2:b7:8c:82:7f:
40:89:0d:16:5b:40:be:86:c0:83:f0:78:6e:de:13:
b8:9a:74:ca:27:a1:91:95:ca:21:cd:00:dc:7b:f9:
a2:32:63:a9:c4:f2:f2:88:67:60:be:44:20:d8:78:
99:5a:09:ae:a0:d7:95:67:e7:ac:69:e3:c2:07:80:
57:f2:8f:77:64:cf:30:a4:58:e2:30:6e:9b:af:ea:
f6:09:f9:47:6b:c1:fb:d4:d9:83:cd:62:35:75:05:
ec:76:38:68:63:f0:42:7d:71:b1:03:28:49:97:c6:
d3:dd:35:75:51:e2:b7:6e:3b:93:29:ea:05:da:52:
1f:1e:78:25:af:a3:4a:f4:89:a6:83:fa:0e:a3:2d:
20:44:fc:cf:91:37:d3:0f:c3:a3:48:42:21:15:d8:
fe:b5:b1:f6:31:13:a1:2d:59:d6:69:c7:f3:2b:65:
35:c6:94:48:1f:47:84:d6:c6:e8:1b:cf:de:1b:70:
46:7b:c7:c1:65:9f:0a:3e:42:a6:30:f2:96:b7:e5:
c2:40:e9:15:08:72:67:3a:0d:4f:a2:3f:94:f9:a4:
7f:9e:e2:66:0a:a5:84:5b:e3:54:d9:f9:64:67:23:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D1:70:FF:0D:71:1F:73:EF:13:93:BA:7B:07:C6:11:76:59:20:91
X509v3 Authority Key Identifier:
keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/ZtFw_w1xH3PvE5O6ewfGEXZZIJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.45.0/24
Signature Algorithm: sha256WithRSAEncryption
23:9e:6b:02:9b:88:b8:bb:7c:d1:dc:f8:99:94:23:07:42:bc:
db:74:c8:51:38:73:fc:85:d9:59:3b:51:f7:81:58:cd:54:7b:
c5:0b:16:d1:3c:76:04:fb:3f:de:ca:40:38:a5:26:34:c2:96:
c6:e0:05:1a:80:0d:e1:34:92:a8:76:af:d2:d1:be:60:18:1a:
2b:00:92:76:ce:75:45:29:e1:4b:05:2f:ff:7f:3c:c5:68:09:
bb:81:6a:97:91:e5:1a:e7:8f:be:1b:05:23:77:4d:4b:ed:2a:
8c:b2:20:71:91:ea:f4:5d:7e:ef:aa:ac:6e:a2:4d:74:56:11:
ee:c2:ed:74:68:74:ab:19:c5:07:92:43:76:1d:0a:03:3d:4f:
00:ad:97:9f:4e:4b:d8:0d:34:2d:87:68:ea:c4:8a:99:11:09:
89:b9:b3:db:e2:4d:0f:15:ad:b5:84:33:74:6b:8e:48:5f:ee:
53:b3:d0:b0:04:95:f2:07:18:ef:59:3f:f7:9e:0f:2b:e7:22:
b2:64:62:01:e9:ee:a0:9e:66:0d:1d:1e:84:04:9a:42:ff:e2:
89:cf:67:72:ed:78:c6:b4:24:40:13:e5:16:80:92:e0:9c:93:
78:8e:7f:60:5c:25:01:99:f4:a2:f9:37:0a:8c:a3:21:48:06:
08:08:48:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:14:07 2025 by rpki-client