Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/zR9vNdLJoETMb5VTkQg6q4k76Og.roa
File: zR9vNdLJoETMb5VTkQg6q4k76Og.roa (raw, json)
Hash identifier: KIAeL/hKd+FgUhzDWN2f1XlEf1OjASBodgtKQzibbGg=
Subject key identifier: CD:1F:6F:35:D2:C9:A0:44:CC:6F:95:53:91:08:3A:AB:89:3B:E8:E8
Certificate issuer: /CN=79e24b47f8943cad6e04c9f646cb1077c140fdfb
Certificate serial: 0194258FA4D106F4018855F4210003B738A2
Authority key identifier: 79:E2:4B:47:F8:94:3C:AD:6E:04:C9:F6:46:CB:10:77:C1:40:FD:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eeJLR_iUPK1uBMn2RssQd8FA_fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/zR9vNdLJoETMb5VTkQg6q4k76Og.roa
Signing time: Thu 02 Jan 2025 05:49:18 +0000
ROA not before: Thu 02 Jan 2025 05:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43317
IP address blocks: 77.73.64.0/21 maxlen: 21
94.242.48.0/20 maxlen: 20
185.22.172.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 03 Jan 2025 16:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a4:d1:06:f4:01:88:55:f4:21:00:03:b7:38:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79e24b47f8943cad6e04c9f646cb1077c140fdfb
Validity
Not Before: Jan 2 05:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd1f6f35d2c9a044cc6f955391083aab893be8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:49:99:1a:93:f9:6c:89:0d:a4:6c:30:9b:e5:
5c:9c:af:11:a0:69:50:29:6a:08:61:46:60:df:ea:
c3:62:1e:68:07:aa:0e:05:d9:e9:d8:ed:c5:be:4f:
61:b5:e7:c0:55:ee:30:98:24:0c:b9:d3:91:f4:18:
eb:27:31:81:95:e0:db:2e:a3:f5:d1:12:38:f7:23:
ed:8a:a5:f8:d8:fc:37:05:fa:7e:04:a2:e6:86:28:
c1:34:a7:d3:92:17:40:f5:4c:12:ec:ba:c5:77:86:
fa:79:70:c2:5b:49:bb:bd:b2:cb:37:1c:77:37:0f:
37:fc:38:26:14:da:ef:cf:cf:71:70:1d:2a:5b:6c:
f9:a1:97:b4:7a:e5:d9:97:53:fe:50:81:97:fb:c0:
6c:5d:c0:06:5c:3e:0b:70:1b:20:bf:c2:79:d4:3c:
70:ae:d8:99:90:79:e0:a2:30:53:68:05:ca:dd:83:
e1:9a:5d:f0:c0:1a:03:af:a2:ae:f5:81:0a:bb:ad:
6f:a1:69:20:f0:45:2c:8e:e7:62:0e:62:61:70:5e:
08:c3:4d:86:df:3d:85:21:db:6f:37:c4:62:ff:bb:
76:02:c2:b8:0e:d4:ac:f9:a4:fc:79:9e:31:2b:7a:
84:42:cf:ca:8c:96:ce:f8:1f:e3:bf:b9:f8:bd:6e:
0e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1F:6F:35:D2:C9:A0:44:CC:6F:95:53:91:08:3A:AB:89:3B:E8:E8
X509v3 Authority Key Identifier:
keyid:79:E2:4B:47:F8:94:3C:AD:6E:04:C9:F6:46:CB:10:77:C1:40:FD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeJLR_iUPK1uBMn2RssQd8FA_fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/zR9vNdLJoETMb5VTkQg6q4k76Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.64.0/21
94.242.48.0/20
185.22.172.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:eb:d4:65:69:e7:db:7b:f2:18:a5:fe:37:24:aa:ac:de:9c:
25:29:e6:00:f5:44:bd:bc:1b:a3:a3:97:98:96:f5:82:f1:bb:
1c:f0:49:22:0d:eb:69:46:97:3a:df:dc:38:18:2c:2f:e3:c9:
72:4d:58:31:a9:98:46:76:f9:6c:e0:7c:bb:d8:5b:52:a8:b7:
b5:24:43:04:0d:19:a2:33:22:2f:ee:93:d1:ba:f1:a2:46:44:
61:98:63:40:3f:15:d7:1b:17:00:c7:ea:30:67:0c:2c:8e:98:
ca:75:36:bb:92:ac:50:4c:37:bc:d7:91:6c:c3:71:9d:13:de:
e2:8d:46:d3:e3:c6:f3:98:da:c6:72:e1:d2:cb:38:7a:40:69:
4d:ee:a8:61:c8:24:55:f4:22:7b:35:70:e5:9a:17:fd:19:f8:
57:52:30:f4:bd:6d:3b:b3:40:e6:b5:cc:96:19:71:65:ac:10:
5c:7d:41:d9:e8:63:96:76:94:81:07:2e:c6:e4:0b:64:4d:7c:
6e:48:e8:5c:62:06:69:cd:fc:62:20:6e:bd:d5:1a:51:31:98:
80:ce:2e:6a:70:3e:e5:89:59:f7:56:6f:0b:84:d2:df:86:e5:
ff:0e:f0:08:68:7a:56:bc:87:6b:a7:62:f7:93:e5:5c:91:85:
e2:71:93:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:27:01 2025 by rpki-client