Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/ziuRpLzg6DCMdXAIvBzp4IyZaEk.roa
File: ziuRpLzg6DCMdXAIvBzp4IyZaEk.roa (raw, json)
Hash identifier: /IqDzJOb/rElqK6hx5Uemq86VOyqp6MzcIS8KqE6WaY=
Subject key identifier: CE:2B:91:A4:BC:E0:E8:30:8C:75:70:08:BC:1C:E9:E0:8C:99:68:49
Certificate issuer: /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial: 018CC801089A23459598DB7044FF1754792D
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/ziuRpLzg6DCMdXAIvBzp4IyZaEk.roa
Signing time: Tue 02 Jan 2024 02:29:20 +0000
ROA not before: Tue 02 Jan 2024 02:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203759
IP address blocks: 193.148.160.0/19 maxlen: 24
185.86.188.0/22 maxlen: 24
185.124.192.0/22 maxlen: 24
193.19.128.0/22 maxlen: 24
45.142.7.0/24 maxlen: 24
2a05:b540::/29 maxlen: 48
2a06:b500::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:08:9a:23:45:95:98:db:70:44:ff:17:54:79:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Validity
Not Before: Jan 2 02:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce2b91a4bce0e8308c757008bc1ce9e08c996849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:86:ea:48:5e:68:51:31:7c:b7:e5:0a:22:1b:
80:8a:86:31:08:91:34:53:62:be:8d:58:00:56:12:
40:c7:bd:53:fb:ed:28:ca:93:f3:95:29:68:27:7e:
4b:26:cf:0d:23:b0:5e:d4:84:be:2a:9d:d5:69:dc:
04:a0:25:34:43:49:c2:0a:a9:ab:94:ff:6e:0e:06:
cc:3b:30:6a:88:b2:2a:e2:ce:34:3d:e7:8e:13:f0:
12:d1:c6:4a:65:7a:fe:90:25:e1:91:b9:e4:a2:3a:
66:84:a4:ad:b8:22:01:b9:99:ad:08:6b:e5:54:ca:
be:36:5e:65:7a:62:c8:a3:51:11:87:c8:28:6c:68:
9f:ba:99:24:fd:c6:94:84:51:93:c0:bd:19:80:1d:
19:97:41:f7:4a:da:2b:51:b0:8c:d1:58:c2:b7:2b:
72:0e:f2:16:2d:97:5a:eb:d4:e0:27:ac:1f:cb:6c:
87:a8:e0:e0:f0:ae:f8:40:fd:35:6a:66:71:7a:9b:
85:fd:1a:b3:b1:64:60:80:61:15:a2:ee:6f:73:94:
af:fa:38:c5:b1:1f:78:5c:90:49:68:aa:61:16:c5:
8e:5a:84:b3:2f:0b:83:65:bf:d6:7b:ab:65:3b:23:
59:94:30:17:54:30:09:17:7d:d3:0c:32:cb:ec:89:
86:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2B:91:A4:BC:E0:E8:30:8C:75:70:08:BC:1C:E9:E0:8C:99:68:49
X509v3 Authority Key Identifier:
keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/ziuRpLzg6DCMdXAIvBzp4IyZaEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.7.0/24
185.86.188.0/22
185.124.192.0/22
193.19.128.0/22
193.148.160.0/19
IPv6:
2a05:b540::/29
2a06:b500::/29
Signature Algorithm: sha256WithRSAEncryption
44:d7:73:d7:41:49:87:60:33:37:90:ad:2f:5e:59:15:00:57:
7e:91:3d:10:7f:32:c2:fb:30:4b:68:51:61:c7:2b:b5:a7:cf:
d4:dc:d0:0b:54:be:40:62:d4:e3:c0:80:ad:c6:5f:51:41:d8:
06:96:f1:b9:ee:b0:c1:d9:f6:93:53:a3:21:f9:5a:81:41:c7:
f7:e9:da:bd:cb:20:19:05:ea:39:cb:34:68:6c:0f:8b:43:80:
85:20:72:49:47:03:db:b4:9a:3c:74:46:63:28:b3:45:a6:fa:
85:86:f3:31:43:17:56:14:78:65:7e:46:60:65:4f:2a:83:59:
6e:c1:60:5f:f2:30:36:b7:b2:cb:4e:61:1f:0f:96:e8:e7:03:
ff:19:c4:ad:bd:ad:3d:d3:2d:b7:65:9b:fd:d2:f2:2a:aa:40:
58:e4:2d:39:d5:9b:78:b8:01:88:18:76:21:a6:2e:5c:98:27:
de:f2:cf:2e:4b:cc:72:60:e8:d7:b3:09:10:a7:3f:5c:fc:98:
3f:68:2b:06:1e:6a:5e:0b:35:27:75:a4:35:10:f9:1d:84:26:
f0:be:3b:7e:34:bb:21:2f:22:98:e0:a8:89:9f:63:bf:6e:00:
10:9b:62:c3:8f:f1:c6:d7:9f:a1:50:d4:24:84:7b:41:af:b2:
f9:b5:11:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:53:01 2025 by rpki-client