Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/czzIarwrM_HiSJ-iaxfnzWtjc1w.roa
File: czzIarwrM_HiSJ-iaxfnzWtjc1w.roa (raw, json)
Hash identifier: IkLHruHMggnxQUHnAdRl7hdsbLGLaPE5dZ7Ypvl1Caw=
Subject key identifier: 73:3C:C8:6A:BC:2B:33:F1:E2:48:9F:A2:6B:17:E7:CD:6B:63:73:5C
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 01917B62DF478034945ECDFAC4789C340952
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/czzIarwrM_HiSJ-iaxfnzWtjc1w.roa
Signing time: Thu 22 Aug 2024 18:39:22 +0000
ROA not before: Thu 22 Aug 2024 18:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206119
IP address blocks: 185.205.16.0/24 maxlen: 24
185.205.18.0/24 maxlen: 24
185.237.80.0/24 maxlen: 24
185.237.81.0/24 maxlen: 24
185.254.93.0/24 maxlen: 24
193.36.62.0/24 maxlen: 24
194.145.136.0/24 maxlen: 24
2a05:b700::/29 maxlen: 29
2a0a:fa40::/29 maxlen: 29
2a0c:580::/29 maxlen: 29
2a0c:4a40::/29 maxlen: 29
2a0c:4a45::/32 maxlen: 32
2a0c:4a46::/32 maxlen: 32
2a0c:4a47::/32 maxlen: 32
2a0d:d380::/29 maxlen: 29
2a0d:d380::/32 maxlen: 32
2a0d:d381::/32 maxlen: 32
2a0d:d383::/32 maxlen: 32
2a0d:d384::/32 maxlen: 32
2a0d:d385::/32 maxlen: 32
2a0d:d386::/32 maxlen: 32
2a0d:d387::/32 maxlen: 32
2a10:4b40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:52:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7b:62:df:47:80:34:94:5e:cd:fa:c4:78:9c:34:09:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Aug 22 18:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=733cc86abc2b33f1e2489fa26b17e7cd6b63735c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:09:28:a1:1a:dc:f6:f4:97:f3:45:57:1c:
ad:f2:be:5b:aa:de:b5:cc:9d:ab:e2:38:f3:2c:2d:
80:11:07:c6:78:4e:7e:c0:4e:71:5b:0e:bd:d2:79:
72:98:45:f7:65:a9:c7:80:ff:c5:86:ba:48:e6:c2:
4f:84:a5:6c:53:b2:9f:a6:ef:ad:04:35:bd:ee:1f:
32:30:66:66:4b:fe:4c:ca:0e:04:a9:c0:51:a2:cb:
96:17:3c:6e:8f:98:53:6d:ca:63:0e:b7:92:05:d5:
10:a6:f4:35:07:0e:2f:d9:f1:c8:0e:69:15:74:17:
fc:1f:0a:00:c6:da:28:b0:9d:34:20:71:2f:b4:5f:
80:e8:0d:d9:d3:f2:59:f7:ed:d3:32:dd:c7:eb:20:
be:2c:1d:5e:73:d1:ae:62:ad:67:ef:c5:ac:8d:94:
e4:4b:db:cd:af:43:bc:02:4a:5a:1a:46:61:6e:0e:
68:33:e6:a2:55:8f:ab:cb:e5:83:10:ee:23:ba:d5:
21:c8:59:b0:96:ac:cb:14:0c:8e:b4:28:c8:dc:23:
10:e1:5f:ff:85:27:ab:e3:23:e1:ec:7f:6d:b9:a4:
44:f7:21:d8:78:e7:4b:0c:f3:41:5a:86:ac:6a:b5:
ee:5c:b2:8b:bb:84:4e:cf:2c:24:b1:69:f7:64:05:
9e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3C:C8:6A:BC:2B:33:F1:E2:48:9F:A2:6B:17:E7:CD:6B:63:73:5C
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/czzIarwrM_HiSJ-iaxfnzWtjc1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.16.0/24
185.205.18.0/24
185.237.80.0/23
185.254.93.0/24
193.36.62.0/24
194.145.136.0/24
IPv6:
2a05:b700::/29
2a0a:fa40::/29
2a0c:580::/29
2a0c:4a40::/29
2a0d:d380::/29
2a10:4b40::/29
Signature Algorithm: sha256WithRSAEncryption
39:fd:a1:ac:f1:39:55:88:64:6e:6d:45:9c:b8:41:d8:69:3c:
94:fc:23:a5:84:f7:68:c2:22:52:26:0f:2b:6f:62:a1:74:94:
e8:e8:1b:67:23:b6:bf:9e:1e:32:2d:2d:6c:16:3e:bb:9a:c0:
5d:9c:83:1d:4f:5e:6e:da:3b:08:3d:fc:b5:6e:62:95:d3:fc:
8c:a0:08:b7:f0:79:04:d1:65:57:28:91:f1:2c:6b:f2:e1:58:
6f:03:4c:93:ee:17:a5:23:d6:f7:f6:6a:47:62:c5:e6:4d:55:
33:05:94:74:d8:c8:7d:07:9f:6d:97:10:7a:55:8e:c2:be:2b:
f6:6c:a4:9c:7e:84:68:a2:aa:1b:68:64:ac:92:d8:5f:77:51:
ff:b4:d6:64:89:cd:49:d5:04:07:08:6f:64:e7:79:96:bb:13:
9c:b4:cb:05:d7:81:66:08:3c:cc:0a:d6:b1:20:3b:42:a7:07:
a6:44:a2:42:98:30:0a:d8:fb:87:2b:ea:60:96:34:c8:35:06:
d9:67:a2:68:f8:bc:c2:3b:98:91:30:ea:4b:9f:2c:f2:07:5c:
3c:45:37:41:32:36:01:06:e8:ee:8d:f3:b2:f3:14:d4:9d:2b:
4f:19:93:7a:44:4a:e1:04:c9:2f:e3:f4:ff:58:38:01:a4:5d:
07:64:49:b9
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAZF7Yt9HgDSUXs36xHicNAlSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi
ZDBhNWYwHhcNMjQwODIyMTgzOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzNjYzg2YWJjMmIzM2YxZTI0ODlmYTI2YjE3ZTdjZDZiNjM3MzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE4JKKEa3Pb0l/NFVxyt8r5bqt61
zJ2r4jjzLC2AEQfGeE5+wE5xWw690nlymEX3ZanHgP/FhrpI5sJPhKVsU7Kfpu+t
BDW97h8yMGZmS/5Myg4EqcBRosuWFzxuj5hTbcpjDreSBdUQpvQ1Bw4v2fHIDmkV
dBf8HwoAxtoosJ00IHEvtF+A6A3Z0/JZ9+3TMt3H6yC+LB1ec9GuYq1n78WsjZTk
S9vNr0O8AkpaGkZhbg5oM+aiVY+ry+WDEO4jutUhyFmwlqzLFAyOtCjI3CMQ4V//
hSer4yPh7H9tuaRE9yHYeOdLDPNBWoasarXuXLKLu4ROzywksWn3ZAWeMQIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFHM8yGq8KzPx4kifomsX581rY3NcMB8GA1UdIwQY
MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt
N2JiZDI4Y2U0YTc1LzEvY3p6SWFyd3JNX0hpU0otaWF4Zm56V3RqYzF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1
LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjAqBAIAATAkAwQAuc0QAwQA
uc0SAwQBue1QAwQAuf5dAwQAwSQ+AwQAwpGIMDAEAgACMCoDBQMqBbcAAwUDKgr6
QAMFAyoMBYADBQMqDEpAAwUDKg3TgAMFAyoQS0AwDQYJKoZIhvcNAQELBQADggEB
ADn9oazxOVWIZG5tRZy4QdhpPJT8I6WE92jCIlImDytvYqF0lOjoG2cjtr+eHjIt
LWwWPruawF2cgx1PXm7aOwg9/LVuYpXT/IygCLfweQTRZVcokfEsa/LhWG8DTJPu
F6Uj1vf2akdixeZNVTMFlHTYyH0Hn22XEHpVjsK+K/ZspJx+hGiiqhtoZKyS2F93
Uf+01mSJzUnVBAcIb2TneZa7E5y0ywXXgWYIPMwK1rEgO0KnB6ZEokKYMArY+4cr
6mCWNMg1Btlnomj4vMI7mJEw6kufLPIHXDxFN0EyNgEG6O6N87LzFNSdK08Zk3pE
SuEEyS/j9P9YOAGkXQdkSbk=
-----END CERTIFICATE-----
Generated at Tue Mar 11 05:03:57 2025 by rpki-client