Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Zdynr3XwCBcU6Urrz4ZAEVqw1X8.roa
File: Zdynr3XwCBcU6Urrz4ZAEVqw1X8.roa (raw, json)
Hash identifier: RUBHxQwhBFOIet5x6j5gXukuQIpsm23nNitnT2yUX7E=
Subject key identifier: 65:DC:A7:AF:75:F0:08:17:14:E9:4A:EB:CF:86:40:11:5A:B0:D5:7F
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802E54A1D64B0AFA3F99D5328195297
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Zdynr3XwCBcU6Urrz4ZAEVqw1X8.roa
Signing time: Tue 02 Jan 2024 02:31:22 +0000
ROA not before: Tue 02 Jan 2024 02:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30893
IP address blocks: 194.71.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:e5:4a:1d:64:b0:af:a3:f9:9d:53:28:19:52:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65dca7af75f0081714e94aebcf8640115ab0d57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:94:1b:f1:59:88:ce:87:dd:7f:22:35:e4:e4:
3b:46:28:a8:9d:d9:62:ad:52:38:94:0a:75:ba:48:
f7:82:f7:dc:5e:12:5d:6a:c4:14:c2:42:5b:7c:77:
48:62:8f:26:fd:1b:80:0f:e8:c7:ac:9c:71:0d:ce:
65:06:0e:39:4b:a3:4e:95:99:9a:3f:6a:7b:17:65:
f6:7d:68:b7:6d:32:d4:83:2e:59:f3:a2:56:0b:34:
13:a8:b6:f8:2b:80:4c:c1:6a:bc:82:db:79:f6:55:
45:39:f7:b4:cd:e8:7a:71:09:25:08:d1:9f:7d:15:
f8:30:3e:b5:77:18:79:47:bf:24:47:8b:ad:33:40:
a7:b2:9e:aa:d7:b5:64:74:11:fc:cb:9c:92:6a:75:
3d:67:9a:6e:17:17:ec:16:31:6b:1f:d2:e5:42:04:
37:e1:03:10:e1:22:fd:98:ce:9d:4d:59:66:b8:2c:
e7:11:83:26:61:af:1b:17:38:94:6b:c6:b3:24:c1:
c7:e7:71:53:8c:2c:bc:6d:bf:39:6e:26:9c:ee:5c:
10:32:7d:2b:e2:02:3d:3b:7d:71:b4:fd:0a:3f:c4:
32:1a:e1:3c:54:e8:9e:8d:48:d7:b7:b8:2f:eb:68:
27:c2:35:a0:6b:e2:2f:18:81:86:9d:3c:a1:a9:80:
d8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DC:A7:AF:75:F0:08:17:14:E9:4A:EB:CF:86:40:11:5A:B0:D5:7F
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Zdynr3XwCBcU6Urrz4ZAEVqw1X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.71.111.0/24
Signature Algorithm: sha256WithRSAEncryption
03:52:e3:d3:e5:79:b8:06:89:3d:87:62:0b:18:e0:17:72:ba:
94:c7:19:95:d1:9a:fb:f9:a0:ba:bd:bf:47:69:36:40:ef:fe:
88:57:21:66:cc:19:11:e4:c1:52:30:4f:43:0c:90:3d:d1:9a:
db:0a:85:27:c0:7f:2e:f8:4d:c3:98:30:c0:89:27:1d:02:62:
af:68:d4:26:47:63:ef:87:ef:f8:27:0f:e3:02:72:93:b6:4a:
0c:6b:f5:9a:cd:03:0e:d9:52:17:93:44:49:9c:e6:5a:c9:8e:
f9:20:40:a9:af:ed:68:65:ac:a3:a9:45:23:19:c0:55:af:95:
8a:9d:1b:51:26:92:1e:46:25:4c:0c:c6:85:e6:ae:75:39:11:
ef:fd:48:88:6b:ca:6f:f2:25:cd:53:01:14:13:e5:d2:5a:1b:
4f:ea:69:61:09:ca:24:a9:6a:61:00:d9:1a:eb:d3:0c:9b:6a:
9a:ff:6c:08:86:41:1d:e2:e9:30:5a:22:5b:3c:76:7e:05:19:
fe:b3:dc:19:5b:7d:93:83:5a:52:e2:88:fd:7d:ae:46:ea:3c:
8b:e3:1d:25:0a:42:3c:0a:78:53:24:c0:a8:00:14:8b:6b:ff:
e4:04:4f:a2:d7:de:c4:18:68:1a:01:22:02:f5:53:3a:8b:36:
26:06:d3:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAuVKHWSwr6P5nVMoGVKXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjQwMTAyMDIzMTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWRjYTdhZjc1ZjAwODE3MTRlOTRhZWJjZjg2NDAxMTVhYjBkNTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZQb8VmIzofdfyI15OQ7Riiondli
rVI4lAp1ukj3gvfcXhJdasQUwkJbfHdIYo8m/RuAD+jHrJxxDc5lBg45S6NOlZma
P2p7F2X2fWi3bTLUgy5Z86JWCzQTqLb4K4BMwWq8gtt59lVFOfe0zeh6cQklCNGf
fRX4MD61dxh5R78kR4utM0Cnsp6q17VkdBH8y5ySanU9Z5puFxfsFjFrH9LlQgQ3
4QMQ4SL9mM6dTVlmuCznEYMmYa8bFziUa8azJMHH53FTjCy8bb85biac7lwQMn0r
4gI9O31xtP0KP8QyGuE8VOiejUjXt7gv62gnwjWga+IvGIGGnTyhqYDY2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGXcp6918AgXFOlK68+GQBFasNV/MB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvWmR5bnIzWHdDQmNVNlVycno0WkFFVnF3MVg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkdvMA0G
CSqGSIb3DQEBCwUAA4IBAQADUuPT5Xm4Bok9h2ILGOAXcrqUxxmV0Zr7+aC6vb9H
aTZA7/6IVyFmzBkR5MFSME9DDJA90ZrbCoUnwH8u+E3DmDDAiScdAmKvaNQmR2Pv
h+/4Jw/jAnKTtkoMa/WazQMO2VIXk0RJnOZayY75IECpr+1oZayjqUUjGcBVr5WK
nRtRJpIeRiVMDMaF5q51ORHv/UiIa8pv8iXNUwEUE+XSWhtP6mlhCcokqWphANka
69MMm2qa/2wIhkEd4ukwWiJbPHZ+BRn+s9wZW32Tg1pS4oj9fa5G6jyL4x0lCkI8
CnhTJMCoABSLa//kBE+i197EGGgaASIC9VM6izYmBtPG
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:56 2025 by rpki-client