Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/ZlrySAnGk6CSp6kuSsnxy654AdI.roa
File: ZlrySAnGk6CSp6kuSsnxy654AdI.roa (raw, json)
Hash identifier: Go5PHdaweRlntuc4mdVUVKNj1rm+b25Y4k4hyBOUJK4=
Subject key identifier: 66:5A:F2:48:09:C6:93:A0:92:A7:A9:2E:4A:C9:F1:CB:AE:78:01:D2
Certificate issuer: /CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Certificate serial: 0195652246001F44C612B4AE46A14E16A328
Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/ZlrySAnGk6CSp6kuSsnxy654AdI.roa
Signing time: Wed 05 Mar 2025 07:08:19 +0000
ROA not before: Wed 05 Mar 2025 07:08:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39232
IP address blocks: 37.114.128.0/18 maxlen: 18
37.114.160.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 17 Mar 2025 05:54:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:65:22:46:00:1f:44:c6:12:b4:ae:46:a1:4e:16:a3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Validity
Not Before: Mar 5 07:08:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=665af24809c693a092a7a92e4ac9f1cbae7801d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:4a:d5:f7:39:59:41:7a:46:49:0b:8b:e4:
82:87:5b:e2:fd:cc:1c:2c:fe:0e:6b:ad:bc:cb:bd:
92:b2:01:4e:06:6a:2c:66:23:31:3d:02:14:27:db:
b6:3a:50:1e:7f:53:c6:10:46:a8:76:ee:22:d4:97:
65:18:1f:db:6c:40:bc:4a:a7:57:aa:45:d6:95:d6:
6e:5a:f0:f7:f0:52:1d:4b:dd:c2:e2:66:73:82:f2:
bb:91:9a:50:92:59:8b:a2:dd:ea:87:4f:16:64:48:
9d:b8:76:9a:de:9c:d0:38:1e:ff:e7:61:c5:77:43:
22:db:e9:c6:63:a1:ed:9c:7b:64:ac:27:75:af:ca:
9e:c6:ed:fd:4b:9d:c4:f4:b1:9a:ca:2d:1c:cb:d6:
da:67:de:e3:44:55:d3:b8:b1:42:3f:eb:01:1e:53:
19:c7:85:41:b9:58:84:a0:40:10:f1:b1:63:9b:29:
89:0c:94:84:c9:5d:69:d8:d1:dd:2e:82:a4:92:97:
13:aa:d5:d2:d5:3a:3f:a6:ea:2d:43:d9:f6:47:56:
b2:34:8c:e2:9a:aa:7c:72:b2:88:44:05:58:cd:95:
c7:b6:71:3b:01:14:92:bb:30:af:9e:fd:18:83:6e:
66:15:d5:5b:fe:19:ac:04:db:1b:76:95:1d:da:03:
c9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5A:F2:48:09:C6:93:A0:92:A7:A9:2E:4A:C9:F1:CB:AE:78:01:D2
X509v3 Authority Key Identifier:
keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/ZlrySAnGk6CSp6kuSsnxy654AdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.128.0/18
Signature Algorithm: sha256WithRSAEncryption
68:dd:f9:ae:db:fd:01:43:33:68:83:52:36:fd:00:24:d4:90:
76:5e:97:6c:c1:d3:71:e2:f4:8a:d3:c3:db:d8:41:36:31:b3:
7a:2f:99:ae:31:db:f1:bb:ca:4e:6c:d4:30:a5:d5:58:d3:9f:
44:e6:d2:0e:f7:5c:2a:ee:3f:39:aa:1d:d2:82:8d:b2:73:f5:
9e:ab:a0:03:52:63:15:9a:ed:f2:78:81:c4:91:64:43:fa:38:
ed:8b:9a:7d:78:16:38:f3:73:72:2f:72:87:1e:f2:da:79:09:
3b:f5:7b:76:c5:d3:3b:59:0d:7e:02:fe:83:2e:d1:e6:c1:77:
f8:c4:5f:15:7e:c3:4a:e0:ed:ed:e1:e9:36:b4:2c:96:83:70:
7a:40:ae:b0:fb:a5:b5:e9:2e:00:77:2f:80:46:cf:7a:61:16:
ba:9c:d6:d3:d5:59:f6:53:19:d0:fd:19:df:fa:8b:4c:e9:91:
89:ee:e7:a6:85:d2:af:d1:be:5a:c6:0c:1d:62:2b:ef:a7:42:
b0:f9:d9:d1:4a:1e:be:58:49:67:bc:1f:e9:d5:86:92:d2:59:
4a:4c:b7:3a:40:19:d5:c3:fe:47:68:80:ff:0c:b3:93:61:57:
80:fe:0b:05:c2:26:9d:55:de:24:af:30:2e:08:4c:23:52:3f:
93:a9:ef:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVlIkYAH0TGErSuRqFOFqMoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MDRjZTI4ZWFlNjgyYzk3YWNkMmQ4NjJmZWUyODk3YzNi
MDk2ZmQwHhcNMjUwMzA1MDcwODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjVhZjI0ODA5YzY5M2EwOTJhN2E5MmU0YWM5ZjFjYmFlNzgwMWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTtK1fc5WUF6RkkLi+SCh1vi/cwc
LP4Oa628y72SsgFOBmosZiMxPQIUJ9u2OlAef1PGEEaodu4i1JdlGB/bbEC8SqdX
qkXWldZuWvD38FIdS93C4mZzgvK7kZpQklmLot3qh08WZEiduHaa3pzQOB7/52HF
d0Mi2+nGY6HtnHtkrCd1r8qexu39S53E9LGayi0cy9baZ97jRFXTuLFCP+sBHlMZ
x4VBuViEoEAQ8bFjmymJDJSEyV1p2NHdLoKkkpcTqtXS1To/puotQ9n2R1ayNIzi
mqp8crKIRAVYzZXHtnE7ARSSuzCvnv0Yg25mFdVb/hmsBNsbdpUd2gPJywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGZa8kgJxpOgkqepLkrJ8cuueAHSMB8GA1UdIwQY
MBaAFBkEzijq5oLJes0thi/uKJfDsJb9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDkt
MTVkNWRlYjIyOGRkLzEvWmxyeVNBbkdrNkNTcDZrdVNzbnh5NjU0QWRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDktMTVkNWRlYjIyOGRk
LzEvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGJXKAMA0G
CSqGSIb3DQEBCwUAA4IBAQBo3fmu2/0BQzNog1I2/QAk1JB2XpdswdNx4vSK08Pb
2EE2MbN6L5muMdvxu8pObNQwpdVY059E5tIO91wq7j85qh3Sgo2yc/Weq6ADUmMV
mu3yeIHEkWRD+jjti5p9eBY483NyL3KHHvLaeQk79Xt2xdM7WQ1+Av6DLtHmwXf4
xF8VfsNK4O3t4ek2tCyWg3B6QK6w+6W16S4Ady+ARs96YRa6nNbT1Vn2UxnQ/Rnf
+otM6ZGJ7uemhdKv0b5axgwdYivvp0Kw+dnRSh6+WElnvB/p1YaS0llKTLc6QBnV
w/5HaID/DLOTYVeA/gsFwiadVd4krzAuCEwjUj+Tqe8n
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:30:50 2025 by rpki-client