Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/zvZN-JjpSl18CqhqFltsm929P9w.roa
File: zvZN-JjpSl18CqhqFltsm929P9w.roa (raw, json)
Hash identifier: +6zOHkGuUB1JPkGWGDrL6ZbApJpb7YuHpSUe4ykytTU=
Subject key identifier: CE:F6:4D:F8:98:E9:4A:5D:7C:0A:A8:6A:16:5B:6C:9B:DD:BD:3F:DC
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01941F8C934EF7AFADC45F4FB906E9407BA2
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/zvZN-JjpSl18CqhqFltsm929P9w.roa
Signing time: Wed 01 Jan 2025 01:48:13 +0000
ROA not before: Wed 01 Jan 2025 01:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25160
IP address blocks: 195.114.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 10:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:93:4e:f7:af:ad:c4:5f:4f:b9:06:e9:40:7b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 1 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cef64df898e94a5d7c0aa86a165b6c9bddbd3fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:fd:72:b1:da:18:c7:dd:4b:fe:06:37:38:
c9:d0:d1:e2:cc:3b:c8:9f:2e:fa:0b:a2:21:09:90:
52:0d:71:f9:22:cd:ee:0a:e9:37:c8:81:50:6b:85:
b1:1a:1b:57:bd:ae:c1:87:ff:c3:97:c7:86:9f:1f:
f3:a7:1e:a2:a8:7c:f5:dc:9e:aa:fb:b2:2a:41:10:
b1:bd:75:ea:df:60:2c:60:ab:0f:be:0b:3f:b1:9c:
3a:d4:5b:78:d4:ce:b1:49:41:92:76:59:0c:a0:dd:
52:17:54:92:d4:0b:8f:96:5d:ad:ec:82:56:79:2a:
a4:e8:74:60:de:b2:e7:d6:40:bc:ca:de:c0:c8:62:
4f:c9:5f:1e:c1:5f:99:07:bf:59:a1:55:d6:97:a3:
ed:05:6f:5e:96:4a:73:47:6b:de:06:ba:7e:7c:4a:
38:87:5f:12:90:21:35:6d:91:89:b0:35:be:dd:75:
67:5f:72:85:9d:68:13:af:a0:5c:2e:1b:d4:0b:df:
c2:50:57:2e:60:cb:af:a1:27:d7:93:24:2f:1d:ff:
8c:b6:19:3e:19:42:36:9e:fa:9f:38:a9:e5:6d:96:
4e:c1:5a:8b:05:eb:52:88:6a:7b:94:16:84:3e:79:
42:1d:84:92:39:a8:5f:c4:eb:21:8b:2c:8e:59:39:
ca:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F6:4D:F8:98:E9:4A:5D:7C:0A:A8:6A:16:5B:6C:9B:DD:BD:3F:DC
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/zvZN-JjpSl18CqhqFltsm929P9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.197.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:c2:e9:f0:93:8e:c9:ca:2b:a0:34:14:46:aa:4f:fb:ed:d6:
49:66:05:9e:a3:e1:a0:cc:d7:c0:25:06:0d:1d:51:56:ae:14:
02:19:c6:bc:57:66:c3:e1:26:47:dd:d0:b2:dc:0f:bd:21:60:
e4:02:ce:5f:89:38:ff:df:01:37:b6:73:62:a4:e5:87:f9:ee:
73:0f:5d:7c:1b:19:cd:03:37:bd:8d:03:dd:71:e5:70:b7:b9:
e5:c1:e7:4e:0d:83:29:1b:21:0a:a4:9a:b5:cf:1a:64:26:df:
db:5d:b1:fb:3b:e7:7c:c3:84:e5:48:f9:f1:12:43:b5:89:c6:
3c:1e:7b:ee:e3:56:17:3e:e3:26:70:84:a4:ca:eb:ce:e6:18:
c5:48:c1:ea:c5:8e:92:d5:c0:ad:7d:85:e5:8d:62:29:95:4d:
da:39:ad:03:ea:ba:14:f6:0a:56:94:d3:38:f0:46:7a:a0:6e:
b4:15:90:1c:e7:e1:25:7a:d6:b9:88:ee:cb:ab:fc:60:97:68:
7f:f5:d3:92:e6:18:00:4a:de:aa:a6:79:3f:3f:f7:7c:2c:22:
c8:63:c6:bd:98:e5:b7:cb:d1:af:e0:d6:fb:35:83:75:1a:a6:
61:8c:e8:5e:28:a8:fd:e0:04:8b:d2:2d:d3:e0:a2:44:dd:da:
33:86:d0:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjJNO96+txF9PuQbpQHuiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjUwMTAxMDE0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWY2NGRmODk4ZTk0YTVkN2MwYWE4NmExNjViNmM5YmRkYmQzZmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIX9crHaGMfdS/4GNzjJ0NHizDvI
ny76C6IhCZBSDXH5Is3uCuk3yIFQa4WxGhtXva7Bh//Dl8eGnx/zpx6iqHz13J6q
+7IqQRCxvXXq32AsYKsPvgs/sZw61Ft41M6xSUGSdlkMoN1SF1SS1AuPll2t7IJW
eSqk6HRg3rLn1kC8yt7AyGJPyV8ewV+ZB79ZoVXWl6PtBW9elkpzR2veBrp+fEo4
h18SkCE1bZGJsDW+3XVnX3KFnWgTr6BcLhvUC9/CUFcuYMuvoSfXkyQvHf+Mthk+
GUI2nvqfOKnlbZZOwVqLBetSiGp7lBaEPnlCHYSSOahfxOshiyyOWTnKuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM72TfiY6UpdfAqoahZbbJvdvT/cMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvenZaTi1KanBTbDE4Q3FocUZsdHNtOTI5UDl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw3LFMA0G
CSqGSIb3DQEBCwUAA4IBAQBNwunwk47JyiugNBRGqk/77dZJZgWeo+GgzNfAJQYN
HVFWrhQCGca8V2bD4SZH3dCy3A+9IWDkAs5fiTj/3wE3tnNipOWH+e5zD118GxnN
Aze9jQPdceVwt7nlwedODYMpGyEKpJq1zxpkJt/bXbH7O+d8w4TlSPnxEkO1icY8
Hnvu41YXPuMmcISkyuvO5hjFSMHqxY6S1cCtfYXljWIplU3aOa0D6roU9gpWlNM4
8EZ6oG60FZAc5+Eleta5iO7Lq/xgl2h/9dOS5hgASt6qpnk/P/d8LCLIY8a9mOW3
y9Gv4Nb7NYN1GqZhjOheKKj94ASL0i3T4KJE3dozhtBr
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:21:35 2025 by rpki-client