Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/QZ6_FsHG_BuTYpiXeJPWzwo6lVs.roa
File: QZ6_FsHG_BuTYpiXeJPWzwo6lVs.roa (raw, json)
Hash identifier: Sps0HqWslrJ3JCEB4O6r1sAcF/1LUE1IoHGvWEh6lWo=
Subject key identifier: 41:9E:BF:16:C1:C6:FC:1B:93:62:98:97:78:93:D6:CF:0A:3A:95:5B
Certificate issuer: /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Certificate serial: 0194258F5E6124B77F95581C359F5A01A695
Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/QZ6_FsHG_BuTYpiXeJPWzwo6lVs.roa
Signing time: Thu 02 Jan 2025 05:49:00 +0000
ROA not before: Thu 02 Jan 2025 05:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51898
IP address blocks: 77.220.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 19:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:5e:61:24:b7:7f:95:58:1c:35:9f:5a:01:a6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Validity
Not Before: Jan 2 05:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=419ebf16c1c6fc1b936298977893d6cf0a3a955b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:f4:01:8b:83:ef:45:aa:a7:5b:9a:a7:c7:
27:8c:56:1b:a0:5c:5a:7b:f6:33:b1:b5:6c:ef:26:
28:65:f5:95:2e:f5:ec:2e:d0:58:fa:89:7d:0d:c4:
06:27:4f:85:d3:2e:83:a7:02:a9:42:b0:7a:67:db:
1b:0c:68:e6:b8:32:5b:0e:88:17:64:bf:68:ae:c8:
69:01:28:b3:3b:d5:a5:3f:fe:81:9a:34:b8:01:92:
3f:35:e7:87:37:03:dd:46:f7:f6:85:d2:8a:ae:e0:
a4:a5:13:b7:2a:01:93:4c:d0:6f:14:90:78:3e:7e:
16:83:c1:56:f4:f5:ae:4c:f0:39:79:b7:8b:b8:a7:
8c:44:4d:88:18:18:40:a0:78:67:d3:0f:d7:2b:99:
c6:f0:f3:26:30:c0:e1:82:86:1e:f0:1f:b8:d4:fa:
8d:c0:98:69:fc:19:53:a7:97:fb:6c:d7:b2:9a:6e:
bc:2e:12:c1:0f:84:12:d8:59:b0:d7:78:30:de:23:
b7:b8:ce:f6:1f:e1:e8:3f:53:51:27:9a:e3:c3:1a:
53:cd:cf:f4:e0:f2:34:9e:e6:33:58:12:89:0f:70:
6d:58:43:2d:af:9b:df:37:20:4b:58:8c:7f:27:c2:
cc:b7:fa:f5:07:31:9d:2c:61:e5:e1:c4:14:b7:ca:
84:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9E:BF:16:C1:C6:FC:1B:93:62:98:97:78:93:D6:CF:0A:3A:95:5B
X509v3 Authority Key Identifier:
keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/QZ6_FsHG_BuTYpiXeJPWzwo6lVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.220.204.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:7f:e5:ed:a8:39:7d:8a:02:42:37:33:23:9f:c6:90:76:f5:
c2:c9:c1:ca:f8:b4:cd:be:15:e9:18:13:e9:b2:a4:a2:de:55:
3e:11:a9:49:3a:fd:a1:02:dc:9f:8b:f1:70:57:84:11:73:4c:
bb:56:2a:b5:60:0b:ad:8e:31:99:5e:ee:35:9f:5c:7b:c7:3e:
8f:0d:f0:6c:7c:ec:dd:e0:16:01:70:39:9c:67:34:0b:7c:77:
17:7c:60:64:68:9a:7e:b7:72:e7:0f:98:d9:72:31:5b:ae:fd:
ed:24:1f:2e:99:0b:25:50:8d:25:53:1b:5d:c8:52:26:b0:a3:
97:ba:7a:18:d2:c3:4b:2b:26:94:6a:02:04:ba:4a:1e:18:a1:
9e:18:36:91:09:d2:79:66:a0:ba:aa:51:06:b1:72:50:7c:d9:
06:29:c0:fd:6c:6e:47:95:1f:94:16:8e:62:30:a9:ec:e8:07:
27:58:30:3f:80:19:ab:b6:60:67:29:f4:fd:07:df:2f:da:5c:
1a:44:cc:81:9b:34:eb:91:fb:df:fb:17:98:df:5b:0b:ef:15:
1d:99:f9:a6:15:f4:20:60:f7:fa:87:bd:c7:f8:2c:33:cb:b5:
9f:85:ec:a2:59:5c:0a:60:0f:ea:9c:06:1b:c8:a7:86:14:40:
26:e3:74:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj15hJLd/lVgcNZ9aAaaVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3OGM3ZmM2YjIxMWUyNzFmNzQ4M2Y3MjFkNDVmMjM4ZGQ3
ZGU1YzQwHhcNMjUwMTAyMDU0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTllYmYxNmMxYzZmYzFiOTM2Mjk4OTc3ODkzZDZjZjBhM2E5NTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbz0AYuD70Wqp1uap8cnjFYboFxa
e/YzsbVs7yYoZfWVLvXsLtBY+ol9DcQGJ0+F0y6DpwKpQrB6Z9sbDGjmuDJbDogX
ZL9orshpASizO9WlP/6BmjS4AZI/NeeHNwPdRvf2hdKKruCkpRO3KgGTTNBvFJB4
Pn4Wg8FW9PWuTPA5ebeLuKeMRE2IGBhAoHhn0w/XK5nG8PMmMMDhgoYe8B+41PqN
wJhp/BlTp5f7bNeymm68LhLBD4QS2Fmw13gw3iO3uM72H+HoP1NRJ5rjwxpTzc/0
4PI0nuYzWBKJD3BtWEMtr5vfNyBLWIx/J8LMt/r1BzGdLGHl4cQUt8qEAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEGevxbBxvwbk2KYl3iT1s8KOpVbMB8GA1UdIwQY
MBaAFEeMf8ayEeJx90g/ch1F8jjdfeXEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZTJjYmYtNzA1Ni00NDE5LWI1MWMt
NjJiMWRhMjYxMzI5LzEvUVo2X0ZzSEdfQnVUWXBpWGVKUFd6d282bFZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS82ZTJjYmYtNzA1Ni00NDE5LWI1MWMtNjJiMWRhMjYxMzI5
LzEvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATdzMMA0G
CSqGSIb3DQEBCwUAA4IBAQDJf+XtqDl9igJCNzMjn8aQdvXCycHK+LTNvhXpGBPp
sqSi3lU+EalJOv2hAtyfi/FwV4QRc0y7Viq1YAutjjGZXu41n1x7xz6PDfBsfOzd
4BYBcDmcZzQLfHcXfGBkaJp+t3LnD5jZcjFbrv3tJB8umQslUI0lUxtdyFImsKOX
unoY0sNLKyaUagIEukoeGKGeGDaRCdJ5ZqC6qlEGsXJQfNkGKcD9bG5HlR+UFo5i
MKns6AcnWDA/gBmrtmBnKfT9B98v2lwaRMyBmzTrkfvf+xeY31sL7xUdmfmmFfQg
YPf6h73H+Cwzy7WfheyiWVwKYA/qnAYbyKeGFEAm43SC
-----END CERTIFICATE-----
Generated at Mon Apr 21 12:19:55 2025 by rpki-client