Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZFtdx-0kq7xSmuTrly50Lk-g3Vc.roa
File: ZFtdx-0kq7xSmuTrly50Lk-g3Vc.roa (raw, json)
Hash identifier: B0UfuH9Cm9V0+WqrIMhLQmnruNrSBA2sNAa78L4eexs=
Subject key identifier: 64:5B:5D:C7:ED:24:AB:BC:52:9A:E4:EB:97:2E:74:2E:4F:A0:DD:57
Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial: 019276B3903513E06AC731AB1CCF9E7D150E
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZFtdx-0kq7xSmuTrly50Lk-g3Vc.roa
Signing time: Thu 10 Oct 2024 13:52:12 +0000
ROA not before: Thu 10 Oct 2024 13:52:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60662
IP address blocks: 37.122.144.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:76:b3:90:35:13:e0:6a:c7:31:ab:1c:cf:9e:7d:15:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
Validity
Not Before: Oct 10 13:52:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=645b5dc7ed24abbc529ae4eb972e742e4fa0dd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:64:53:d9:96:df:23:f0:09:4f:68:d7:9c:d3:
8f:0a:d6:0d:dd:1a:0e:35:47:74:d2:77:e6:95:4b:
15:b2:d8:f0:69:36:09:22:e7:58:00:c1:8d:ea:89:
50:31:07:5f:88:6e:3a:02:89:a7:55:53:35:56:d6:
0e:6a:63:bb:a0:91:7a:2a:63:86:f8:49:ba:2d:30:
07:d4:7d:f9:a0:bc:08:55:6b:84:78:be:74:c0:1a:
d2:78:b6:c8:5e:08:eb:53:7c:71:1a:4e:84:f6:2c:
80:57:84:9b:b1:50:1e:35:fa:88:f8:bc:54:e3:89:
c0:8e:7f:20:9e:f9:a2:cf:89:23:1d:f7:91:78:4c:
a5:63:6e:53:fe:9a:3c:11:53:ca:d6:c7:d2:a1:2e:
e0:00:0f:3b:c5:4d:52:27:f0:1b:3c:e1:82:00:75:
3d:ed:4f:e8:be:f3:f1:7e:a7:89:9f:18:bb:a1:b9:
0c:4a:0c:b8:d4:fc:54:bb:0b:b0:53:fd:28:af:75:
93:9d:ee:a5:35:f6:4b:ad:7b:33:9d:48:7c:e9:c7:
0b:23:fe:91:5e:67:ff:3b:95:db:8f:f8:56:e1:02:
af:86:ad:4c:59:fe:3f:32:24:75:1d:3d:61:47:33:
5a:21:63:86:90:4f:09:c0:bc:ae:76:38:0f:59:16:
4c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5B:5D:C7:ED:24:AB:BC:52:9A:E4:EB:97:2E:74:2E:4F:A0:DD:57
X509v3 Authority Key Identifier:
keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZFtdx-0kq7xSmuTrly50Lk-g3Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.144.0/22
Signature Algorithm: sha256WithRSAEncryption
89:65:33:d4:cd:13:61:16:68:0e:73:6b:55:68:20:bb:d0:f8:
a0:74:08:20:16:78:e7:ca:72:83:fd:88:00:c2:30:97:db:3b:
4d:c7:03:13:34:e1:ea:a0:9e:ce:ce:b0:cf:e7:06:0b:18:9d:
b5:a1:f9:8c:0a:4d:1b:65:46:ee:20:ca:f9:7e:da:ba:52:7d:
84:57:c7:49:70:31:c6:51:44:90:93:a4:e2:c1:51:75:ed:33:
74:f3:2c:82:c5:b0:35:e9:a9:e6:fd:a2:7a:45:71:b0:da:77:
6a:f3:eb:99:3c:d5:7d:20:20:4d:cc:b9:2d:82:ef:70:c2:d9:
af:b8:26:ea:3b:7a:21:25:45:8d:33:34:ec:85:dd:7d:dd:cd:
1b:54:3e:45:22:e7:61:ca:7f:99:c9:6c:ec:fd:3b:27:37:5a:
82:b8:b6:4f:c7:82:75:07:ca:db:f7:07:31:ae:42:dc:19:e2:
c3:9a:dc:48:6d:2b:45:57:d5:26:1a:31:8f:48:64:db:3e:39:
fa:fe:01:1d:1b:ba:3c:75:bf:32:53:57:93:03:64:38:4e:b3:
e4:a7:f2:b3:59:40:f0:61:c9:bd:18:9d:88:41:79:a0:74:15:
b1:28:a2:b8:1d:63:45:bf:d1:3a:0c:e6:00:28:2b:77:cc:b9:
46:7e:f2:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJ2s5A1E+BqxzGrHM+efRUOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0Mjc5NGMyZDJjZmEwNTQ2MzhiYTk1MGE1ZjY2OGU4NzYw
MTQxMmQwHhcNMjQxMDEwMTM1MjEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDViNWRjN2VkMjRhYmJjNTI5YWU0ZWI5NzJlNzQyZTRmYTBkZDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWRT2ZbfI/AJT2jXnNOPCtYN3RoO
NUd00nfmlUsVstjwaTYJIudYAMGN6olQMQdfiG46AomnVVM1VtYOamO7oJF6KmOG
+Em6LTAH1H35oLwIVWuEeL50wBrSeLbIXgjrU3xxGk6E9iyAV4SbsVAeNfqI+LxU
44nAjn8gnvmiz4kjHfeReEylY25T/po8EVPK1sfSoS7gAA87xU1SJ/AbPOGCAHU9
7U/ovvPxfqeJnxi7obkMSgy41PxUuwuwU/0or3WTne6lNfZLrXsznUh86ccLI/6R
Xmf/O5Xbj/hW4QKvhq1MWf4/MiR1HT1hRzNaIWOGkE8JwLyudjgPWRZMqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGRbXcftJKu8Uprk65cudC5PoN1XMB8GA1UdIwQY
MBaAFGQnlMLSz6BUY4upUKX2aOh2AUEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNzBhOWMtMTUyOC00ZTY2LWI3YTYt
MDYxNjM5ODEyYzc0LzEvWkZ0ZHgtMGtxN3hTbXVUcmx5NTBMay1nM1ZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mNzBhOWMtMTUyOC00ZTY2LWI3YTYtMDYxNjM5ODEyYzc0
LzEvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJXqQMA0G
CSqGSIb3DQEBCwUAA4IBAQCJZTPUzRNhFmgOc2tVaCC70PigdAggFnjnynKD/YgA
wjCX2ztNxwMTNOHqoJ7OzrDP5wYLGJ21ofmMCk0bZUbuIMr5ftq6Un2EV8dJcDHG
UUSQk6TiwVF17TN08yyCxbA16anm/aJ6RXGw2ndq8+uZPNV9ICBNzLktgu9wwtmv
uCbqO3ohJUWNMzTshd193c0bVD5FIudhyn+ZyWzs/TsnN1qCuLZPx4J1B8rb9wcx
rkLcGeLDmtxIbStFV9UmGjGPSGTbPjn6/gEdG7o8db8yU1eTA2Q4TrPkp/KzWUDw
Ycm9GJ2IQXmgdBWxKKK4HWNFv9E6DOYAKCt3zLlGfvJh
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:55 2025 by rpki-client