Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/zJ4YK-UkCeu2RS-DGgJ0EfSTrZ4.roa
File: zJ4YK-UkCeu2RS-DGgJ0EfSTrZ4.roa (raw, json)
Hash identifier: d1u31mPkuhzWWQo5z3lq2TH+KdbFR5TtfL682Hmkjz0=
Subject key identifier: CC:9E:18:2B:E5:24:09:EB:B6:45:2F:83:1A:02:74:11:F4:93:AD:9E
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 018CC500B8B34078DB5CD6E8C6361A893380
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/zJ4YK-UkCeu2RS-DGgJ0EfSTrZ4.roa
Signing time: Mon 01 Jan 2024 12:30:07 +0000
ROA not before: Mon 01 Jan 2024 12:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42870
IP address blocks: 217.22.169.0/24 maxlen: 24
217.22.168.0/22 maxlen: 22
217.22.168.0/24 maxlen: 24
217.22.171.0/24 maxlen: 24
217.22.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:b8:b3:40:78:db:5c:d6:e8:c6:36:1a:89:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Jan 1 12:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc9e182be52409ebb6452f831a027411f493ad9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:89:18:43:ad:9e:b6:fe:c6:04:39:b8:f3:ab:
14:e0:e5:b5:6d:46:f7:7c:c2:07:26:01:55:b0:87:
20:24:06:be:29:e4:c0:36:ef:ce:4f:79:a8:90:a5:
ce:a0:4c:3e:05:fe:cf:06:b9:50:cb:b8:cd:9a:6e:
8e:f7:b5:3e:ce:46:64:06:96:70:3f:36:a5:41:08:
57:1d:be:53:26:1b:7f:d4:d7:e9:70:8c:97:43:40:
57:ae:d6:a1:5c:89:96:02:52:5b:4b:dc:7b:93:20:
fa:13:a9:8c:4f:74:59:5b:b0:f5:5c:af:a5:3b:3e:
90:c7:6f:fa:e5:c3:13:95:cf:7d:f9:2f:53:2c:50:
2c:73:2f:51:31:6f:fd:50:f6:38:21:80:e6:62:9b:
76:bb:ee:48:78:e2:55:8e:66:4e:c9:69:c7:4c:25:
12:be:a0:92:7e:62:38:4c:d6:f0:e1:72:93:28:f7:
c4:7b:12:f1:a6:84:d6:3b:58:fe:c7:10:d9:2e:4e:
d0:f1:47:43:b6:e7:c1:42:f9:92:3f:99:1d:f7:6a:
5e:b1:20:af:ae:0e:a7:f3:4f:16:e9:3e:be:c7:ff:
a8:c6:ee:c9:45:10:4a:59:fa:e2:eb:b5:0f:27:02:
39:a9:ba:36:6f:6a:92:30:62:b3:7b:03:24:9d:4f:
60:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9E:18:2B:E5:24:09:EB:B6:45:2F:83:1A:02:74:11:F4:93:AD:9E
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/zJ4YK-UkCeu2RS-DGgJ0EfSTrZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.22.168.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:9a:8d:a5:0a:2c:ba:6a:45:bb:c3:b4:1e:f2:0e:66:9b:db:
6d:22:a9:fd:3a:8c:d6:fc:d9:ba:d1:c1:fe:b5:e4:82:7a:6d:
31:7f:43:fb:43:d1:7a:7e:9c:64:fe:8f:08:53:6d:0f:a7:e9:
dc:32:59:bd:51:6d:ad:81:6f:7f:6e:0a:5e:e5:33:43:df:de:
0b:61:51:bd:96:d8:ee:cf:11:4a:f3:86:6e:bd:93:d9:76:ba:
7d:2b:99:76:87:ce:e3:5c:d3:c7:ff:6f:1b:ed:ba:3d:c9:80:
a1:ca:1b:27:10:af:ac:0a:75:91:00:40:ef:2a:38:9a:34:74:
f2:28:ba:fe:20:f5:9a:a9:80:73:99:de:f2:69:bf:cb:77:1c:
9d:c5:57:13:99:95:73:8b:bc:8d:e2:18:45:f0:10:6f:50:5d:
31:d2:87:3f:dd:4b:ab:3e:0c:df:4a:9e:41:fb:41:d8:9f:24:
f6:f2:80:1d:1c:a6:80:30:1b:cd:13:27:e2:e5:27:66:0e:73:
c1:96:14:f7:48:c3:1a:46:cc:c9:66:5b:1b:bb:50:3e:91:66:
79:83:39:58:87:73:1e:bf:b1:3b:c1:a5:30:de:b9:af:eb:16:
79:20:c9:ca:2f:07:46:21:22:78:cf:02:e3:20:b7:7c:84:3f:
37:fe:80:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:11 2025 by rpki-client