Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/zp_LQZJTGGTWQB4cbQST89QPyhs.roa
File: zp_LQZJTGGTWQB4cbQST89QPyhs.roa (raw, json)
Hash identifier: zE+8D34puOOnfIE9eLD1OzQd6BXWcCO/oeqi0ch2NIY=
Subject key identifier: CE:9F:CB:41:92:53:18:64:D6:40:1E:1C:6D:04:93:F3:D4:0F:CA:1B
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 019726D97621E1C205B8FEDADA22E4D97FC2
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/zp_LQZJTGGTWQB4cbQST89QPyhs.roa
Signing time: Sat 31 May 2025 14:57:55 +0000
ROA not before: Sat 31 May 2025 14:57:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 85.115.211.0/24 maxlen: 24
213.145.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 11:41:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:26:d9:76:21:e1:c2:05:b8:fe:da:da:22:e4:d9:7f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: May 31 14:57:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce9fcb4192531864d6401e1c6d0493f3d40fca1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:10:22:56:e3:00:2d:f2:ed:41:1b:84:f7:
f3:22:50:1b:1f:c8:61:80:11:6a:2a:ce:97:79:16:
3a:a2:aa:05:67:90:54:e8:55:a5:60:a5:60:96:22:
db:03:96:76:02:27:9e:e1:3f:6c:8b:2f:cf:5a:67:
89:39:e6:94:b3:40:0a:b1:94:cb:a7:59:49:08:aa:
0b:e5:e4:f1:b3:5a:5d:a6:c3:2f:0c:6c:5e:12:2e:
61:fd:41:1e:1f:45:f3:f4:09:02:42:b0:65:5a:66:
80:82:9f:05:00:e8:0c:17:bf:57:1e:1c:40:a5:05:
65:97:75:67:af:0e:cb:13:da:fe:81:0c:bb:cc:0e:
6a:63:6d:a3:62:ad:5e:ce:14:0e:c3:7f:94:5e:4e:
d4:4b:14:c5:68:11:d5:71:af:d3:9f:c6:44:21:ca:
22:61:56:fe:0f:24:5b:bc:88:07:c1:b9:48:1d:23:
74:09:63:17:3f:ad:19:96:e4:8c:ba:84:b4:fe:62:
cf:31:d0:95:f1:d7:14:d5:2d:88:f7:99:da:04:a5:
ff:9b:45:d1:25:a3:16:b8:61:0a:76:2e:7c:d8:53:
2d:2d:96:e2:fc:7f:fa:55:83:dd:5a:51:cc:e9:73:
3c:e6:f0:39:99:4f:e4:dc:c0:0f:dc:d2:fa:6f:ee:
e6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9F:CB:41:92:53:18:64:D6:40:1E:1C:6D:04:93:F3:D4:0F:CA:1B
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/zp_LQZJTGGTWQB4cbQST89QPyhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.211.0/24
213.145.82.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:6e:ab:cf:20:64:b2:65:c7:94:7c:d1:89:02:72:74:ca:c1:
ad:7b:82:53:40:f3:bd:20:e1:02:47:1c:49:19:96:72:2a:c3:
fb:ca:a7:d7:d6:a8:60:2d:1a:95:d0:b0:fd:9e:38:3e:b9:4e:
ea:7b:fa:49:34:23:be:eb:67:a7:da:80:59:6f:da:1d:dc:e6:
51:58:f5:a8:dc:63:5b:98:65:16:ad:84:cc:37:17:34:42:7d:
66:d6:f6:3f:69:3c:36:f2:95:85:77:b4:8d:cb:3b:eb:9f:fd:
73:5d:d3:78:00:ed:7f:1b:8c:70:f2:7b:66:b3:2f:21:26:0b:
36:5b:a3:6d:14:99:47:49:91:ab:80:a2:d8:de:0b:13:53:27:
c4:82:19:8d:82:cd:fc:61:a8:4e:28:ef:33:6e:d2:87:f9:05:
7e:9e:14:46:db:be:83:b2:a4:72:8f:11:28:d6:62:af:33:a8:
cb:bc:e5:9d:9b:4a:51:b5:77:b3:0a:26:7f:de:13:19:70:14:
ed:96:73:c0:35:9b:bd:eb:5a:26:cf:78:06:07:c6:59:36:51:
e6:c5:51:00:dc:ec:d9:3b:6b:a2:40:28:5f:cb:96:83:2c:6b:
b9:4a:6b:fd:b6:89:fc:42:91:5d:87:c1:bc:6a:5a:cd:58:31:
af:65:9b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:43:09 2025 by rpki-client