Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/0ZCSvagFosVtNjI5FFFfg0uO8Jo.roa
File: 0ZCSvagFosVtNjI5FFFfg0uO8Jo.roa (raw, json)
Hash identifier: 6tuJw4Ow0Ip668RWGUzxFr6nIQiWKj6ipgym2A59LZA=
Subject key identifier: D1:90:92:BD:A8:05:A2:C5:6D:36:32:39:14:51:5F:83:4B:8E:F0:9A
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018ECBFA5F37BD696E5C4B10449B4C77113B
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/0ZCSvagFosVtNjI5FFFfg0uO8Jo.roa
Signing time: Thu 11 Apr 2024 07:06:06 +0000
ROA not before: Thu 11 Apr 2024 07:06:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25515
IP address blocks: 77.51.0.0/16 maxlen: 16
85.94.0.0/19 maxlen: 19
89.109.192.0/18 maxlen: 18
90.154.120.0/21 maxlen: 21
91.188.223.0/24 maxlen: 24
95.72.0.0/15 maxlen: 15
146.19.98.0/24 maxlen: 24
185.141.236.0/23 maxlen: 23
185.202.109.0/24 maxlen: 24
213.140.224.0/19 maxlen: 19
217.107.96.0/21 maxlen: 21
217.107.104.0/23 maxlen: 23
2a00:56c0:40d::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 Aug 2024 11:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cb:fa:5f:37:bd:69:6e:5c:4b:10:44:9b:4c:77:11:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 11 07:06:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d19092bda805a2c56d36323914515f834b8ef09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:97:6d:93:06:39:1e:70:5d:41:3a:0f:53:95:
17:7c:e4:d1:21:81:2e:2c:64:6a:d7:75:d8:89:aa:
16:98:a0:b6:4f:a3:d5:48:ce:1f:5d:d8:39:df:dd:
2f:87:db:76:78:c0:e0:e4:72:32:54:5d:89:dd:e8:
80:a0:4b:9a:a1:fe:a3:31:9b:07:f2:06:a9:78:00:
bb:bd:10:bf:62:6a:d2:ea:72:60:66:be:e4:35:54:
03:c7:6c:c6:5c:72:50:32:70:14:df:1c:53:91:b5:
c0:2a:93:32:73:91:38:c9:64:24:c3:bf:1d:b8:00:
42:49:44:1a:84:94:24:c2:8a:0a:44:8f:96:de:9a:
5e:5a:9e:9f:45:54:d9:cb:9d:4b:28:64:d0:89:4e:
03:64:dc:f7:4e:38:82:0f:cb:5f:55:42:8e:f7:bd:
28:7b:2d:81:c2:f8:84:50:e3:ee:4c:5b:56:81:98:
24:51:9a:99:d3:4d:95:55:ad:7d:01:d2:ff:0a:51:
d1:6c:32:93:c6:66:a8:9e:36:7f:e8:f7:0f:d6:21:
c3:96:8c:6f:a0:db:b1:5f:32:54:5d:ca:4a:89:b1:
a3:9e:3a:53:3c:3e:19:23:da:c6:76:09:14:30:c1:
5e:b6:a0:e8:06:b0:21:8f:61:b2:d7:e9:86:99:a9:
51:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:90:92:BD:A8:05:A2:C5:6D:36:32:39:14:51:5F:83:4B:8E:F0:9A
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/0ZCSvagFosVtNjI5FFFfg0uO8Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.51.0.0/16
85.94.0.0/19
89.109.192.0/18
90.154.120.0/21
91.188.223.0/24
95.72.0.0/15
146.19.98.0/24
185.141.236.0/23
185.202.109.0/24
213.140.224.0/19
217.107.96.0-217.107.105.255
IPv6:
2a00:56c0:40d::/48
Signature Algorithm: sha256WithRSAEncryption
25:22:76:c2:78:00:3a:e7:93:21:4f:85:a5:4e:c4:36:d3:fa:
bf:91:19:c4:73:f6:41:9f:b5:28:ff:48:0d:bf:64:56:1d:c4:
f5:d3:e1:34:aa:38:a3:7f:88:fa:64:5f:c9:a4:03:96:98:26:
84:b5:b7:7e:8c:18:b2:f7:66:2e:2b:90:9a:e1:08:04:53:52:
6b:23:fb:98:67:ab:cf:25:15:de:95:81:27:18:3e:cc:e7:85:
0b:e7:d4:4e:7c:20:ef:d4:e0:28:8d:02:76:72:d7:b7:2d:2b:
9e:5c:64:7b:99:93:a8:e2:4f:5e:a9:26:ab:75:37:95:ca:79:
40:a8:01:a5:3f:d3:7b:55:92:b9:ef:e8:a6:97:ab:bd:ae:48:
ea:42:70:0a:ee:36:93:73:21:db:56:25:27:60:f9:7a:2d:b9:
70:85:0f:1b:76:c7:de:ce:c4:0e:cd:ff:b4:eb:d9:8d:05:09:
e9:f1:03:32:89:3e:9e:29:b1:f7:e6:31:48:f2:60:b4:82:99:
cb:4f:64:f5:35:fb:0c:ef:4f:0e:29:c4:22:ad:08:20:d3:40:
c2:b9:be:ef:d8:e6:50:15:8e:b3:87:e1:fd:6a:aa:59:dc:85:
66:ae:50:45:86:75:69:59:9a:11:b2:ae:e4:94:89:56:dc:29:
0d:9c:ee:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:29:58 2025 by rpki-client