Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZlxOwwj4PYkOOCz9aHaDPyOoBc0.roa
File: ZlxOwwj4PYkOOCz9aHaDPyOoBc0.roa (raw, json)
Hash identifier: wh2gl+s+Ix2OpRQ9dPJu7TrZSZfiPZfTdxu+c3nDe60=
Subject key identifier: 66:5C:4E:C3:08:F8:3D:89:0E:38:2C:FD:68:76:83:3F:23:A8:05:CD
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01969A712CEF922EC4F075B4312CB68F5475
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZlxOwwj4PYkOOCz9aHaDPyOoBc0.roa
Signing time: Sun 04 May 2025 08:37:10 +0000
ROA not before: Sun 04 May 2025 08:37:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 193.124.7.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
212.192.241.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 06 May 2025 09:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:71:2c:ef:92:2e:c4:f0:75:b4:31:2c:b6:8f:54:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 4 08:37:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=665c4ec308f83d890e382cfd6876833f23a805cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e4:69:9c:38:b3:98:3e:f4:b0:03:64:69:8c:
a0:0f:6d:cb:07:4c:99:83:17:af:30:64:02:40:2a:
a3:7e:11:a4:04:2b:ae:e9:10:7f:4e:3f:47:cf:1d:
00:2a:ed:36:32:52:d3:60:0f:8a:1c:39:6e:ff:ab:
25:f7:dc:46:2a:d9:bd:9a:1d:bd:2a:be:25:bd:77:
95:42:ec:57:19:58:cb:90:17:07:dc:71:e2:17:d5:
8c:49:fb:16:24:db:d7:a1:ec:db:f3:4e:38:8e:60:
af:0b:5f:e6:7f:ac:af:66:f2:5e:80:b3:1b:5b:ae:
ee:73:a4:ae:c6:ba:b7:fd:1a:37:cf:8a:74:e8:a9:
bc:a4:c8:6d:55:c7:5c:1b:99:34:39:82:60:ea:84:
a1:a0:2d:be:a6:19:39:98:e6:e5:e1:a4:41:81:97:
98:b3:8b:e6:56:b4:fc:5b:f8:a2:65:38:ff:e5:07:
1e:b8:06:7c:d8:ed:e5:4b:1d:97:93:da:29:75:28:
76:41:38:85:76:6b:6e:d4:6c:b6:8d:9d:33:31:87:
93:27:c7:49:66:bc:99:9c:ca:7d:9a:73:56:5b:31:
34:e7:b8:99:4f:d3:1c:2a:1d:9c:8b:19:b3:02:83:
3e:89:8b:35:07:36:8a:1f:53:87:a6:5a:c8:e3:a8:
4b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5C:4E:C3:08:F8:3D:89:0E:38:2C:FD:68:76:83:3F:23:A8:05:CD
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZlxOwwj4PYkOOCz9aHaDPyOoBc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.7.0/24
194.58.155.0/24
194.87.53.0/24
194.87.119.0/24
194.87.169.0/24
194.87.179.0/24
195.133.24.0/23
195.133.40.0/23
195.133.50.0/23
195.133.92.0/23
212.192.241.0/24
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
27:24:08:4b:03:1c:35:0b:dd:f5:90:c1:e6:dc:98:1b:cb:e5:
da:99:b8:ad:db:3a:ea:bf:b8:90:44:62:38:22:da:2e:12:ed:
d7:f6:79:25:2a:15:f5:d2:fc:b1:ec:c4:43:ff:1b:de:c1:ff:
81:04:21:9f:a8:71:86:19:1d:89:63:aa:13:53:11:d6:31:0c:
a9:d6:c1:77:af:3b:b6:35:cc:6e:84:6f:14:e3:6b:fa:73:c5:
ab:a9:92:59:68:3d:10:3f:4c:5c:c3:08:4f:60:93:f9:24:fa:
28:dc:d6:ac:8b:e5:59:b5:6e:d3:94:7c:86:3f:4b:12:3d:93:
27:62:fb:6c:19:ad:a9:98:1c:e5:54:71:a1:24:55:1b:6e:36:
5b:7e:bc:91:d1:30:71:31:6f:0f:44:14:45:29:a2:22:ad:84:
0c:c3:3e:45:df:b9:03:ff:40:a7:df:d6:3b:a9:62:51:73:4d:
cd:01:f8:83:f1:83:ba:ae:65:52:3d:c1:db:68:f1:e1:c8:37:
19:bd:4b:a9:08:52:1d:dc:fc:01:ce:8c:c3:d4:83:e5:1b:6e:
80:04:87:fc:7c:94:cb:16:16:ce:bf:89:84:ac:43:2e:c5:99:
0f:89:30:95:8c:2b:d5:5d:fa:c1:76:f7:9b:4c:88:fc:89:5e:
12:9d:5f:1b
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAZaacSzvki7E8HW0MSy2j1R1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjUwNTA0MDgzNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjVjNGVjMzA4ZjgzZDg5MGUzODJjZmQ2ODc2ODMzZjIzYTgwNWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuRpnDizmD70sANkaYygD23LB0yZ
gxevMGQCQCqjfhGkBCuu6RB/Tj9Hzx0AKu02MlLTYA+KHDlu/6sl99xGKtm9mh29
Kr4lvXeVQuxXGVjLkBcH3HHiF9WMSfsWJNvXoezb8044jmCvC1/mf6yvZvJegLMb
W67uc6Suxrq3/Ro3z4p06Km8pMhtVcdcG5k0OYJg6oShoC2+phk5mObl4aRBgZeY
s4vmVrT8W/iiZTj/5QceuAZ82O3lSx2Xk9opdSh2QTiFdmtu1Gy2jZ0zMYeTJ8dJ
ZryZnMp9mnNWWzE057iZT9McKh2cixmzAoM+iYs1BzaKH1OHplrI46hL3QIDAQAB
o4ICYTCCAl0wHQYDVR0OBBYEFGZcTsMI+D2JDjgs/Wh2gz8jqAXNMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvWmx4T3d3ajRQWWtPT0N6OWFIYURQeU9vQmMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBOBAIAATBIAwQAwXwHAwQA
wjqbAwQAwlc1AwQAwld3AwQAwlepAwQAwlezAwQBw4UYAwQBw4UoAwQBw4UyAwQB
w4VcAwQA1MDxAwQB1MEaMBQEAgACMA4DBQMqAVfAAwUDKgz/QDANBgkqhkiG9w0B
AQsFAAOCAQEAJyQISwMcNQvd9ZDB5tyYG8vl2pm4rds66r+4kERiOCLaLhLt1/Z5
JSoV9dL8sezEQ/8b3sH/gQQhn6hxhhkdiWOqE1MR1jEMqdbBd687tjXMboRvFONr
+nPFq6mSWWg9ED9MXMMIT2CT+ST6KNzWrIvlWbVu05R8hj9LEj2TJ2L7bBmtqZgc
5VRxoSRVG242W368kdEwcTFvD0QURSmiIq2EDMM+Rd+5A/9Ap9/WO6liUXNNzQH4
g/GDuq5lUj3B22jx4cg3Gb1LqQhSHdz8Ac6Mw9SD5RtugASH/HyUyxYWzr+JhKxD
LsWZD4kwlYwr1V36wXb3m0yI/IleEp1fGw==
-----END CERTIFICATE-----
Generated at Wed May 7 14:53:35 2025 by rpki-client