Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZWwuVGK6LYf9K14sAzwPm9lwQUM.roa
File: ZWwuVGK6LYf9K14sAzwPm9lwQUM.roa (raw, json)
Hash identifier: wDDp7lrDTwG8GYLtTG2aw83OfF38PlSUEHCuULx6DEM=
Subject key identifier: 65:6C:2E:54:62:BA:2D:87:FD:2B:5E:2C:03:3C:0F:9B:D9:70:41:43
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01941A8659B78995B487C3F0DE5B4363A756
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZWwuVGK6LYf9K14sAzwPm9lwQUM.roa
Signing time: Tue 31 Dec 2024 02:23:19 +0000
ROA not before: Tue 31 Dec 2024 02:23:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56971
IP address blocks: 45.84.88.0/24 maxlen: 24
45.89.244.0/24 maxlen: 24
45.91.193.0/24 maxlen: 24
109.206.236.0/24 maxlen: 24
194.113.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1a:86:59:b7:89:95:b4:87:c3:f0:de:5b:43:63:a7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 31 02:23:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=656c2e5462ba2d87fd2b5e2c033c0f9bd9704143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:55:45:2b:67:d8:0a:7e:7e:23:8d:8b:2a:9b:
72:41:f9:b9:eb:3a:4d:12:a6:c5:f2:4c:e7:91:ad:
fe:8c:0a:88:b7:29:20:88:46:dd:50:4f:62:0b:d1:
e4:62:af:c2:6a:4d:ad:3a:2b:9f:c3:39:cd:2c:58:
bc:e7:2d:db:db:56:5b:b2:5c:43:e4:98:25:9e:5f:
33:a1:97:f1:c7:93:4f:7f:b2:d7:a8:e6:c7:a5:27:
71:b6:a8:9a:1b:b5:87:ae:a9:bc:0c:ea:c1:09:40:
e5:1d:f0:3d:fa:45:16:b3:0c:b7:b4:07:cb:d8:03:
1a:e1:71:84:47:82:fa:4f:f2:3f:79:ab:c5:2f:0e:
8f:fc:6d:74:84:1a:42:d9:8d:c5:65:a8:0d:e0:c5:
a6:c9:3c:f8:fb:b6:c7:92:25:23:47:d7:4f:81:df:
75:c8:96:4f:b8:74:e2:6c:ce:ee:e5:07:ee:8e:2b:
1d:b9:e6:2f:e7:7d:de:f7:a7:4f:0e:91:42:ae:81:
a1:f1:41:7d:93:13:53:31:5b:60:aa:1f:19:1b:75:
81:2c:93:db:07:9d:2b:fb:94:59:70:28:1d:c4:53:
94:57:bc:f6:3d:1f:fe:a3:5b:d1:e9:d3:ef:78:23:
12:60:bd:21:45:70:f1:97:94:9d:3a:39:67:a1:62:
b4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6C:2E:54:62:BA:2D:87:FD:2B:5E:2C:03:3C:0F:9B:D9:70:41:43
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZWwuVGK6LYf9K14sAzwPm9lwQUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.88.0/24
45.89.244.0/24
45.91.193.0/24
109.206.236.0/24
194.113.37.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:bc:30:ec:56:fa:26:8a:a4:19:16:48:54:e0:70:dd:d8:2f:
9e:9f:0e:25:a7:4b:72:ed:cd:d9:cb:95:9a:d8:3e:5e:c3:fb:
6d:d9:00:a5:8b:2e:08:c0:c4:19:ab:71:09:ce:0f:ee:26:b3:
5c:08:e8:7a:f6:af:f6:c2:ac:84:dd:9f:cd:1b:6a:56:c5:5b:
3b:6d:c7:cb:ed:72:3b:51:d3:fe:c1:37:4d:84:1b:21:49:11:
7c:d8:91:ef:a2:ca:1a:28:ac:83:d8:bb:67:bf:24:cc:3e:c0:
63:bf:a9:48:98:3c:b6:53:b3:ee:6a:19:2d:54:98:37:b1:83:
68:91:75:73:2a:e4:ad:92:eb:8e:1c:14:1c:43:08:d7:bb:7b:
af:76:8a:de:05:0a:91:5c:31:fd:99:50:97:fb:e1:ba:d2:3f:
87:e2:be:61:84:0f:61:95:fd:2c:26:f4:fc:36:86:0e:3b:8c:
e4:4b:06:8b:b3:d7:5f:5c:76:d6:e3:3b:15:4e:4f:e3:8b:7b:
fe:2d:f6:a6:97:11:b9:9b:fd:58:7e:69:d5:25:1d:05:f1:bc:
25:5d:71:1a:64:f9:74:e9:f3:5c:2f:d0:9b:74:fb:e2:67:cc:
cf:f2:e7:f5:01:dc:fb:25:4b:56:5e:90:f2:f4:74:99:8e:77:
2f:27:d3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:21:00 2025 by rpki-client