Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/zbZeI6YvaTZtrJAwCESZHdblvVA.roa
File: zbZeI6YvaTZtrJAwCESZHdblvVA.roa (raw, json)
Hash identifier: BImG2tXsLI2FVDRMI0yNdwoMzlQZpmvkvZ/fDS3nJwQ=
Subject key identifier: CD:B6:5E:23:A6:2F:69:36:6D:AC:90:30:08:44:99:1D:D6:E5:BD:50
Certificate issuer: /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial: 0196488B99EE1E9BFA4A3CEE15F8B62CA460
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/zbZeI6YvaTZtrJAwCESZHdblvVA.roa
Signing time: Fri 18 Apr 2025 10:57:10 +0000
ROA not before: Fri 18 Apr 2025 10:57:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200596
IP address blocks: 85.184.228.0/22 maxlen: 24
91.212.42.0/24 maxlen: 24
135.84.148.0/22 maxlen: 24
147.12.16.0/20 maxlen: 24
185.101.196.0/22 maxlen: 24
2a00:5ea0::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 08 May 2025 08:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:8b:99:ee:1e:9b:fa:4a:3c:ee:15:f8:b6:2c:a4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Validity
Not Before: Apr 18 10:57:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdb65e23a62f69366dac90300844991dd6e5bd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:3a:f1:e4:5c:0c:bd:39:b6:45:f3:40:43:
2e:05:0d:ff:96:ad:cf:7f:78:b9:2f:44:00:43:f9:
02:e6:17:7f:75:1a:46:5e:55:cd:86:79:a8:a1:f0:
77:bf:8b:72:51:66:8c:12:99:60:2f:7f:f9:db:22:
0e:3b:98:c1:70:31:87:22:b5:77:d0:35:0b:2e:d9:
52:29:2e:be:4a:d0:2b:93:40:11:b0:7c:69:2e:7b:
1b:f0:3c:d4:92:a4:b5:84:2b:70:e0:87:81:8e:cc:
db:c9:c3:12:54:6f:64:97:76:c1:00:2b:14:b4:49:
09:68:d9:71:f2:84:9a:32:b9:08:22:f1:fa:55:a7:
ae:12:29:71:b9:9d:7d:9d:49:c7:06:40:8a:12:0d:
36:e8:d1:10:c6:89:08:19:01:fe:75:2e:50:ba:7b:
57:db:b0:87:cb:e4:25:a4:f6:8b:46:9b:67:1f:70:
d5:d3:34:79:f2:bd:68:a1:dc:03:80:85:db:a7:c1:
78:79:a7:32:c5:9e:c2:2d:38:a5:aa:8a:36:3b:a4:
b2:47:2b:43:fe:ae:f3:b7:ed:75:f2:a9:0a:67:da:
b6:9a:d2:15:4d:92:05:ce:11:54:7b:4c:ed:fa:de:
d8:de:cd:d6:71:8d:25:c2:8f:a5:a5:0d:91:f7:8d:
b9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B6:5E:23:A6:2F:69:36:6D:AC:90:30:08:44:99:1D:D6:E5:BD:50
X509v3 Authority Key Identifier:
keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/zbZeI6YvaTZtrJAwCESZHdblvVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.184.228.0/22
91.212.42.0/24
135.84.148.0/22
147.12.16.0/20
185.101.196.0/22
IPv6:
2a00:5ea0::/29
Signature Algorithm: sha256WithRSAEncryption
67:49:ee:37:8a:16:89:b5:fc:a1:3f:06:aa:f5:78:b0:9c:69:
17:e0:99:ca:3f:39:e7:9b:3b:f2:89:16:4e:9e:6c:f9:17:e5:
37:29:29:e1:dc:c2:b2:ca:21:8d:c6:59:14:11:eb:5c:aa:7e:
6b:12:52:40:d9:fb:b2:f1:4b:10:aa:8c:c8:d3:99:b5:e2:b2:
80:a0:9e:27:b8:f8:7f:19:80:f6:25:d0:79:38:f6:92:66:52:
03:4d:cb:1c:f4:c9:7d:76:fd:91:f5:32:e6:c9:4c:3e:d4:bf:
c0:30:84:a4:f6:04:f5:b4:fd:e8:6b:d3:0e:51:b9:79:c8:e6:
05:7e:23:04:e6:f0:60:03:ce:07:e9:ca:a6:74:4f:54:e3:67:
db:e6:bf:f7:e4:95:f3:59:0e:7f:8d:2d:e8:82:8f:cc:91:9b:
0f:bd:48:33:14:d0:28:d3:9c:2c:5f:e2:c4:80:b2:7b:f2:d1:
2c:11:83:01:00:1f:ef:75:15:f4:ad:4a:ca:ec:57:a3:db:83:
fa:99:ae:63:32:15:f0:03:53:0e:56:28:c7:6a:38:87:1b:13:
bb:02:8b:d4:82:ed:70:ae:aa:48:10:4f:7e:6e:18:fb:ee:7c:
34:a4:49:62:5e:fd:e4:47:74:f1:f1:a2:a2:6c:4e:fb:92:0e:
ba:89:bf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:14:47 2025 by rpki-client