Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/zRfpZY8euBAtZNODV2OWVs_Ujyo.roa
File: zRfpZY8euBAtZNODV2OWVs_Ujyo.roa (raw, json)
Hash identifier: 2A5uQzLPY8k7aCr8tKl4ij+djjpd4ZPK5SN/7ts0/04=
Subject key identifier: CD:17:E9:65:8F:1E:B8:10:2D:64:D3:83:57:63:96:56:CF:D4:8F:2A
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 019431DFD0EBC892D2695157F3B9D1A6FB62
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/zRfpZY8euBAtZNODV2OWVs_Ujyo.roa
Signing time: Sat 04 Jan 2025 15:12:18 +0000
ROA not before: Sat 04 Jan 2025 15:12:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35057
IP address blocks: 185.175.92.0/24 maxlen: 24
194.31.236.0/24 maxlen: 24
194.31.237.0/24 maxlen: 24
194.31.244.0/24 maxlen: 24
194.31.245.0/24 maxlen: 24
2a0e:3307::/32 maxlen: 34
2a0e:3307::/33 maxlen: 33
Validation: Failed, certificate revoked on Sat 04 Jan 2025 15:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:31:df:d0:eb:c8:92:d2:69:51:57:f3:b9:d1:a6:fb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Jan 4 15:12:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd17e9658f1eb8102d64d38357639656cfd48f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:13:d9:40:16:3a:6a:ff:00:eb:21:b2:9c:
06:30:b1:40:72:04:6b:a9:75:9f:1f:9d:ae:b0:9e:
4d:f2:0a:7c:64:7b:e0:60:53:93:1a:ea:27:74:46:
b4:c8:a3:c7:6e:c5:7e:06:ae:d8:78:8d:c4:2d:45:
ad:f9:cc:72:c4:59:7b:f0:1e:45:23:17:ed:e9:e8:
e8:2c:d7:ba:ed:a4:c5:76:a6:98:eb:f0:aa:15:ff:
a3:8b:08:f2:bb:02:8c:3a:f6:22:93:98:ec:81:75:
a0:f8:28:f9:c7:da:5f:d5:97:af:3a:4e:e3:df:83:
a5:d2:08:14:57:ee:7b:a3:b9:af:13:34:b3:62:1f:
cd:63:9c:b1:3d:d4:6b:05:9f:61:35:d2:e6:9a:8f:
51:74:a2:98:7c:b6:57:ad:b7:da:3c:83:32:26:f3:
33:fd:ab:f6:33:fb:4b:10:0d:5e:88:8e:77:b5:34:
55:5b:67:e1:83:72:8b:9e:54:96:07:83:59:3b:31:
15:0b:52:d7:e3:32:67:71:ce:cc:f7:53:67:c0:4b:
20:14:6a:00:4c:52:11:eb:91:a2:48:2d:9d:29:c9:
2b:47:16:5a:19:17:1b:21:57:0c:83:86:49:e6:b2:
3a:96:6a:b9:04:12:dc:8a:6c:22:43:92:ee:66:c7:
7a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:17:E9:65:8F:1E:B8:10:2D:64:D3:83:57:63:96:56:CF:D4:8F:2A
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/zRfpZY8euBAtZNODV2OWVs_Ujyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.92.0/24
194.31.236.0/23
194.31.244.0/23
IPv6:
2a0e:3307::/32
Signature Algorithm: sha256WithRSAEncryption
12:7b:fc:b6:5d:51:26:5d:70:9d:e8:c6:68:1c:04:0b:b4:1f:
ec:8b:e3:94:c9:1d:4b:7a:67:26:7f:06:5c:8f:69:df:cf:09:
0f:13:81:c6:58:63:24:f8:4a:d6:8c:5a:c9:a0:92:c7:21:13:
75:d4:75:77:1a:6b:0e:d3:41:61:dd:97:89:da:f5:53:f1:6e:
3f:76:37:80:d6:f9:bd:62:c9:f9:97:1d:e9:23:22:e6:80:7d:
0c:d8:e5:7b:ca:e9:b3:0e:8f:2c:8a:a1:ac:83:51:5a:a1:81:
1e:14:fb:92:5b:42:f7:03:4f:ad:6a:f4:e5:46:61:d9:e0:46:
ea:a0:19:b4:6a:86:d9:8b:6c:e8:c2:a0:15:d8:8c:9c:33:d0:
ee:49:9e:14:2f:0d:6b:e8:d2:bd:51:93:c1:54:23:98:83:5f:
a5:93:68:73:35:cb:1c:9d:ad:ab:c9:2a:90:19:8c:25:32:ad:
87:bc:e1:39:f3:a4:8d:39:e6:30:fb:b3:db:01:f1:e2:43:ee:
1d:19:df:ac:ea:9b:10:4a:19:0a:a0:df:ee:e9:27:61:9f:46:
f1:40:3d:e8:1c:d4:cc:cc:11:d1:67:3d:90:19:7d:09:20:14:
8f:6c:0b:07:49:b1:aa:0c:ac:02:96:26:87:f5:f0:c7:40:10:
2c:9c:8c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:10:57 2025 by rpki-client