Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/ZEvT2yhWUlQfwfD4uz1fKrhhIiM.roa
File: ZEvT2yhWUlQfwfD4uz1fKrhhIiM.roa (raw, json)
Hash identifier: H7AfN1S2FCz1YaPNc1QjwqAkn9WBAvyzKXZk5iktTec=
Subject key identifier: 64:4B:D3:DB:28:56:52:54:1F:C1:F0:F8:BB:3D:5F:2A:B8:61:22:23
Certificate issuer: /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial: 0194D12F9EF7D8B34BB61077AC67A3F38BD0
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/ZEvT2yhWUlQfwfD4uz1fKrhhIiM.roa
Signing time: Tue 04 Feb 2025 13:39:06 +0000
ROA not before: Tue 04 Feb 2025 13:39:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50564
IP address blocks: 45.131.28.0/22 maxlen: 22
45.131.29.0/24 maxlen: 24
45.131.30.0/24 maxlen: 24
45.131.31.0/24 maxlen: 24
94.158.252.0/22 maxlen: 22
94.158.252.0/24 maxlen: 24
94.158.253.0/24 maxlen: 24
94.158.255.0/24 maxlen: 24
185.44.24.0/22 maxlen: 22
185.44.24.0/24 maxlen: 24
185.44.25.0/24 maxlen: 24
185.44.26.0/24 maxlen: 24
185.44.27.0/24 maxlen: 24
185.95.124.0/22 maxlen: 22
185.95.124.0/24 maxlen: 24
185.95.125.0/24 maxlen: 24
185.95.126.0/24 maxlen: 24
185.95.127.0/24 maxlen: 24
185.104.236.0/22 maxlen: 22
185.104.236.0/24 maxlen: 24
185.104.237.0/24 maxlen: 24
185.104.238.0/24 maxlen: 24
185.104.239.0/24 maxlen: 24
185.143.136.0/22 maxlen: 22
185.143.136.0/24 maxlen: 24
185.143.137.0/24 maxlen: 24
185.143.138.0/24 maxlen: 24
185.143.139.0/24 maxlen: 24
185.182.124.0/22 maxlen: 22
185.182.124.0/24 maxlen: 24
185.182.125.0/24 maxlen: 24
185.182.126.0/24 maxlen: 24
185.182.127.0/24 maxlen: 24
185.184.0.0/22 maxlen: 23
185.184.0.0/23 maxlen: 23
185.184.0.0/24 maxlen: 24
185.184.1.0/24 maxlen: 24
185.184.2.0/24 maxlen: 24
185.184.3.0/24 maxlen: 24
185.208.20.0/22 maxlen: 22
185.208.20.0/24 maxlen: 24
185.208.21.0/24 maxlen: 24
185.208.22.0/24 maxlen: 24
185.208.23.0/24 maxlen: 24
185.213.48.0/22 maxlen: 22
185.213.48.0/24 maxlen: 24
185.213.49.0/24 maxlen: 24
185.213.50.0/24 maxlen: 24
185.213.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Feb 2025 14:05:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d1:2f:9e:f7:d8:b3:4b:b6:10:77:ac:67:a3:f3:8b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Validity
Not Before: Feb 4 13:39:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=644bd3db285652541fc1f0f8bb3d5f2ab8612223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:04:6f:11:fa:76:e5:a1:9d:61:68:cb:90:4c:
87:98:55:5d:4d:ea:30:8c:4c:65:eb:62:52:35:2a:
60:b6:59:a1:0f:de:e7:53:5d:06:ce:f8:15:23:f7:
56:53:65:06:82:ff:22:45:2d:a0:33:ac:ba:25:a1:
bf:ce:ea:89:3e:7d:07:4c:6f:06:33:3a:98:29:39:
14:79:71:4e:be:42:bf:b3:cb:1a:68:c9:f4:cd:21:
13:57:a9:2b:c8:f5:d6:73:83:fd:fc:b2:45:5f:9f:
92:f1:d6:94:14:ff:78:54:7c:83:b5:7e:ee:91:d6:
b5:40:59:95:ae:43:64:63:f2:88:3d:9b:02:40:ce:
13:2e:82:fd:57:3b:84:29:23:a2:05:5b:a8:68:e4:
ae:51:a4:29:fc:9a:21:90:f2:44:37:87:56:2d:61:
db:40:7a:12:a5:bb:8a:ce:11:82:1b:5a:06:8b:9f:
ed:ac:8f:48:9a:9c:82:4c:12:f3:b8:2d:af:3d:d1:
76:73:27:02:28:04:83:1c:e5:4d:57:ae:6b:7d:3f:
c6:59:e9:33:ef:08:65:64:56:a6:86:50:04:46:eb:
75:df:75:2f:90:db:97:fa:a1:d3:1b:35:a5:da:f6:
ea:7e:66:94:ec:a1:b2:0d:a0:d5:53:12:dd:49:6c:
42:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4B:D3:DB:28:56:52:54:1F:C1:F0:F8:BB:3D:5F:2A:B8:61:22:23
X509v3 Authority Key Identifier:
keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/ZEvT2yhWUlQfwfD4uz1fKrhhIiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.28.0/22
94.158.252.0/22
185.44.24.0/22
185.95.124.0/22
185.104.236.0/22
185.143.136.0/22
185.182.124.0/22
185.184.0.0/22
185.208.20.0/22
185.213.48.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:ba:e5:d6:93:27:82:24:5c:a0:d5:28:f9:6c:46:c7:42:93:
99:e4:21:8b:dc:20:d7:5f:6b:10:8f:30:f6:d6:82:0b:f5:30:
0d:6b:c6:96:0d:10:32:5e:46:42:77:8b:20:5f:6e:ff:74:37:
d9:94:43:48:6e:25:49:e8:0c:92:2d:6d:07:c8:57:79:0a:95:
13:4f:ba:9b:af:56:a4:0f:22:de:ec:89:86:5e:82:5b:4f:4c:
0f:a9:34:18:3f:f3:5c:84:44:61:72:a5:6b:bf:85:ba:ba:97:
ee:40:22:3d:08:fa:f2:19:e9:0d:47:bc:a7:16:9e:4e:3e:35:
38:86:be:79:9e:45:1a:69:2d:e5:b6:58:7b:69:d1:af:46:db:
3d:22:7e:f2:4b:79:bc:80:7f:c3:d7:48:27:b6:70:45:d2:18:
e8:d6:cd:17:88:d2:3d:e5:1d:eb:6f:69:00:89:b3:80:e5:c7:
f3:65:e0:23:fc:05:3f:3b:7f:91:95:6d:a6:f7:13:af:52:49:
2d:5c:8c:d2:92:64:25:9e:1f:14:fc:19:9b:cc:3e:f0:55:3c:
47:1c:df:d1:5e:2f:51:a4:ed:25:77:05:c4:e0:f2:86:16:6a:
82:d1:bf:27:6e:bb:ca:4f:6a:be:68:e3:63:4b:b6:ef:0f:cf:
90:d5:f7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:30:01 2025 by rpki-client