Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/0zsDEBli7xwqBEpod6vivjHoH4M.roa
File: 0zsDEBli7xwqBEpod6vivjHoH4M.roa (raw, json)
Hash identifier: L1PEOImYQe2gXhiNKS5WwJcnT+Nw+wXV0P2Q7QAiia8=
Subject key identifier: D3:3B:03:10:19:62:EF:1C:2A:04:4A:68:77:AB:E2:BE:31:E8:1F:83
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 0196816A5075AACE4163BB909829E6B6C73D
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/0zsDEBli7xwqBEpod6vivjHoH4M.roa
Signing time: Tue 29 Apr 2025 11:59:10 +0000
ROA not before: Tue 29 Apr 2025 11:59:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 185.113.8.0/24 maxlen: 24
213.111.160.0/22 maxlen: 22
213.111.164.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 02 May 2025 13:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6a:50:75:aa:ce:41:63:bb:90:98:29:e6:b6:c7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Apr 29 11:59:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d33b03101962ef1c2a044a6877abe2be31e81f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:38:c1:fa:33:a1:67:86:fe:70:14:40:81:2a:
86:9d:6a:ac:fd:24:63:e8:0c:13:d1:42:bb:b2:3f:
25:0b:8c:87:64:e1:f8:02:2d:63:9e:61:06:ba:62:
df:63:13:6e:6a:33:f6:8e:ef:15:33:ea:fc:a3:96:
d6:b5:c0:1d:42:62:e5:86:8c:5c:5e:91:df:ed:ac:
54:3a:c4:4e:9d:64:10:3b:94:14:58:de:74:dc:ce:
fe:50:b8:5f:20:61:0c:8b:8c:e9:0d:a3:73:ab:ef:
1d:55:ce:47:3f:c5:33:53:d5:3d:f0:2d:f5:21:32:
e3:00:8b:43:8b:12:66:1e:f0:f3:31:09:66:27:db:
73:9e:b3:91:90:d6:39:3b:f7:7a:43:b4:f7:63:8b:
ce:ef:34:1b:f1:fd:92:b5:06:9b:42:e0:7e:c5:42:
71:5f:7c:1a:36:67:b9:d6:e7:5f:aa:de:d2:8e:de:
ec:1e:d3:f4:2a:ea:da:d0:ff:e4:ad:0a:f6:b8:5a:
4d:43:bc:ad:36:92:26:5e:59:e5:6e:fc:aa:3d:ef:
23:6f:f3:c9:03:46:9a:1b:2c:38:00:4b:85:7d:a2:
2e:ae:09:b3:9f:10:9e:1b:c7:5f:99:2f:3d:b4:df:
82:74:99:22:49:c1:0a:5c:09:d0:1b:2f:ea:e0:04:
70:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3B:03:10:19:62:EF:1C:2A:04:4A:68:77:AB:E2:BE:31:E8:1F:83
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/0zsDEBli7xwqBEpod6vivjHoH4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.8.0/24
213.111.160.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:68:50:54:60:e5:59:08:9d:73:b1:60:2b:a7:0a:96:12:a5:
77:62:7a:4c:65:08:a7:23:ec:4c:62:e4:7e:ed:57:70:57:a4:
63:d0:44:fc:49:3f:0e:ec:3d:80:cd:69:82:52:bd:ef:73:10:
8b:85:13:9e:ff:83:9f:cb:8d:64:81:a6:64:2c:d9:09:67:13:
c3:04:3a:41:9f:72:de:0c:e0:02:9e:73:16:0d:46:67:aa:d1:
d2:c7:97:61:74:5c:12:25:a2:e0:3f:b5:bf:1b:a9:66:6e:50:
6b:e3:d7:ba:cf:74:0a:67:dc:7d:9a:3f:b2:2c:b3:af:d1:ea:
d8:e1:cd:ad:2b:89:1b:fc:71:4f:f8:bf:92:e0:74:f8:9a:1d:
c7:99:0b:ba:3d:d7:a8:4e:c4:53:dd:a8:20:1d:51:c8:8a:4a:
68:4d:94:83:27:33:35:d0:4d:40:e5:0c:f1:38:c2:c9:c0:e2:
b2:05:e5:07:a1:65:13:63:61:99:22:49:27:3c:8e:45:3d:86:
8e:f4:26:e9:c8:e9:21:9d:e9:59:49:c4:9a:8f:53:bd:69:b2:
a1:07:0f:15:dc:56:c8:d7:4a:c2:b7:37:87:04:e9:c7:39:72:
dc:0e:ed:d6:aa:02:6b:78:4b:3e:09:27:7a:af:d9:28:34:23:
82:91:4b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:43:23 2025 by rpki-client