Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/ZIZhatfVyeCz56ZJ_F3QieEYzfM.roa
File: ZIZhatfVyeCz56ZJ_F3QieEYzfM.roa (raw, json)
Hash identifier: IJRwc5LA+daGy3B56+q3ZkvUVgBv9uY4Krl+2sZbYN0=
Subject key identifier: 64:86:61:6A:D7:D5:C9:E0:B3:E7:A6:49:FC:5D:D0:89:E1:18:CD:F3
Certificate issuer: /CN=e47e3c9a951f1b158113ab7c3df19dfc336d9eef
Certificate serial: 019666F7FF39AA67AF4656F67B4FABDA09CB
Authority key identifier: E4:7E:3C:9A:95:1F:1B:15:81:13:AB:7C:3D:F1:9D:FC:33:6D:9E:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/ZIZhatfVyeCz56ZJ_F3QieEYzfM.roa
Signing time: Thu 24 Apr 2025 08:44:10 +0000
ROA not before: Thu 24 Apr 2025 08:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205664
IP address blocks: 151.156.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 09:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:66:f7:ff:39:aa:67:af:46:56:f6:7b:4f:ab:da:09:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47e3c9a951f1b158113ab7c3df19dfc336d9eef
Validity
Not Before: Apr 24 08:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6486616ad7d5c9e0b3e7a649fc5dd089e118cdf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fd:06:cf:5b:48:8d:fa:e6:59:2f:65:4a:e5:
03:d2:0f:02:e7:6e:18:3a:cb:95:83:96:b2:8e:81:
55:e7:0f:f0:68:75:b2:6f:c2:90:0f:f8:aa:f2:27:
cb:17:b3:14:1b:24:c2:7c:7d:d6:85:cd:b4:8c:20:
e6:d4:40:19:13:0f:dd:92:cc:00:91:30:c2:1c:9e:
de:a1:58:9a:e0:3c:e3:d2:a9:f2:c1:dd:19:5c:e8:
dd:33:a8:1b:0b:a1:97:f5:6b:52:1d:8d:44:87:bb:
56:17:88:93:0b:af:ea:4b:df:a9:cb:70:7c:cd:7f:
b5:5b:4e:0b:e0:83:cf:50:09:12:f2:d4:ff:1b:f0:
ee:0d:da:dd:a2:f4:e2:91:89:e0:15:67:a9:48:74:
68:5e:28:41:a9:ee:22:28:f5:54:9c:06:02:bc:d0:
24:de:50:17:37:c5:0b:f5:9b:5c:74:9c:4a:4e:63:
30:9a:5e:1f:e4:2d:ae:48:9c:c7:8d:ae:a8:32:ed:
bd:f3:fe:15:7f:5d:20:43:d0:cb:0d:db:d8:47:4b:
39:60:37:3b:13:ee:81:36:63:9c:19:a2:55:15:52:
e3:c7:e5:e7:1c:b9:64:c1:f0:9d:d6:44:ab:c4:42:
86:53:ff:7d:92:b7:67:3c:ca:d0:8a:66:b6:4e:66:
e1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:86:61:6A:D7:D5:C9:E0:B3:E7:A6:49:FC:5D:D0:89:E1:18:CD:F3
X509v3 Authority Key Identifier:
keyid:E4:7E:3C:9A:95:1F:1B:15:81:13:AB:7C:3D:F1:9D:FC:33:6D:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/ZIZhatfVyeCz56ZJ_F3QieEYzfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.156.254.0/24
Signature Algorithm: sha256WithRSAEncryption
71:c3:f3:9f:c8:d6:ca:b1:da:2f:76:6c:a2:98:e2:e1:29:66:
a7:58:5c:b7:3c:c8:ae:43:d5:45:24:a2:48:c9:c8:6d:c3:08:
63:15:8c:6d:1b:f2:2e:ce:e2:db:06:3d:db:84:47:b6:a4:e1:
21:8a:b2:0b:c3:0d:d7:29:03:c8:b9:be:37:d3:d4:5f:63:1c:
14:bf:be:cf:62:93:e4:97:6c:39:9f:60:d7:e4:1e:65:12:01:
39:49:b7:77:88:33:75:51:88:75:e9:ec:0a:e1:d3:77:89:8d:
a4:84:5f:ef:2e:40:1a:6b:80:07:a2:30:03:b4:c8:a6:be:dc:
5b:6a:e6:c3:42:0f:7c:82:e9:47:4c:0a:a3:2d:d9:fd:5e:75:
fc:f3:07:22:54:9e:14:89:6e:8e:6f:dc:0c:f3:db:1f:87:b7:
2b:9a:00:3b:19:ec:79:2b:8c:ab:98:80:75:14:b3:fe:6c:e8:
ed:23:fc:95:7d:97:3d:96:82:28:8c:5e:a1:92:10:4d:e0:fa:
c3:52:c6:b9:d9:34:29:ad:55:fe:bd:62:83:09:40:8b:80:bb:
96:25:7c:31:2e:cc:6f:c2:88:11:4e:83:0d:ca:2e:de:33:53:
c0:2a:63:cf:27:1a:5c:61:eb:50:ae:9c:19:a3:3b:69:34:2d:
51:6a:62:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:03:36 2025 by rpki-client