Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Z7ZE2Rz-clUo2X02uSXZzOJcTz0.roa
File: Z7ZE2Rz-clUo2X02uSXZzOJcTz0.roa (raw, json)
Hash identifier: 8sQcpkRvIGjpaFQVIO8cenZHsbV+Vb7uRnH8i+3LfyQ=
Subject key identifier: 67:B6:44:D9:1C:FE:72:55:28:D9:7D:36:B9:25:D9:CC:E2:5C:4F:3D
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0195A3A0A7D4E2799C9A9CEC81D2290FC9DE
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Z7ZE2Rz-clUo2X02uSXZzOJcTz0.roa
Signing time: Mon 17 Mar 2025 10:22:49 +0000
ROA not before: Mon 17 Mar 2025 10:22:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42864
IP address blocks: 45.9.169.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.171.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
77.242.144.0/24 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.151.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
83.137.156.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.219.0/24 maxlen: 24
88.209.246.0/24 maxlen: 24
88.209.247.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
92.52.209.0/24 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.212.0/22 maxlen: 24
92.52.215.0/24 maxlen: 24
178.248.200.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
2a05:f5c0::/29 maxlen: 29
2a05:f5c0::/32 maxlen: 32
2a0c:f1c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 17 Mar 2025 14:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:a0:a7:d4:e2:79:9c:9a:9c:ec:81:d2:29:0f:c9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 17 10:22:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67b644d91cfe725528d97d36b925d9cce25c4f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:13:86:2e:ce:6c:fb:ad:0f:69:1e:32:0b:
43:a4:d9:09:0f:9e:42:b6:ec:46:a1:4a:54:e2:18:
bd:0d:93:1f:c9:e8:b9:9c:40:b2:58:e1:67:98:d2:
a4:80:8c:53:e9:ef:7a:67:2a:46:46:06:19:49:60:
a4:73:c6:96:51:73:35:be:97:69:ea:0b:94:e7:e3:
37:79:57:3c:fa:80:39:a2:11:e1:65:9c:a8:d7:c8:
05:b9:bb:d3:97:95:d9:fb:fb:ec:68:1b:72:82:de:
04:df:4e:fb:cd:56:c4:85:84:f2:5b:c4:6a:42:4a:
fc:38:d8:7f:ae:43:02:29:cf:c1:3f:5d:28:26:10:
a2:01:5d:cc:86:0a:b9:fc:ef:3b:1b:3d:c8:e6:dc:
af:8b:3c:94:ab:43:dc:a7:c2:6f:88:24:18:60:06:
e9:5b:73:af:0e:b6:d1:3d:fd:86:ca:1e:11:4c:e5:
2d:6a:47:e5:ba:a7:9c:2a:11:84:c6:d6:8e:41:d5:
73:67:a1:b3:3f:ac:a7:fe:02:97:6b:23:e2:c2:0b:
be:aa:ff:67:7b:da:7a:76:0a:85:74:02:88:3b:18:
4b:f4:65:db:1d:db:a5:2b:d5:5e:1f:b3:c2:9b:8f:
72:9c:dc:16:3e:e4:1a:0d:5c:bf:76:35:22:49:30:
a2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B6:44:D9:1C:FE:72:55:28:D9:7D:36:B9:25:D9:CC:E2:5C:4F:3D
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Z7ZE2Rz-clUo2X02uSXZzOJcTz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.144.0/24
77.242.148.0/24
77.242.151.0/24
83.137.153.0/24
83.137.156.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
88.209.219.0/24
88.209.246.0/23
92.52.208.0/21
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
2a05:f5c0::/29
2a0c:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
46:ba:31:af:1a:6c:11:6e:c7:ba:d0:db:c1:ff:89:8e:7d:77:
64:35:79:12:15:83:78:2b:68:92:b8:0c:0a:82:5e:db:16:cb:
b2:57:c8:e1:dc:e4:b6:fb:85:2c:9a:6b:6a:aa:3a:dc:b0:23:
4b:c3:25:c3:20:c6:99:81:fd:23:37:25:7e:06:46:90:dd:5e:
96:73:26:3e:72:fb:06:15:b3:b6:88:64:7e:b2:c0:98:e0:08:
d9:78:c9:65:63:a8:76:3b:b1:a3:7e:cf:60:c5:c1:03:6b:fc:
d0:7f:3e:7e:62:c1:73:a1:db:2b:1e:16:d1:75:a5:63:19:21:
9c:9c:e5:98:cf:23:63:9d:45:d9:45:30:3b:76:d3:4b:53:49:
f3:e6:22:46:e2:07:19:20:d4:43:b5:a0:e1:5a:2e:0d:fa:bf:
54:ec:3f:de:73:e7:db:fb:26:d3:69:ef:03:fb:5a:f2:d0:6c:
66:bc:12:22:01:8e:d0:33:7e:47:62:bf:a4:34:1e:03:de:33:
17:c5:1c:f7:23:dc:bf:3d:af:66:e7:a8:8c:8b:e6:36:43:40:
7e:88:06:78:4a:82:1c:6e:1c:5d:45:eb:5d:48:03:af:83:9f:
80:c4:cb:e6:c5:0b:8c:57:7e:bb:43:a4:b4:d1:a6:c8:11:8e:
f1:61:08:8e
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgISAZWjoKfU4nmcmpzsgdIpD8neMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjUwMzE3MTAyMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2I2NDRkOTFjZmU3MjU1MjhkOTdkMzZiOTI1ZDljY2UyNWM0ZjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVMThi7ObPutD2keMgtDpNkJD55C
tuxGoUpU4hi9DZMfyei5nECyWOFnmNKkgIxT6e96ZypGRgYZSWCkc8aWUXM1vpdp
6guU5+M3eVc8+oA5ohHhZZyo18gFubvTl5XZ+/vsaBtygt4E3077zVbEhYTyW8Rq
Qkr8ONh/rkMCKc/BP10oJhCiAV3Mhgq5/O87Gz3I5tyvizyUq0Pcp8JviCQYYAbp
W3OvDrbRPf2Gyh4RTOUtakfluqecKhGExtaOQdVzZ6GzP6yn/gKXayPiwgu+qv9n
e9p6dgqFdAKIOxhL9GXbHdulK9VeH7PCm49ynNwWPuQaDVy/djUiSTCiWwIDAQAB
o4IClzCCApMwHQYDVR0OBBYEFGe2RNkc/nJVKNl9Nrkl2cziXE89MB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvWjdaRTJSei1jbFVvMlgwMnVTWFp6T0pjVHowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGsBggrBgEFBQcBBwEB/wSBnDCBmTB6BAIAATB0MAwDBAAt
CakDBAItCagDBAEtDgoDBAAtWF0DBABN8pADBABN8pQDBABN8pcDBABTiZkDBABT
iZwDBABY0cEDBABY0cQDBABY0dADBABY0dIDBAJY0dQDBABY0dsDBAFY0fYDBANc
NNADBAOy+MgDBADBin0wGwQCAAIwFQMFAyoAH0ADBQMqBfXAAwUDKgzxwDANBgkq
hkiG9w0BAQsFAAOCAQEARroxrxpsEW7HutDbwf+Jjn13ZDV5EhWDeCtokrgMCoJe
2xbLslfI4dzktvuFLJpraqo63LAjS8MlwyDGmYH9IzclfgZGkN1elnMmPnL7BhWz
tohkfrLAmOAI2XjJZWOodjuxo37PYMXBA2v80H8+fmLBc6HbKx4W0XWlYxkhnJzl
mM8jY51F2UUwO3bTS1NJ8+YiRuIHGSDUQ7Wg4VouDfq/VOw/3nPn2/sm02nvA/ta
8tBsZrwSIgGO0DN+R2K/pDQeA94zF8Uc9yPcvz2vZueojIvmNkNAfogGeEqCHG4c
XUXrXUgDr4OfgMTL5sULjFd+u0OktNGmyBGO8WEIjg==
-----END CERTIFICATE-----
Generated at Sun May 11 20:26:19 2025 by rpki-client