Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/zyHTP3VoGcc3K3Q8hVxPvvVACA4.roa
File: zyHTP3VoGcc3K3Q8hVxPvvVACA4.roa (raw, json)
Hash identifier: 2U+IrfEJOyzBxo28ERb1js9k9dYcnUzP7Z5ZpU//YSc=
Subject key identifier: CF:21:D3:3F:75:68:19:C7:37:2B:74:3C:85:5C:4F:BE:F5:40:08:0E
Certificate issuer: /CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Certificate serial: 018CC8DF92A7A4D2531510A26E9A30011FF2
Authority key identifier: 44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/zyHTP3VoGcc3K3Q8hVxPvvVACA4.roa
Signing time: Tue 02 Jan 2024 06:32:24 +0000
ROA not before: Tue 02 Jan 2024 06:32:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44384
IP address blocks: 92.61.192.0/20 maxlen: 20
185.111.140.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:92:a7:a4:d2:53:15:10:a2:6e:9a:30:01:1f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Validity
Not Before: Jan 2 06:32:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf21d33f756819c7372b743c855c4fbef540080e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:58:3b:c1:d6:2b:44:01:1d:67:ae:b6:0b:8f:
83:6d:37:83:b0:1c:30:5f:a9:51:17:67:c9:b4:16:
3d:47:57:bc:2e:57:2b:3e:91:98:07:09:b3:fe:81:
37:cd:5a:3c:76:74:ae:8d:0e:f5:34:ce:07:b2:4b:
77:be:d0:46:fe:be:05:48:3d:26:b8:92:4f:4b:49:
78:17:35:05:f9:ea:64:5b:c9:3a:64:5a:25:c2:c8:
47:8e:c8:de:94:ba:b0:25:5e:34:81:01:d1:9f:f0:
74:64:c1:7a:bb:88:c0:a2:58:db:56:33:64:f1:40:
ee:62:b7:2d:6e:33:6d:63:89:69:51:ea:d4:34:17:
1b:b2:a6:04:ea:28:5c:71:06:ee:e3:43:a2:e3:f9:
cf:43:aa:31:64:f3:75:03:83:bd:81:71:b0:e9:cb:
c5:8a:f3:b9:64:96:84:a9:7b:a6:26:64:77:da:42:
05:68:d4:9e:6b:f7:ba:30:98:55:6b:e0:eb:ac:7b:
77:45:9c:bf:80:91:b1:62:21:c2:ff:15:07:db:d7:
dd:59:9a:1d:e2:16:61:33:1f:46:35:25:72:62:62:
00:e8:cb:22:ad:66:5a:db:8b:d0:81:29:75:a7:58:
ad:f6:d1:7a:1e:c9:f4:63:de:31:b6:b3:c3:28:a2:
d9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:21:D3:3F:75:68:19:C7:37:2B:74:3C:85:5C:4F:BE:F5:40:08:0E
X509v3 Authority Key Identifier:
keyid:44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/zyHTP3VoGcc3K3Q8hVxPvvVACA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.192.0/20
185.111.140.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:6a:c2:71:d3:db:21:b7:06:42:97:86:01:e0:88:b3:c1:5d:
49:6d:c9:79:aa:ca:d1:ef:a6:36:bd:93:87:d9:cf:cd:e2:2c:
3d:32:0c:6d:49:df:98:8f:2a:b4:71:c1:93:ce:95:c3:2f:92:
f5:45:eb:1f:23:2f:2c:b3:eb:81:bf:88:e8:46:d8:0c:92:e5:
73:3f:e5:d9:a9:ed:10:12:aa:70:b3:4b:f0:63:32:7b:9c:0b:
b1:9c:ca:75:f2:e4:ac:80:be:5d:31:17:7c:54:0f:87:d6:bb:
75:2c:3e:40:f1:4f:67:17:3a:85:2f:3a:f5:d9:22:22:35:b7:
ba:0f:9d:47:57:7e:0c:57:82:d7:05:04:84:a3:ae:26:4e:1d:
be:90:d1:2a:4a:0f:16:6d:e7:43:04:67:3f:3a:81:bd:f8:2e:
ad:2c:ce:9b:5d:f8:56:69:2b:f8:74:fe:b0:9e:9f:e4:6d:8a:
19:53:ef:8a:8f:03:91:c8:20:d5:48:d4:69:81:ab:8a:eb:41:
72:a4:f3:d5:c2:5e:2d:28:a1:93:cb:9d:82:5e:d3:00:95:79:
18:b8:bc:d4:7c:4d:c9:22:42:2e:f8:a7:27:d9:97:1b:ed:7c:
f3:0b:b5:88:a1:6a:cc:44:ef:58:21:c8:52:cf:99:32:5c:f0:
c9:bb:f1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:06:58 2025 by rpki-client