Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/zwQ_ePL8eru-Jqn8VynOyR1IC_M.roa
File: zwQ_ePL8eru-Jqn8VynOyR1IC_M.roa (raw, json)
Hash identifier: +07M8REi4v/MFKX6TQgT1u4XVyI0htmwvAMknmZHGvI=
Subject key identifier: CF:04:3F:78:F2:FC:7A:BB:BE:26:A9:FC:57:29:CE:C9:1D:48:0B:F3
Certificate issuer: /CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Certificate serial: 018CC7954D568641303A0A1B9E384E24AD24
Authority key identifier: 03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/zwQ_ePL8eru-Jqn8VynOyR1IC_M.roa
Signing time: Tue 02 Jan 2024 00:31:39 +0000
ROA not before: Tue 02 Jan 2024 00:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211558
IP address blocks: 193.3.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:4d:56:86:41:30:3a:0a:1b:9e:38:4e:24:ad:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Validity
Not Before: Jan 2 00:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf043f78f2fc7abbbe26a9fc5729cec91d480bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:25:5d:44:d6:64:48:0a:cb:d0:a7:de:11:
41:cf:f8:af:27:ff:01:03:45:81:08:66:55:b1:9f:
1a:98:dd:a2:ee:c3:c5:a8:9d:bd:21:f0:15:ba:95:
b8:1a:f6:66:b3:90:de:81:f5:4e:44:9a:3a:a0:c5:
d1:db:c0:31:51:e2:74:b3:32:b4:98:4f:af:56:61:
99:a5:38:5d:03:fa:5b:71:ab:5c:2b:28:dd:1d:a4:
bf:81:a3:ad:9d:63:30:98:92:40:a0:dd:46:04:6d:
f2:51:f4:9a:e3:17:8f:b7:d7:f0:2f:c2:fb:8d:2b:
1b:1c:62:a5:38:9a:d9:77:1d:6a:b5:64:84:c2:17:
d6:d0:8b:c7:d1:a4:eb:06:13:b2:3e:1d:74:ab:d9:
12:6b:ae:57:d4:6a:e7:04:4b:5e:82:35:28:ab:82:
c1:46:43:a5:05:5d:ed:d9:33:f8:1e:64:ea:89:f8:
02:7a:c8:d5:0b:80:09:5f:3b:3b:40:cb:fb:69:c9:
5c:31:f6:e8:33:73:49:26:22:63:da:b0:ac:fa:7f:
26:fd:eb:4d:4a:d5:b6:49:03:5a:08:9d:a9:4a:83:
be:1d:cb:44:b7:12:0f:26:f6:1c:6b:b4:1c:e1:0f:
20:d0:85:6a:fa:96:11:22:4f:61:50:19:c8:93:80:
ce:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:04:3F:78:F2:FC:7A:BB:BE:26:A9:FC:57:29:CE:C9:1D:48:0B:F3
X509v3 Authority Key Identifier:
keyid:03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/zwQ_ePL8eru-Jqn8VynOyR1IC_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.52.0/24
Signature Algorithm: sha256WithRSAEncryption
82:93:77:0d:f4:f1:a7:54:ef:9d:b2:c9:e7:d9:f9:04:59:9b:
60:d9:14:10:c6:f6:7b:69:5c:67:2b:5e:9b:6a:87:04:91:ed:
f9:3f:4a:3f:c2:b8:fb:b2:68:0a:fe:8d:40:73:84:86:ee:3d:
09:f7:0e:78:64:34:10:d7:0c:59:9b:ba:0a:41:3b:80:dc:9e:
6a:6d:42:46:9b:f5:e9:91:5a:85:18:1c:2e:1f:92:44:72:d6:
14:c7:82:26:30:23:c0:d7:cd:a6:e3:de:d6:ab:d3:fc:81:a2:
bd:62:26:f9:96:f5:ce:05:33:5f:99:40:61:a7:5f:da:1d:a1:
9c:67:3b:ff:e6:34:26:b7:98:61:2e:b6:57:a6:49:33:75:c7:
10:18:ba:69:36:db:2d:c4:3e:aa:a2:02:c1:8b:6b:3a:60:b5:
d6:e8:85:09:e0:3f:c7:04:6a:96:79:06:f5:49:22:78:bc:c5:
55:02:8c:61:95:2a:5f:65:e9:2a:5f:16:8f:b4:55:27:09:21:
4d:25:d3:bc:6b:7b:f3:f7:49:8e:64:a7:42:b5:7b:2c:64:d0:
85:8d:9b:d4:24:41:f9:79:b1:a6:1e:b8:b3:3d:ac:5b:23:bf:
1b:a1:e5:60:c7:02:7e:14:2a:4e:64:a3:a6:75:a0:a4:1f:af:
9b:c8:1e:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlU1WhkEwOgobnjhOJK0kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzY2RlNjRmNDE2OGEzZjM5OWI3NzQ5NGQ5NGFlYTc3Mjky
YzliY2YwHhcNMjQwMTAyMDAzMTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjA0M2Y3OGYyZmM3YWJiYmUyNmE5ZmM1NzI5Y2VjOTFkNDgwYmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaklXUTWZEgKy9Cn3hFBz/ivJ/8B
A0WBCGZVsZ8amN2i7sPFqJ29IfAVupW4GvZms5DegfVORJo6oMXR28AxUeJ0szK0
mE+vVmGZpThdA/pbcatcKyjdHaS/gaOtnWMwmJJAoN1GBG3yUfSa4xePt9fwL8L7
jSsbHGKlOJrZdx1qtWSEwhfW0IvH0aTrBhOyPh10q9kSa65X1GrnBEtegjUoq4LB
RkOlBV3t2TP4HmTqifgCesjVC4AJXzs7QMv7aclcMfboM3NJJiJj2rCs+n8m/etN
StW2SQNaCJ2pSoO+HctEtxIPJvYca7Qc4Q8g0IVq+pYRIk9hUBnIk4DOJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM8EP3jy/Hq7viap/FcpzskdSAvzMB8GA1UdIwQY
MBaAFAPN5k9BaKPzmbd0lNlK6ncpLJvPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTgzbVQwRm9vX09adDNTVTJVcnFkeWtzbTg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kYzEzMTgtYzMzMC00YjRkLTk0YWUt
ZjFiMDBjODQyOGVkLzEvendRX2VQTDhlcnUtSnFuOFZ5bk95UjFJQ19NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kYzEzMTgtYzMzMC00YjRkLTk0YWUtZjFiMDBjODQyOGVk
LzEvQTgzbVQwRm9vX09adDNTVTJVcnFkeWtzbTg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQM0MA0G
CSqGSIb3DQEBCwUAA4IBAQCCk3cN9PGnVO+dssnn2fkEWZtg2RQQxvZ7aVxnK16b
aocEke35P0o/wrj7smgK/o1Ac4SG7j0J9w54ZDQQ1wxZm7oKQTuA3J5qbUJGm/Xp
kVqFGBwuH5JEctYUx4ImMCPA182m497Wq9P8gaK9Yib5lvXOBTNfmUBhp1/aHaGc
Zzv/5jQmt5hhLrZXpkkzdccQGLppNtstxD6qogLBi2s6YLXW6IUJ4D/HBGqWeQb1
SSJ4vMVVAoxhlSpfZekqXxaPtFUnCSFNJdO8a3vz90mOZKdCtXssZNCFjZvUJEH5
ebGmHrizPaxbI78boeVgxwJ+FCpOZKOmdaCkH6+byB5A
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:09:22 2025 by rpki-client