Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/zJ9V5RVqzD97F_O58bWdXPeiF54.roa
File: zJ9V5RVqzD97F_O58bWdXPeiF54.roa (raw, json)
Hash identifier: 0kCVEfOoKp28OrgS4xSJMewXnb7colEZhFqyo2O2dts=
Subject key identifier: CC:9F:55:E5:15:6A:CC:3F:7B:17:F3:B9:F1:B5:9D:5C:F7:A2:17:9E
Certificate issuer: /CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Certificate serial: 01902223DE6307FE2851E3F1FAFB6016E2E6
Authority key identifier: 2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/zJ9V5RVqzD97F_O58bWdXPeiF54.roa
Signing time: Sun 16 Jun 2024 17:41:34 +0000
ROA not before: Sun 16 Jun 2024 17:41:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34465
IP address blocks: 185.188.28.0/24 maxlen: 24
2a12:8fc6::/32 maxlen: 32
2a12:8fc6:5ee::/48 maxlen: 48
2a12:8fc6:a051::/48 maxlen: 48
2a12:8fc6:a1c3::/48 maxlen: 48
2a12:8fc6:a517::/48 maxlen: 48
2a12:8fc6:aa00::/48 maxlen: 48
2a12:8fc6:ace1::/48 maxlen: 48
2a12:8fc6:ace2::/48 maxlen: 48
2a12:8fc6:ace3::/48 maxlen: 48
2a12:8fc6:ae00::/48 maxlen: 48
2a12:8fc6:ae44::/48 maxlen: 48
2a12:8fc6:bab0::/48 maxlen: 48
2a12:8fc6:bdee::/48 maxlen: 48
2a12:8fc6:be01::/48 maxlen: 48
2a12:8fc6:c31a::/48 maxlen: 48
2a12:8fc6:c31e::/48 maxlen: 48
2a12:8fc6:c341::/48 maxlen: 48
2a12:8fc6:ca00::/48 maxlen: 48
2a12:8fc6:caa0::/48 maxlen: 48
2a12:8fc6:cae1::/48 maxlen: 48
2a12:8fc6:cc00::/48 maxlen: 48
2a12:8fc6:cc21::/48 maxlen: 48
2a12:8fc6:cd00::/48 maxlen: 48
2a12:8fc6:cd01::/48 maxlen: 48
2a12:8fc6:cd02::/48 maxlen: 48
2a12:8fc6:cd04::/48 maxlen: 48
2a12:8fc6:ce00::/48 maxlen: 48
2a12:8fc6:ce01::/48 maxlen: 48
2a12:8fc6:ceca::/48 maxlen: 48
2a12:8fc6:daa0::/48 maxlen: 48
2a12:8fc6:dae0::/48 maxlen: 48
2a12:8fc6:db00::/48 maxlen: 48
2a12:8fc6:dbaa::/48 maxlen: 48
2a12:8fc6:eaca::/48 maxlen: 48
2a12:8fc6:ee01::/48 maxlen: 48
2a12:8fc6:efdf::/48 maxlen: 48
2a12:8fc6:faa0::/48 maxlen: 48
2a12:8fc6:fae0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Jun 2024 17:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:22:23:de:63:07:fe:28:51:e3:f1:fa:fb:60:16:e2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Validity
Not Before: Jun 16 17:41:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc9f55e5156acc3f7b17f3b9f1b59d5cf7a2179e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f0:c7:36:be:24:61:d4:24:3e:82:46:f8:00:
97:c7:da:6b:1f:c1:51:29:86:b7:9e:65:55:2c:59:
85:7a:03:20:ca:1b:64:c9:d4:2b:e9:20:16:56:b5:
01:11:0b:e4:58:9f:1e:82:10:8d:66:67:12:b7:8d:
2f:b8:d8:9e:4a:af:f1:e5:3f:51:06:28:83:b6:a3:
2a:7e:36:08:1f:c6:3a:42:2e:05:1b:fe:1d:43:82:
81:f1:e5:fd:f4:b3:d9:11:a2:2c:99:cb:92:ce:ec:
1c:37:7d:39:43:98:81:59:99:42:8f:21:0b:e5:b8:
81:6d:a9:5e:25:1f:09:b2:05:6f:20:42:0c:a9:49:
cc:a8:10:6e:f4:87:ff:93:8f:64:7e:e9:25:cc:50:
30:dc:37:5a:57:7f:01:e4:b1:df:37:1e:8c:89:25:
87:cd:56:85:80:38:16:cc:dc:9b:dc:8d:bd:48:bd:
a5:42:c5:64:df:c4:e2:29:ae:e6:4f:c9:9d:d2:47:
43:72:9f:27:4e:fa:19:f0:8a:2b:9a:73:e2:2d:fe:
12:41:8a:1e:6d:9c:d2:51:e6:9c:68:75:c6:1a:e5:
34:55:5e:2d:a6:d3:89:a6:22:1d:c2:d1:c7:42:43:
a9:30:6e:ec:1f:ca:8a:41:8c:1d:a3:68:60:fe:7a:
02:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9F:55:E5:15:6A:CC:3F:7B:17:F3:B9:F1:B5:9D:5C:F7:A2:17:9E
X509v3 Authority Key Identifier:
keyid:2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/zJ9V5RVqzD97F_O58bWdXPeiF54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.28.0/24
IPv6:
2a12:8fc6::/32
Signature Algorithm: sha256WithRSAEncryption
46:de:28:ef:2c:e5:2a:f9:ac:3b:b0:f3:97:97:5a:63:a8:77:
af:82:f9:78:4e:3c:d5:33:53:6a:50:21:a1:f5:61:9c:28:ae:
aa:49:45:77:1e:a3:7b:a5:78:0a:d5:a2:ae:3c:a6:64:b0:27:
35:28:cd:6a:c5:3a:aa:73:6c:fb:92:cf:c4:b5:38:83:52:98:
6d:fe:e7:51:54:ab:64:ca:e6:85:22:4b:a0:1e:9c:02:66:25:
1d:9d:5f:6c:c4:0e:50:08:f7:8b:fd:ac:c7:39:fd:79:5c:99:
37:d9:59:fd:dc:4c:d7:b0:ae:4e:ee:91:8f:61:4c:97:a6:b3:
d0:e1:fd:ca:52:fb:60:21:31:63:9c:6a:ac:ba:6d:bd:09:9b:
b3:a7:fa:63:f8:9c:05:b1:bf:6b:37:b2:0c:5c:70:90:7d:c5:
60:0d:dd:73:71:54:53:fa:71:43:3d:0b:ec:36:3e:e0:ca:51:
2d:10:6e:67:fe:08:03:5e:ef:51:83:43:64:cf:65:e1:93:13:
19:ad:72:fb:24:f2:23:9d:24:8a:ec:ef:22:ef:28:f1:fe:0e:
c9:ee:41:e5:27:ea:db:25:37:f3:85:38:1b:07:dd:8f:e5:b4:
3b:63:5b:a5:cc:81:f3:6d:c6:3d:35:d6:97:79:2b:4a:9d:4c:
55:d5:f4:ca
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZAiI95jB/4oUePx+vtgFuLmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOTY3ZTc3MmNjNzI5ODMwNWExMWZmYTY1ZGQxODVmNmE1
ODkxMGIwHhcNMjQwNjE2MTc0MTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzlmNTVlNTE1NmFjYzNmN2IxN2YzYjlmMWI1OWQ1Y2Y3YTIxNzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfDHNr4kYdQkPoJG+ACXx9prH8FR
KYa3nmVVLFmFegMgyhtkydQr6SAWVrUBEQvkWJ8eghCNZmcSt40vuNieSq/x5T9R
BiiDtqMqfjYIH8Y6Qi4FG/4dQ4KB8eX99LPZEaIsmcuSzuwcN305Q5iBWZlCjyEL
5biBbaleJR8JsgVvIEIMqUnMqBBu9If/k49kfuklzFAw3DdaV38B5LHfNx6MiSWH
zVaFgDgWzNyb3I29SL2lQsVk38TiKa7mT8md0kdDcp8nTvoZ8IormnPiLf4SQYoe
bZzSUeacaHXGGuU0VV4tptOJpiIdwtHHQkOpMG7sH8qKQYwdo2hg/noCCQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMyfVeUVasw/exfzufG1nVz3oheeMB8GA1UdIwQY
MBaAFCuWfncsxymDBaEf+mXdGF9qWJELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVaLWR5ekhLWU1Gb1JfNlpkMFlYMnBZa1FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NjBlNzQtYTNiYy00NDRiLTljNmEt
NThjOTZkNjZmMGExLzEveko5VjVSVnF6RDk3Rl9PNThiV2RYUGVpRjU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82NjBlNzQtYTNiYy00NDRiLTljNmEtNThjOTZkNjZmMGEx
LzEvSzVaLWR5ekhLWU1Gb1JfNlpkMFlYMnBZa1FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAubwcMA0E
AgACMAcDBQAqEo/GMA0GCSqGSIb3DQEBCwUAA4IBAQBG3ijvLOUq+aw7sPOXl1pj
qHevgvl4TjzVM1NqUCGh9WGcKK6qSUV3HqN7pXgK1aKuPKZksCc1KM1qxTqqc2z7
ks/EtTiDUpht/udRVKtkyuaFIkugHpwCZiUdnV9sxA5QCPeL/azHOf15XJk32Vn9
3EzXsK5O7pGPYUyXprPQ4f3KUvtgITFjnGqsum29CZuzp/pj+JwFsb9rN7IMXHCQ
fcVgDd1zcVRT+nFDPQvsNj7gylEtEG5n/ggDXu9Rg0Nkz2XhkxMZrXL7JPIjnSSK
7O8i7yjx/g7J7kHlJ+rbJTfzhTgbB92P5bQ7Y1ulzIHzbcY9NdaXeStKnUxV1fTK
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:02:06 2025 by rpki-client