Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/ZyNtpKNuiCJcqFYGTayRfMbYIy0.roa
File: ZyNtpKNuiCJcqFYGTayRfMbYIy0.roa (raw, json)
Hash identifier: pH/TIo8XCbAWR1X5Myy7akmcc4Z24ZqLaXF8YtBzxUg=
Subject key identifier: 67:23:6D:A4:A3:6E:88:22:5C:A8:56:06:4D:AC:91:7C:C6:D8:23:2D
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 018EF5D8BD3E0E803F06A756D2562315EB13
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/ZyNtpKNuiCJcqFYGTayRfMbYIy0.roa
Signing time: Fri 19 Apr 2024 10:13:25 +0000
ROA not before: Fri 19 Apr 2024 10:13:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198160
IP address blocks: 89.36.32.0/24 maxlen: 24
89.36.33.0/24 maxlen: 24
89.36.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 12:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f5:d8:bd:3e:0e:80:3f:06:a7:56:d2:56:23:15:eb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Apr 19 10:13:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67236da4a36e88225ca856064dac917cc6d8232d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:48:f8:fc:ab:db:9e:e3:23:4c:8e:52:75:ae:
f7:95:0d:9d:54:69:16:6d:9d:e1:4b:c6:3d:c9:98:
9b:26:fb:13:b5:3d:51:42:0c:0a:73:eb:be:86:c0:
16:d9:ce:8e:6c:47:47:91:31:bf:24:0e:fb:32:9a:
66:c6:4b:2b:55:06:10:5c:f4:3e:57:36:85:1c:3f:
dd:78:8f:c5:07:05:36:0e:5a:8c:bc:5f:39:6e:c5:
ea:32:45:93:a7:61:72:68:07:3b:66:2d:38:d6:4f:
14:76:ed:35:dc:b9:aa:e9:52:e5:4f:62:14:30:32:
9d:c1:e4:27:77:d2:15:54:90:38:36:d1:e0:06:75:
03:c8:59:2a:6f:0a:4b:68:67:71:90:91:75:20:6c:
a9:ce:9c:9d:e1:34:18:8c:ff:86:be:3a:99:a9:bc:
c1:20:69:ea:30:70:49:5f:b2:6a:2a:4d:75:0a:ac:
a8:8a:e2:eb:83:16:31:b5:11:af:7f:98:8c:bf:8f:
d0:57:0e:f1:24:8e:7d:d7:94:55:b4:a6:34:c6:f0:
e6:c5:44:91:70:b6:52:eb:e0:f1:05:81:e0:7d:aa:
0d:77:9c:56:3c:bc:a3:c9:fd:30:24:52:f7:af:d7:
d0:18:d7:96:23:87:60:de:1e:9a:60:4e:f8:dd:69:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:23:6D:A4:A3:6E:88:22:5C:A8:56:06:4D:AC:91:7C:C6:D8:23:2D
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/ZyNtpKNuiCJcqFYGTayRfMbYIy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.32.0/23
89.36.35.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:f9:c4:ea:4c:3c:0b:be:05:73:e4:37:71:c6:a8:69:16:62:
f6:ff:f6:97:88:4e:bb:ad:70:a4:1f:76:28:9b:c3:ce:36:80:
c0:b2:3e:0c:1b:ae:c6:9e:fb:66:66:06:98:3a:b3:8e:52:e9:
2a:75:40:d6:a2:4a:e3:78:9b:03:83:77:e6:a8:d8:4d:61:37:
9c:08:f3:cf:3e:13:36:72:3e:ef:64:53:a7:49:46:9a:e0:aa:
1e:35:ae:45:fa:c5:0b:50:df:7a:f5:55:dc:e1:9a:0a:01:65:
bf:ab:9d:91:2e:d3:d4:2a:e0:dc:72:fc:41:0f:ac:94:65:9c:
9c:1f:62:7d:06:95:cd:99:96:37:82:8d:0f:da:d8:1b:ec:0e:
de:b3:17:0f:a3:50:b4:55:3c:18:08:a5:99:e1:62:8b:49:84:
12:57:7e:5f:6a:87:16:5d:14:1d:9b:4a:71:4d:51:8b:4c:89:
6f:35:af:6a:e6:1e:e4:a6:36:73:30:ad:d0:16:67:4b:b7:40:
ef:b7:2d:97:c2:cf:93:bb:ed:fd:50:5d:17:75:26:2c:84:6e:
f5:76:19:18:93:38:3b:68:d4:1b:d2:4e:03:93:2f:97:ae:94:
1c:e1:b2:79:aa:dd:68:f9:53:ce:1a:9d:80:0f:96:fa:71:68:
2c:f3:29:84
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY712L0+DoA/BqdW0lYjFesTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx
YmM3N2YwHhcNMjQwNDE5MTAxMzI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzIzNmRhNGEzNmU4ODIyNWNhODU2MDY0ZGFjOTE3Y2M2ZDgyMzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEj4/KvbnuMjTI5Sda73lQ2dVGkW
bZ3hS8Y9yZibJvsTtT1RQgwKc+u+hsAW2c6ObEdHkTG/JA77MppmxksrVQYQXPQ+
VzaFHD/deI/FBwU2DlqMvF85bsXqMkWTp2FyaAc7Zi041k8Udu013Lmq6VLlT2IU
MDKdweQnd9IVVJA4NtHgBnUDyFkqbwpLaGdxkJF1IGypzpyd4TQYjP+GvjqZqbzB
IGnqMHBJX7JqKk11CqyoiuLrgxYxtRGvf5iMv4/QVw7xJI5915RVtKY0xvDmxUSR
cLZS6+DxBYHgfaoNd5xWPLyjyf0wJFL3r9fQGNeWI4dg3h6aYE743WkdHwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGcjbaSjbogiXKhWBk2skXzG2CMtMB8GA1UdIwQY
MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt
YWE2ZWQ0ZGFmYjNiLzEvWnlOdHBLTnVpQ0pjcUZZR1RheVJmTWJZSXkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi
LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBWSQgAwQA
WSQjMA0GCSqGSIb3DQEBCwUAA4IBAQBd+cTqTDwLvgVz5DdxxqhpFmL2//aXiE67
rXCkH3Yom8PONoDAsj4MG67GnvtmZgaYOrOOUukqdUDWokrjeJsDg3fmqNhNYTec
CPPPPhM2cj7vZFOnSUaa4KoeNa5F+sULUN969VXc4ZoKAWW/q52RLtPUKuDccvxB
D6yUZZycH2J9BpXNmZY3go0P2tgb7A7esxcPo1C0VTwYCKWZ4WKLSYQSV35faocW
XRQdm0pxTVGLTIlvNa9q5h7kpjZzMK3QFmdLt0Dvty2Xws+Tu+39UF0XdSYshG71
dhkYkzg7aNQb0k4Dky+XrpQc4bJ5qt1o+VPOGp2AD5b6cWgs8ymE
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:08:04 2025 by rpki-client