Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/zArsISz3xCZLr9mty7XLdsdVAMk.roa
File: zArsISz3xCZLr9mty7XLdsdVAMk.roa (raw, json)
Hash identifier: fF8r/akFmhv6B/qna0OCq1Zirm/RnCgP9wMBCYufBqI=
Subject key identifier: CC:0A:EC:21:2C:F7:C4:26:4B:AF:D9:AD:CB:B5:CB:76:C7:55:00:C9
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0194E5A19A1EB8E8C75DEE4B361A23AC321D
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/zArsISz3xCZLr9mty7XLdsdVAMk.roa
Signing time: Sat 08 Feb 2025 12:56:00 +0000
ROA not before: Sat 08 Feb 2025 12:56:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213122
IP address blocks: 45.139.6.0/23 maxlen: 24
178.173.236.0/22 maxlen: 24
178.173.242.0/23 maxlen: 24
178.173.244.0/22 maxlen: 24
188.253.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 01:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e5:a1:9a:1e:b8:e8:c7:5d:ee:4b:36:1a:23:ac:32:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 8 12:56:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc0aec212cf7c4264bafd9adcbb5cb76c75500c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cd:d5:a0:c6:86:83:fe:40:31:32:5c:dd:f0:
89:c4:f4:7e:4a:ad:a5:07:40:e2:0a:1d:58:12:25:
b5:b8:72:44:2f:a4:54:d8:c0:1b:27:e5:87:9b:80:
24:0f:30:5d:f1:c6:0a:4b:e1:b5:3b:b0:71:21:05:
20:a8:74:e0:f5:d3:ac:1e:39:6c:51:98:b8:3d:6c:
04:14:24:16:ac:22:37:41:be:2e:aa:1e:b7:a7:e1:
e5:16:6f:12:f2:a8:a5:a4:cc:7d:7e:8f:6b:7f:63:
11:f7:a0:26:f3:04:81:9d:df:43:84:3b:ac:bb:14:
81:62:47:f1:53:01:86:dc:48:3b:0b:3b:23:7b:7b:
b7:71:b1:19:09:09:b9:c8:bc:00:8b:b3:b3:ba:d9:
7d:14:56:68:cb:00:f5:1a:05:c0:3b:ed:c8:94:70:
c1:f1:07:3a:a5:9b:14:3f:cb:9d:69:47:60:45:8f:
fd:53:a6:4c:60:bc:23:6d:f5:8e:e9:25:6f:ba:7a:
05:c1:fc:de:5e:6e:af:28:e1:00:76:db:51:a9:2f:
2d:93:d9:a2:7e:aa:8e:83:60:b5:15:9e:73:8b:c4:
e6:9f:32:54:4d:11:0c:db:09:13:3c:74:49:77:00:
24:6a:17:d6:64:9d:c9:b0:23:56:08:20:0b:28:2f:
af:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0A:EC:21:2C:F7:C4:26:4B:AF:D9:AD:CB:B5:CB:76:C7:55:00:C9
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/zArsISz3xCZLr9mty7XLdsdVAMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
178.173.236.0/22
178.173.242.0-178.173.247.255
188.253.28.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:9e:2a:4f:97:c9:d3:a3:c8:e0:bf:7b:46:ed:8e:57:f6:c0:
10:81:01:90:90:56:42:ce:a3:b2:cb:da:5b:ff:71:9b:66:5d:
d8:e5:f0:05:94:af:4c:be:28:16:a5:39:69:d4:76:57:dd:e3:
68:95:8d:7b:35:6a:c8:85:fe:ae:40:2b:2a:a8:d8:c4:0a:b9:
84:31:eb:a9:2d:57:04:f2:5b:96:7e:c1:84:cf:87:a3:11:85:
89:db:04:85:2e:e4:00:f1:a3:85:1a:fd:bb:66:45:7c:95:a7:
e6:4f:88:cf:77:8a:26:68:36:35:d3:d1:18:41:8b:c2:6f:85:
c2:c6:e9:fb:bd:49:34:60:d4:28:d8:00:f5:e3:2d:e2:bd:c6:
1d:35:3d:25:25:0e:3d:ad:08:0a:79:d5:e6:48:d5:bc:6e:2c:
dc:e8:19:3d:5b:64:94:da:9c:b0:b5:19:58:b1:4c:d1:cd:00:
e3:83:49:c2:06:46:c4:df:81:84:07:6c:51:34:73:31:6b:4f:
7d:2c:2c:7e:5f:f4:10:bc:d1:53:20:83:30:79:e7:f4:65:1c:
ee:c7:dd:f0:b8:7b:c1:82:7d:33:96:b4:bb:b8:c4:d0:ad:a5:
75:16:c7:f7:4b:65:4a:4f:91:6b:de:58:0f:ba:eb:c0:c4:1a:
e3:e2:ca:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:04:12 2025 by rpki-client