Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/zZdgAt6_6eY79uF2lDhE2NjhkJc.roa
File: zZdgAt6_6eY79uF2lDhE2NjhkJc.roa (raw, json)
Hash identifier: JAncHJimz8FMMVB5R6Pn0/PoQc/FTjpqZtiI8du6I4g=
Subject key identifier: CD:97:60:02:DE:BF:E9:E6:3B:F6:E1:76:94:38:44:D8:D8:E1:90:97
Certificate issuer: /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Certificate serial: 0194F0FD4FBAD5C7AE9471D6C73341183F9B
Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/zZdgAt6_6eY79uF2lDhE2NjhkJc.roa
Signing time: Mon 10 Feb 2025 17:52:00 +0000
ROA not before: Mon 10 Feb 2025 17:52:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.153.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 15:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f0:fd:4f:ba:d5:c7:ae:94:71:d6:c7:33:41:18:3f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Validity
Not Before: Feb 10 17:52:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd976002debfe9e63bf6e176943844d8d8e19097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8c:6d:b5:2f:3b:00:a1:4a:dd:68:b2:ef:fc:
be:b8:f6:cf:2e:80:d7:77:fd:24:dc:34:6c:b8:ef:
a7:7b:b9:76:6a:b5:0b:5d:e2:3c:7e:07:e8:e2:e5:
db:b7:7b:5c:e1:38:3d:82:f2:e9:91:b2:22:e3:1b:
c3:0c:f8:a0:d2:3a:13:ec:80:f6:2d:e8:e8:4f:38:
92:d6:7f:12:81:e8:80:9c:78:9c:a2:28:88:78:24:
81:11:3a:f5:37:12:43:7f:2d:82:63:89:91:e7:24:
7d:a9:ce:11:05:0a:2a:a2:6c:30:38:f9:d9:74:1e:
73:ce:c8:92:2a:82:9b:44:a1:8e:88:d3:a2:7b:22:
e4:bf:72:92:df:63:10:80:85:c1:61:24:c1:2d:9d:
c9:73:31:66:3a:c1:0c:57:75:63:89:06:6f:97:da:
9c:1e:62:c0:dd:b7:a2:73:8f:71:6d:7d:93:bd:aa:
e6:67:dd:3f:bc:00:fa:65:7c:74:62:6e:2b:15:51:
5e:e3:b1:5c:f4:25:99:e2:1d:9c:61:f5:2f:d0:66:
23:97:35:e4:55:ac:7a:dd:e5:32:11:b3:55:b7:51:
cb:53:c3:15:09:f3:66:86:6f:4d:91:d6:25:09:5a:
6f:5a:0a:9b:bc:c9:41:eb:41:0b:e7:64:2e:ec:b3:
91:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:97:60:02:DE:BF:E9:E6:3B:F6:E1:76:94:38:44:D8:D8:E1:90:97
X509v3 Authority Key Identifier:
keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/zZdgAt6_6eY79uF2lDhE2NjhkJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.153.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:16:71:4b:09:7d:20:f1:da:a9:b9:d6:f1:dd:6c:cf:35:ba:
c5:a4:b5:5d:4c:75:97:a9:31:b2:eb:f8:74:ab:4a:c6:03:bf:
c0:d8:8a:62:10:61:cb:5c:79:c0:fe:21:ff:17:93:1c:02:50:
ac:5a:35:b8:aa:ca:07:24:65:bd:98:60:4f:7a:10:bf:f7:7c:
18:c9:52:7e:9c:8d:a1:ba:5f:82:78:74:95:72:c7:16:b2:29:
b1:b3:6a:d2:35:7b:8e:dd:c4:be:4f:47:e3:19:e9:ec:29:59:
ff:bb:d6:ec:87:25:46:1a:01:6e:18:86:79:f2:74:ca:52:6c:
2d:cf:6e:df:49:e1:25:5e:89:cf:c5:31:09:86:a4:62:22:92:
ff:80:6b:5d:37:13:b6:e6:8d:8b:82:02:98:10:28:02:7c:b9:
12:40:a6:d1:ab:4b:9f:dc:99:28:fe:e4:f1:17:22:bc:7e:58:
59:98:20:35:f2:0b:d9:92:f6:34:6a:4a:f2:1b:28:33:10:da:
a4:0b:ea:16:6f:f0:26:da:5b:9e:c8:ba:0d:09:8e:94:8f:24:
08:3b:c8:03:5d:7c:c0:48:46:74:8c:72:90:df:39:c0:67:e1:
a2:28:ef:7b:21:4e:ee:8d:d7:fc:8f:37:db:6f:62:a8:cc:7c:
5d:58:d8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:58:51 2025 by rpki-client