Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/z-4WlyPWjhp70qbvWDsJL5TZmCc.roa
File: z-4WlyPWjhp70qbvWDsJL5TZmCc.roa (raw, json)
Hash identifier: 7THSMBz5VWLf7dcVjR4M6tYwsTX92FYN6LCc+Dp/jSM=
Subject key identifier: CF:EE:16:97:23:D6:8E:1A:7B:D2:A6:EF:58:3B:09:2F:94:D9:98:27
Certificate issuer: /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Certificate serial: 0195F1160FFC006CB18BDEF95D3F36FFFDBD
Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/z-4WlyPWjhp70qbvWDsJL5TZmCc.roa
Signing time: Tue 01 Apr 2025 11:21:49 +0000
ROA not before: Tue 01 Apr 2025 11:21:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214113
IP address blocks: 192.140.228.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 11 Apr 2025 09:10:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f1:16:0f:fc:00:6c:b1:8b:de:f9:5d:3f:36:ff:fd:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Validity
Not Before: Apr 1 11:21:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfee169723d68e1a7bd2a6ef583b092f94d99827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:99:c8:55:f4:17:80:d2:70:1c:85:71:75:86:
98:6a:d4:10:74:6b:43:a8:93:98:e2:43:c5:ba:7b:
8a:c4:d1:03:bf:52:6e:cd:b1:c9:63:4f:00:9f:18:
84:f1:27:ef:d3:ad:24:0f:86:a1:e0:73:69:fb:5b:
87:ed:74:e5:2c:14:d7:59:44:c3:3c:fb:5e:26:f9:
aa:0a:57:bc:6a:65:bc:85:65:02:46:97:e7:c5:a2:
fe:af:d2:c6:39:ae:00:05:f9:ec:65:65:60:0c:a1:
3b:65:a9:f2:a3:02:14:68:cc:00:19:c2:b5:4e:9b:
b9:5d:48:d9:ca:11:a4:a0:b1:ed:a9:21:62:64:ea:
9e:26:9b:75:51:f7:78:c4:1d:f1:c8:c5:d3:68:eb:
99:9d:24:cf:fd:a0:a3:14:48:dd:96:d3:aa:5c:1c:
bd:6d:1e:c0:1d:f1:ee:32:8c:3b:a2:93:c2:b0:86:
54:00:2a:30:f1:71:14:72:0e:1a:6f:56:99:d3:25:
c5:80:75:c0:dc:b1:04:4a:ea:d4:d0:f7:6d:5d:f2:
99:5f:d0:da:40:99:d6:4a:d9:e7:c0:08:4c:02:0d:
72:a7:ef:a0:96:63:e6:55:d4:76:22:b9:77:43:e8:
0a:86:ff:36:7b:c2:88:93:94:c0:52:ab:a4:4b:61:
96:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EE:16:97:23:D6:8E:1A:7B:D2:A6:EF:58:3B:09:2F:94:D9:98:27
X509v3 Authority Key Identifier:
keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/z-4WlyPWjhp70qbvWDsJL5TZmCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.140.228.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:fa:ae:d7:53:ad:59:d9:af:af:96:a8:8e:0c:0f:d2:de:c1:
5f:72:33:0d:c0:b2:ed:ba:7c:14:d6:30:b9:96:4e:73:77:41:
09:1a:23:3c:43:75:ef:17:76:c1:b5:d3:46:96:6a:5a:81:13:
2d:5a:ce:9c:ca:06:45:04:c2:d7:88:be:e0:6d:46:e8:31:00:
f5:54:e2:19:07:a6:5f:40:b0:3c:e3:d8:f3:38:c4:1f:65:1a:
ab:12:c2:99:dc:2b:39:5d:c9:72:d9:8b:93:b8:82:95:06:9a:
32:3e:d9:b0:a0:0e:94:e2:fa:a5:7a:d2:a8:b4:41:b6:65:88:
bb:9b:44:db:2a:94:51:18:3b:ed:d7:27:1e:4a:7c:c8:89:b9:
00:1a:4a:55:b2:fb:51:2e:4f:ec:1e:17:65:23:8e:b7:7c:88:
cb:05:aa:6a:ec:57:7e:6b:7e:0b:f4:a0:c2:84:77:b5:70:57:
57:b0:dc:5b:35:e7:e9:b7:bf:2b:61:d2:66:68:fd:c4:31:5c:
57:2d:00:4d:89:76:5b:73:52:63:08:9c:3f:b8:ee:aa:e3:77:
36:d2:ea:27:f0:f4:a7:5f:df:a8:4b:c9:73:d3:e4:36:cc:ff:
f0:b6:a3:0b:cd:53:eb:91:d8:0e:f0:39:ce:5a:a5:2e:9d:4e:
8e:26:db:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:05:08 2025 by rpki-client