Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/ZO0feHSxTYdlpUhZlLWZE4vRT9E.roa
File: ZO0feHSxTYdlpUhZlLWZE4vRT9E.roa (raw, json)
Hash identifier: ujhxLY32FPzNyO0FG2ckk1+nCawsG/Aelgd5ozSPltg=
Subject key identifier: 64:ED:1F:78:74:B1:4D:87:65:A5:48:59:94:B5:99:13:8B:D1:4F:D1
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 019754C4436EEAB8DC9BD6BF1AEF647CA60F
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/ZO0feHSxTYdlpUhZlLWZE4vRT9E.roa
Signing time: Mon 09 Jun 2025 12:57:17 +0000
ROA not before: Mon 09 Jun 2025 12:57:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.152.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jun 2025 19:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:c4:43:6e:ea:b8:dc:9b:d6:bf:1a:ef:64:7c:a6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jun 9 12:57:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64ed1f7874b14d8765a5485994b599138bd14fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:5a:6e:58:c3:4f:7d:50:c0:21:19:9c:a2:
55:17:ff:12:6a:60:13:2c:79:91:dd:e4:f8:6c:16:
7d:fe:c2:80:3e:be:32:61:18:81:dd:27:26:c7:10:
5e:7f:c9:46:eb:bf:25:27:a9:b3:05:01:9c:74:53:
20:15:18:57:e8:f9:5d:8c:e6:7f:5d:dd:c9:6f:a4:
ed:32:64:c9:53:16:5f:db:7c:c6:4d:6d:fb:95:fb:
d6:d1:5d:b9:5b:f8:a7:bd:30:e1:ce:c4:e9:5f:37:
9b:85:62:2a:fa:c2:6c:d3:15:03:a8:f8:34:ec:8e:
b1:37:73:1b:ce:c3:a5:87:6e:61:f5:d7:9a:f1:45:
07:1b:dd:b6:e2:54:36:3f:7d:ab:1d:10:d8:f7:c5:
98:75:bf:56:c3:3b:15:6e:8a:10:c0:47:5e:0d:da:
70:a9:49:87:6f:fc:71:05:ce:b6:5f:95:e1:19:9d:
a9:c8:57:05:f1:85:9b:2d:09:4a:9f:d4:a3:6b:8c:
fe:96:52:79:4f:70:62:10:1f:2b:61:4b:73:2a:45:
46:e8:50:c6:77:98:c0:80:18:da:fc:d0:ca:ab:bc:
41:fc:99:06:1f:ef:95:1c:bb:b9:87:68:69:64:c3:
8a:43:2e:5b:fc:22:61:40:d0:b3:f3:16:a5:29:40:
2d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:ED:1F:78:74:B1:4D:87:65:A5:48:59:94:B5:99:13:8B:D1:4F:D1
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/ZO0feHSxTYdlpUhZlLWZE4vRT9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.167.0/24
Signature Algorithm: sha256WithRSAEncryption
83:82:a5:30:57:a0:0c:17:a3:ab:4d:db:72:34:59:e6:e0:c1:
0b:81:1b:e6:15:94:b9:60:85:be:aa:44:06:24:c3:39:23:d9:
06:43:16:b9:ee:5a:ce:71:4d:2e:2e:05:fd:ea:d7:ef:43:a6:
42:26:f8:d7:d2:06:7b:cd:80:e9:38:ac:cd:8c:d0:e7:dc:12:
2e:23:47:af:f6:91:bf:e2:56:26:be:36:24:f9:a5:4f:ab:03:
8d:cd:d9:45:99:34:0c:3d:5b:4b:dd:f0:f5:17:d9:1e:28:4e:
83:40:bb:a4:cd:0f:9d:97:93:75:c5:16:6a:34:72:a9:b0:b6:
aa:be:7f:05:3d:fd:fb:5c:55:7c:09:6b:73:64:f3:9b:41:64:
e2:6d:11:56:56:18:93:58:c9:17:3e:8b:ea:31:64:37:af:46:
77:fb:ee:ae:56:0b:ee:b7:4a:46:e0:7b:ac:f0:e1:fc:41:3b:
f6:a0:1e:c3:6c:00:d3:92:a1:9e:b4:a0:58:eb:c1:7c:23:1e:
ae:da:50:12:62:4c:d6:5d:2c:e5:8d:e6:a1:a8:3f:43:58:e4:
fe:11:46:54:6f:8e:63:fb:5d:c1:5d:7b:15:82:c7:a1:61:b9:
15:02:a0:b2:99:2b:46:5f:cb:68:90:1e:3a:81:cb:28:1f:94:
31:e9:ba:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZdUxENu6rjcm9a/Gu9kfKYPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy
NTdkYzQwHhcNMjUwNjA5MTI1NzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGVkMWY3ODc0YjE0ZDg3NjVhNTQ4NTk5NGI1OTkxMzhiZDE0ZmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBJabljDT31QwCEZnKJVF/8SamAT
LHmR3eT4bBZ9/sKAPr4yYRiB3ScmxxBef8lG678lJ6mzBQGcdFMgFRhX6PldjOZ/
Xd3Jb6TtMmTJUxZf23zGTW37lfvW0V25W/invTDhzsTpXzebhWIq+sJs0xUDqPg0
7I6xN3MbzsOlh25h9dea8UUHG9224lQ2P32rHRDY98WYdb9WwzsVbooQwEdeDdpw
qUmHb/xxBc62X5XhGZ2pyFcF8YWbLQlKn9Sja4z+llJ5T3BiEB8rYUtzKkVG6FDG
d5jAgBja/NDKq7xB/JkGH++VHLu5h2hpZMOKQy5b/CJhQNCz8xalKUAtkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGTtH3h0sU2HZaVIWZS1mROL0U/RMB8GA1UdIwQY
MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt
OTk5MGUyZDllYWZlLzEvWk8wZmVIU3hUWWRscFVoWmxMV1pFNHZSVDlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl
LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZinMA0G
CSqGSIb3DQEBCwUAA4IBAQCDgqUwV6AMF6OrTdtyNFnm4MELgRvmFZS5YIW+qkQG
JMM5I9kGQxa57lrOcU0uLgX96tfvQ6ZCJvjX0gZ7zYDpOKzNjNDn3BIuI0ev9pG/
4lYmvjYk+aVPqwONzdlFmTQMPVtL3fD1F9keKE6DQLukzQ+dl5N1xRZqNHKpsLaq
vn8FPf37XFV8CWtzZPObQWTibRFWVhiTWMkXPovqMWQ3r0Z3++6uVgvut0pG4Hus
8OH8QTv2oB7DbADTkqGetKBY68F8Ix6u2lASYkzWXSzljeahqD9DWOT+EUZUb45j
+13BXXsVgsehYbkVAqCymStGX8tokB46gcsoH5Qx6bp/
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:27:46 2025 by rpki-client