Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1ZYrcSMug-LLy63NOy3mXkBjqPk.roa
File: 1ZYrcSMug-LLy63NOy3mXkBjqPk.roa (raw, json)
Hash identifier: auasjeHzfP27QhZ5DKNi8f5zpop9KA2azDfLjXACaK8=
Subject key identifier: D5:96:2B:71:23:2E:83:E2:CB:CB:AD:CD:3B:2D:E6:5E:40:63:A8:F9
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0196C3E7CC8B31A0B6DE47220C2F67BA8E24
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1ZYrcSMug-LLy63NOy3mXkBjqPk.roa
Signing time: Mon 12 May 2025 09:51:10 +0000
ROA not before: Mon 12 May 2025 09:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18811
IP address blocks: 85.133.246.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
85.133.248.0/24 maxlen: 24
85.133.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 May 2025 06:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:e7:cc:8b:31:a0:b6:de:47:22:0c:2f:67:ba:8e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: May 12 09:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5962b71232e83e2cbcbadcd3b2de65e4063a8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8b:3d:04:6d:9f:49:0d:0e:76:55:b2:ac:c3:
28:81:d0:ca:b1:67:3a:9e:a2:1b:be:cb:19:9a:78:
8f:51:26:ba:2d:31:dd:69:66:e1:77:5f:51:3e:ab:
c7:6c:a6:e7:3d:d3:64:af:a1:4f:fb:9b:96:3b:eb:
69:7d:2e:5a:50:26:ab:f7:80:07:17:9c:e7:44:4e:
73:df:12:7b:19:72:e1:d5:26:03:a7:26:78:fa:23:
4f:d5:e0:56:e8:d3:95:71:c6:5b:82:9d:83:36:75:
14:59:57:a8:49:94:2d:f4:38:c4:c0:31:97:b2:88:
59:2c:d1:e3:0e:f0:55:a1:c6:bd:8c:34:96:a0:d7:
1b:f7:91:68:24:ae:9f:24:e5:e1:02:c1:10:21:8c:
4d:d7:03:fa:c2:59:c5:42:2d:7f:cc:e1:e0:ab:22:
59:b8:a3:c3:04:ea:84:2d:fe:cc:78:d6:4a:e4:83:
25:61:5a:6b:83:46:cf:cf:bc:d7:70:3b:64:c6:2e:
52:7d:54:73:5a:c4:fb:6d:f9:57:46:94:58:31:76:
36:5d:e5:e5:08:62:63:8e:4b:4e:06:6e:d4:cb:da:
03:29:ec:47:12:18:73:9b:88:53:2d:e3:05:11:32:
87:c3:cf:03:35:58:8b:ad:ee:f4:b1:16:2c:dc:ba:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:96:2B:71:23:2E:83:E2:CB:CB:AD:CD:3B:2D:E6:5E:40:63:A8:F9
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1ZYrcSMug-LLy63NOy3mXkBjqPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.246.0-85.133.249.255
Signature Algorithm: sha256WithRSAEncryption
8b:73:58:7e:e7:c9:40:47:47:f5:fc:27:95:a7:40:fa:e5:f1:
5b:f4:49:0b:8c:cf:91:a9:36:14:67:3b:7f:c3:09:81:70:9f:
70:d4:42:43:ef:f5:6a:34:99:a5:11:ef:86:0d:af:27:4d:f4:
82:c7:cc:82:10:8b:1e:0a:0b:79:d5:f9:c9:43:1d:1b:59:b1:
2c:ee:7c:66:9a:38:ca:56:6c:9a:76:74:f9:ae:1d:ea:e3:55:
c7:b7:65:24:97:56:dc:76:0d:cc:5a:f4:94:f8:71:8a:38:37:
d0:d0:dc:af:f7:0c:aa:c8:5a:c4:10:0b:0f:e1:af:5f:92:fb:
a2:22:eb:8a:55:6f:3f:8a:47:98:89:b3:12:2b:6e:3b:6c:cc:
f0:60:74:48:ec:b2:42:e4:2f:51:81:71:cd:0b:23:cf:07:d8:
95:b4:72:b5:29:23:ec:32:8a:81:55:eb:dd:33:e1:ae:b4:2f:
b9:23:37:a0:9e:30:5a:d3:28:85:43:dc:3d:4c:e5:3c:bf:df:
d2:ca:1f:54:ef:7c:42:f9:21:c1:7e:ae:96:f7:93:a6:dd:c0:
f0:50:8d:9c:4c:0f:2a:31:e3:f8:42:85:9c:c6:af:26:8e:4f:
2e:75:48:20:c7:31:33:1b:15:89:40:da:b3:ce:47:7a:8c:51:
98:86:1c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:41:31 2025 by rpki-client