Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/z25wLVl-vAmWflxvI2BOcPL8xU4.roa
File: z25wLVl-vAmWflxvI2BOcPL8xU4.roa (raw, json)
Hash identifier: JCYgF7eU9NikEeI4IwQR/qWPVJ5ibzlS3+TAiI2UMrU=
Subject key identifier: CF:6E:70:2D:59:7E:BC:09:96:7E:5C:6F:23:60:4E:70:F2:FC:C5:4E
Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial: 0195F6D63AF2ADF06272404A2BB74E9A2E06
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/z25wLVl-vAmWflxvI2BOcPL8xU4.roa
Signing time: Wed 02 Apr 2025 14:09:49 +0000
ROA not before: Wed 02 Apr 2025 14:09:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60695
IP address blocks: 155.133.33.0/24 maxlen: 24
155.133.60.0/23 maxlen: 23
185.225.100.0/22 maxlen: 22
185.228.108.0/22 maxlen: 22
2a06:1e00::/29 maxlen: 48
2a06:1e00::/48 maxlen: 48
2a06:1e00:5::/48 maxlen: 48
2a06:1e00:14::/48 maxlen: 48
2a06:1e00:18::/48 maxlen: 48
2a06:1e00:30::/48 maxlen: 48
2a06:1e00:40::/48 maxlen: 48
2a06:1e00:50::/48 maxlen: 48
2a06:1e00:60::/48 maxlen: 48
2a0d:a00::/29 maxlen: 29
2a0d:b400::/29 maxlen: 48
2a0e:4d00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 02 Apr 2025 16:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:d6:3a:f2:ad:f0:62:72:40:4a:2b:b7:4e:9a:2e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Validity
Not Before: Apr 2 14:09:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf6e702d597ebc09967e5c6f23604e70f2fcc54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:24:d3:1c:78:96:3f:d6:f4:49:cc:f4:bd:57:
5e:73:f2:3f:52:a4:06:87:b6:bd:af:5d:31:47:ee:
f8:8d:71:8b:08:53:b9:73:73:ce:4d:ed:45:c9:bb:
8c:d7:a1:22:a1:52:98:05:f8:9a:fa:00:af:7e:54:
bc:e6:16:d7:b5:78:6d:0d:04:42:29:e3:1f:57:48:
d6:10:f3:c5:fa:9d:56:6b:01:80:4c:96:61:cb:10:
2a:b9:20:ba:7f:eb:68:10:9c:09:03:26:1b:8f:17:
86:bd:ac:9b:66:9c:06:9e:d4:b5:d1:76:ec:ef:ee:
82:38:d4:c2:83:87:0d:ce:0d:3d:60:ff:85:35:62:
94:66:c7:28:44:bf:be:05:8d:43:b2:2a:e2:9b:81:
48:6a:d2:d2:37:27:da:ee:95:ad:39:5a:17:2c:2d:
59:1b:cb:35:b4:de:a4:9b:33:cc:e6:45:30:90:ac:
32:ef:97:7b:b1:60:21:8f:b1:bc:f3:a3:7f:40:d0:
e7:71:e3:75:9c:ae:7c:02:27:60:7a:09:43:54:5b:
23:66:a8:f8:c4:92:15:33:4a:18:22:a1:02:8d:05:
83:2e:13:94:0a:32:93:85:1e:d3:3d:01:b6:1c:71:
17:0b:14:8e:f2:c1:6b:3c:c3:2d:15:18:e9:8e:1f:
08:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6E:70:2D:59:7E:BC:09:96:7E:5C:6F:23:60:4E:70:F2:FC:C5:4E
X509v3 Authority Key Identifier:
keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/z25wLVl-vAmWflxvI2BOcPL8xU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.33.0/24
155.133.60.0/23
185.225.100.0/22
185.228.108.0/22
IPv6:
2a06:1e00::/29
2a0d:a00::/29
2a0d:b400::/29
2a0e:4d00::/29
Signature Algorithm: sha256WithRSAEncryption
8d:10:b6:75:18:c8:09:bf:80:29:29:5a:42:dd:2e:3d:0f:2e:
37:eb:4c:81:a9:da:23:7b:3a:bf:4e:3f:a0:33:c2:84:e3:b0:
e0:a4:9f:a3:9c:04:f8:dd:39:c7:40:5d:eb:f6:17:76:8b:b8:
35:52:5f:c4:19:67:7e:62:16:95:02:93:cd:08:51:d6:25:87:
50:5a:71:af:d5:a0:e6:26:9b:03:08:13:0f:a5:9c:df:aa:81:
8e:99:8b:e2:ef:fa:5c:5a:7e:99:63:16:10:58:34:68:db:8b:
a8:d2:df:2d:65:67:0e:31:49:bc:e9:91:81:ea:cc:b2:86:23:
3f:2d:79:5f:93:a7:08:20:c7:f0:fd:37:b8:ff:f9:76:97:a1:
3a:f1:c4:68:0a:54:24:b0:c8:06:77:a3:5b:86:09:0e:81:76:
29:15:38:b2:69:9d:60:43:ab:6d:7d:8c:76:82:e2:71:dd:9f:
88:7c:d5:c1:26:ac:a0:94:56:9f:d5:a2:e4:3b:fa:94:d4:3e:
5d:de:ea:d6:9b:18:ed:cc:c3:51:fe:e1:8c:86:9a:15:34:de:
f6:0f:2b:4d:50:e0:60:b2:a5:23:f8:7b:9e:3d:76:ca:59:1e:
e8:bb:54:57:82:7d:18:1e:1c:64:51:69:ff:e7:c9:df:6b:86:
27:cc:6e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:24:21 2025 by rpki-client