Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/16ZUOx28oyuRj-uKAaxx99SiqvA.roa
File: 16ZUOx28oyuRj-uKAaxx99SiqvA.roa (raw, json)
Hash identifier: OdZZ1753GcIv+0G/7o3AIV5oTAJv9dZGnPm1y12H6xQ=
Subject key identifier: D7:A6:54:3B:1D:BC:A3:2B:91:8F:EB:8A:01:AC:71:F7:D4:A2:AA:F0
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019420D616A49C681A321254EB1B266DE679
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/16ZUOx28oyuRj-uKAaxx99SiqvA.roa
Signing time: Wed 01 Jan 2025 07:48:08 +0000
ROA not before: Wed 01 Jan 2025 07:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41953
IP address blocks: 89.40.196.0/22 maxlen: 22
92.114.111.0/24 maxlen: 24
93.113.47.0/24 maxlen: 24
93.115.34.0/24 maxlen: 24
185.202.84.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 04 Mar 2025 18:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:16:a4:9c:68:1a:32:12:54:eb:1b:26:6d:e6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 07:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7a6543b1dbca32b918feb8a01ac71f7d4a2aaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2e:c4:32:fa:d7:e5:c1:43:b3:6f:66:8f:6c:
7e:2d:2f:2b:c2:45:a7:28:3e:fa:26:6d:c9:ee:40:
f5:e0:0a:c5:41:ee:48:0e:b0:94:12:da:c1:fa:45:
2f:da:31:e4:a5:a5:9a:b7:4a:00:61:d7:eb:db:d1:
fa:ed:fa:73:cf:ed:1c:c5:ae:06:49:66:80:c5:87:
8c:7e:3e:1f:70:ee:ca:99:cf:ca:fc:43:cd:58:8e:
78:27:67:9e:11:2d:58:a3:ff:4a:6e:21:54:f5:e5:
ee:fc:7b:7d:b9:0a:a2:2e:25:f7:50:71:c2:5d:78:
f8:d4:3f:24:21:66:7c:8e:36:57:3e:e2:ee:1f:f8:
67:b3:53:63:c7:c8:a8:d9:4d:77:44:19:9a:c9:92:
57:8b:19:49:6d:12:c8:dc:7e:18:8c:09:7f:c4:17:
d7:cc:8f:3c:4d:b4:36:87:de:54:dc:01:40:19:91:
3c:ef:ba:4e:82:ea:5f:25:31:af:84:18:10:5d:3b:
2d:4d:87:e9:7c:41:6b:5f:1a:3c:04:84:c6:bf:e1:
aa:3b:d3:b7:d6:c1:46:5b:f8:71:32:50:53:94:0e:
a9:a1:e1:82:9e:ed:f7:b7:f8:3f:c8:f9:9d:55:55:
56:19:a0:2d:bb:ce:31:99:43:70:da:31:41:b2:a3:
44:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A6:54:3B:1D:BC:A3:2B:91:8F:EB:8A:01:AC:71:F7:D4:A2:AA:F0
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/16ZUOx28oyuRj-uKAaxx99SiqvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.196.0/22
92.114.111.0/24
93.113.47.0/24
93.115.34.0/24
185.202.84.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:c9:ab:23:c1:57:d1:d9:50:73:c4:e6:f1:42:80:8d:73:d7:
e0:56:86:90:5c:86:e9:c6:ac:99:9b:6c:eb:6b:1a:d6:5d:dc:
8f:1a:2f:a2:5b:9b:73:24:17:d8:49:30:20:05:74:51:ea:95:
72:4c:2c:c5:5f:cd:66:08:bd:25:de:a5:bb:94:d8:8f:6b:d9:
57:dc:36:0a:cc:61:42:39:55:f6:32:5b:e6:c6:fa:ce:16:98:
0a:fc:03:ce:08:ec:c2:e9:fa:91:78:fd:04:9c:17:56:ea:96:
b4:1c:b8:e5:e2:80:3e:0a:8e:70:02:8c:4f:18:48:21:6d:5d:
d0:c2:61:76:d2:63:d6:b4:93:f1:6c:bb:1e:b6:15:07:bb:00:
f8:66:ad:dd:d0:5f:14:18:40:42:21:ce:1b:5f:91:9d:fd:d5:
1c:29:2e:a7:9e:36:e0:cb:e0:f8:b7:3b:22:91:30:ef:93:8d:
ed:07:e1:d7:0e:8e:57:7c:2e:24:1e:ef:94:85:ae:fb:b0:c4:
bb:84:9e:03:53:f2:7d:d3:7e:91:be:3d:00:e3:ba:da:34:e7:
d5:3a:3a:fb:9b:75:4a:17:7f:63:1b:0a:8c:d4:a0:2a:02:1f:
75:49:e3:1b:fc:96:3d:65:27:5f:57:9b:70:ad:5e:f9:8d:14:
96:80:27:17
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQg1haknGgaMhJU6xsmbeZ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5
M2FlYjkwHhcNMjUwMTAxMDc0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2E2NTQzYjFkYmNhMzJiOTE4ZmViOGEwMWFjNzFmN2Q0YTJhYWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2C7EMvrX5cFDs29mj2x+LS8rwkWn
KD76Jm3J7kD14ArFQe5IDrCUEtrB+kUv2jHkpaWat0oAYdfr29H67fpzz+0cxa4G
SWaAxYeMfj4fcO7Kmc/K/EPNWI54J2eeES1Yo/9KbiFU9eXu/Ht9uQqiLiX3UHHC
XXj41D8kIWZ8jjZXPuLuH/hns1Njx8io2U13RBmayZJXixlJbRLI3H4YjAl/xBfX
zI88TbQ2h95U3AFAGZE877pOgupfJTGvhBgQXTstTYfpfEFrXxo8BITGv+GqO9O3
1sFGW/hxMlBTlA6poeGCnu33t/g/yPmdVVVWGaAtu84xmUNw2jFBsqNETQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFNemVDsdvKMrkY/rigGscffUoqrwMB8GA1UdIwQY
MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt
NWQ0OGI2NWNlNTczLzEvMTZaVU94MjhveXVSai11S0FheHg5OVNpcXZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz
LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCWSjEAwQA
XHJvAwQAXXEvAwQAXXMiAwQCucpUMA0GCSqGSIb3DQEBCwUAA4IBAQDFyasjwVfR
2VBzxObxQoCNc9fgVoaQXIbpxqyZm2zraxrWXdyPGi+iW5tzJBfYSTAgBXRR6pVy
TCzFX81mCL0l3qW7lNiPa9lX3DYKzGFCOVX2MlvmxvrOFpgK/APOCOzC6fqReP0E
nBdW6pa0HLjl4oA+Co5wAoxPGEghbV3QwmF20mPWtJPxbLsethUHuwD4Zq3d0F8U
GEBCIc4bX5Gd/dUcKS6nnjbgy+D4tzsikTDvk43tB+HXDo5XfC4kHu+Uha77sMS7
hJ4DU/J9036Rvj0A47raNOfVOjr7m3VKF39jGwqM1KAqAh91SeMb/JY9ZSdfV5tw
rV75jRSWgCcX
-----END CERTIFICATE-----
Generated at Sun Apr 13 00:46:16 2025 by rpki-client