Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/6loOm2ayE-B4S3tcKuHcVvPs8_Y.roa
File: 6loOm2ayE-B4S3tcKuHcVvPs8_Y.roa (raw, json)
Hash identifier: fbxak9yRWTgEXUAJC0LaSYSp2jk4LLY3suZm9r7aflg=
Subject key identifier: EA:5A:0E:9B:66:B2:13:E0:78:4B:7B:5C:2A:E1:DC:56:F3:EC:F3:F6
Certificate issuer: /CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
Certificate serial: 0197821229EC16E9EDDAB2411023C7BA7EF1
Authority key identifier: 9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/6loOm2ayE-B4S3tcKuHcVvPs8_Y.roa
Signing time: Wed 18 Jun 2025 08:05:17 +0000
ROA not before: Wed 18 Jun 2025 08:05:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8208
IP address blocks: 212.29.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Jun 2025 12:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:12:29:ec:16:e9:ed:da:b2:41:10:23:c7:ba:7e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
Validity
Not Before: Jun 18 08:05:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea5a0e9b66b213e0784b7b5c2ae1dc56f3ecf3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:28:03:bf:85:1f:eb:84:8c:75:32:db:7e:cf:
ba:aa:ec:8a:79:d5:7e:11:b6:40:d1:a3:20:af:63:
4e:1a:ce:72:16:1e:d2:65:c0:dc:f9:e2:cd:61:ea:
e3:e8:39:a9:c6:d5:be:ec:2d:ce:14:58:63:e7:15:
e0:f8:7a:3d:32:c4:b7:b6:97:14:26:ee:e9:9c:33:
96:80:80:b6:8c:94:fc:a4:72:76:c0:47:12:30:81:
a9:f7:a2:8b:38:8d:87:d7:4d:2c:65:08:1c:2f:62:
10:05:9c:83:8d:ff:12:81:16:7e:5c:21:02:08:6b:
c4:9e:ba:cd:7e:13:6b:68:08:20:4e:07:4b:82:27:
ee:79:af:c9:23:94:73:25:8d:76:26:b1:10:2e:81:
90:b9:57:25:56:41:ae:d9:ad:38:13:0d:05:6d:a1:
42:17:55:3e:b8:89:e0:b5:69:b0:64:92:66:81:82:
97:7f:97:f4:86:b6:f1:43:18:75:82:04:b5:56:5f:
38:bf:2e:fa:9e:1e:d3:a5:2d:31:10:d9:69:55:1a:
1a:24:fb:60:69:c6:48:25:46:82:9c:28:77:59:4d:
6d:f4:45:71:64:9e:46:2a:19:4f:7d:7d:9c:99:54:
d3:65:78:d7:99:31:e5:7e:00:3d:f6:f4:b5:6d:a1:
ba:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5A:0E:9B:66:B2:13:E0:78:4B:7B:5C:2A:E1:DC:56:F3:EC:F3:F6
X509v3 Authority Key Identifier:
keyid:9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/6loOm2ayE-B4S3tcKuHcVvPs8_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.29.30.0/24
Signature Algorithm: sha256WithRSAEncryption
49:07:f1:cc:d4:2a:52:53:e5:82:3c:15:e1:89:b2:9c:77:80:
f3:04:c9:8d:a4:3a:dc:a3:62:ac:cf:62:c0:bf:83:32:6d:19:
e2:7f:4d:94:59:5e:97:35:d1:1b:f5:d9:19:c1:06:f5:3c:03:
36:9a:68:20:ac:bb:09:23:9e:5e:da:d3:45:0c:8a:04:e9:de:
b8:1e:63:00:dd:95:e9:af:9e:e3:b0:fe:3d:61:17:a6:7d:bb:
c6:22:65:d8:ab:2b:86:ee:8c:f1:b3:f4:b0:75:2c:b8:a9:b3:
89:4f:75:db:fe:13:3d:5a:35:b8:68:bf:56:3a:61:ed:ab:fa:
2c:78:ac:5f:50:f4:e5:38:98:e9:0c:01:54:30:29:c6:ee:14:
dd:35:94:27:e2:44:79:5e:3a:73:e0:da:b9:8d:c8:48:cd:32:
65:2b:33:f5:fc:ac:da:61:46:cf:06:75:a2:8b:f2:92:73:90:
e9:0f:6e:4d:ef:bd:86:d0:c9:da:01:69:67:d7:97:e4:72:8e:
0f:18:14:bf:21:fc:b1:d9:91:3e:54:3d:43:7f:d6:60:87:46:
b4:99:6e:5b:15:98:a4:a8:7b:c7:35:92:14:06:f6:21:3f:c8:
89:52:f8:b2:49:a4:1a:30:78:f7:a0:fc:21:02:4c:1e:1e:61:
ac:69:72:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZeCEinsFunt2rJBECPHun7xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNjliZGY5YmJkMmE0NTk3ZTI2Y2UyMGJmZTEzODYyNGNh
ZDMzZGMwHhcNMjUwNjE4MDgwNTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTVhMGU5YjY2YjIxM2UwNzg0YjdiNWMyYWUxZGM1NmYzZWNmM2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCgDv4Uf64SMdTLbfs+6quyKedV+
EbZA0aMgr2NOGs5yFh7SZcDc+eLNYerj6DmpxtW+7C3OFFhj5xXg+Ho9MsS3tpcU
Ju7pnDOWgIC2jJT8pHJ2wEcSMIGp96KLOI2H100sZQgcL2IQBZyDjf8SgRZ+XCEC
CGvEnrrNfhNraAggTgdLgifuea/JI5RzJY12JrEQLoGQuVclVkGu2a04Ew0FbaFC
F1U+uIngtWmwZJJmgYKXf5f0hrbxQxh1ggS1Vl84vy76nh7TpS0xENlpVRoaJPtg
acZIJUaCnCh3WU1t9EVxZJ5GKhlPfX2cmVTTZXjXmTHlfgA99vS1baG6bQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOpaDptmshPgeEt7XCrh3Fbz7PP2MB8GA1UdIwQY
MBaAFJ9pvfm70qRZfibOIL/hOGJMrTPcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjJtOS1idlNwRmwtSnM0Z3YtRTRZa3l0TTl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jZGJkMGEtNjhlYy00ODdkLThmZWEt
NjE5MjgxMzgwYmMyLzEvNmxvT20yYXlFLUI0UzN0Y0t1SGNWdlBzOF9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jZGJkMGEtNjhlYy00ODdkLThmZWEtNjE5MjgxMzgwYmMy
LzEvbjJtOS1idlNwRmwtSnM0Z3YtRTRZa3l0TTl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1B0eMA0G
CSqGSIb3DQEBCwUAA4IBAQBJB/HM1CpSU+WCPBXhibKcd4DzBMmNpDrco2Ksz2LA
v4MybRnif02UWV6XNdEb9dkZwQb1PAM2mmggrLsJI55e2tNFDIoE6d64HmMA3ZXp
r57jsP49YRemfbvGImXYqyuG7ozxs/SwdSy4qbOJT3Xb/hM9WjW4aL9WOmHtq/os
eKxfUPTlOJjpDAFUMCnG7hTdNZQn4kR5Xjpz4Nq5jchIzTJlKzP1/KzaYUbPBnWi
i/KSc5DpD25N772G0MnaAWln15fkco4PGBS/Ifyx2ZE+VD1Df9Zgh0a0mW5bFZik
qHvHNZIUBvYhP8iJUviySaQaMHj3oPwhAkweHmGsaXJR
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:49:21 2025 by rpki-client