Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/u526Wnr47KSqxtbe3YeXUjY_OXc.roa
File: u526Wnr47KSqxtbe3YeXUjY_OXc.roa (raw, json)
Hash identifier: FvreOZl4avGV95mg5S5jeu4j5alGN81Rb9numInKC1U=
Subject key identifier: BB:9D:BA:5A:7A:F8:EC:A4:AA:C6:D6:DE:DD:87:97:52:36:3F:39:77
Certificate issuer: /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial: 01942220143516E5194ED4854110BB1D3E69
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/u526Wnr47KSqxtbe3YeXUjY_OXc.roa
Signing time: Wed 01 Jan 2025 13:48:35 +0000
ROA not before: Wed 01 Jan 2025 13:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61275
IP address blocks: 5.100.176.0/21 maxlen: 21
5.100.184.0/22 maxlen: 22
77.223.161.0/24 maxlen: 24
77.223.162.0/23 maxlen: 23
77.223.164.0/22 maxlen: 22
77.223.168.0/22 maxlen: 22
77.223.172.0/22 maxlen: 22
77.223.176.0/20 maxlen: 20
85.93.224.0/19 maxlen: 19
91.135.48.0/21 maxlen: 21
91.135.56.0/23 maxlen: 23
91.135.58.0/24 maxlen: 24
91.135.59.0/24 maxlen: 24
91.135.60.0/22 maxlen: 22
178.248.96.0/21 maxlen: 21
185.3.0.0/22 maxlen: 22
185.24.188.0/22 maxlen: 22
188.93.184.0/21 maxlen: 21
2a03:ba00::/32 maxlen: 32
2a03:ba01::/32 maxlen: 32
2a03:ba02::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 04 Apr 2025 07:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:14:35:16:e5:19:4e:d4:85:41:10:bb:1d:3e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb9dba5a7af8eca4aac6d6dedd879752363f3977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:62:73:31:2a:32:a4:d4:ef:c5:79:a7:06:71:
67:0d:bf:d6:4b:0e:d4:00:a0:2e:b5:84:80:4c:a3:
a1:0f:1e:05:f1:0f:e4:41:68:39:d9:7b:b3:6b:2a:
84:43:aa:b5:16:bf:7f:9a:68:90:af:e1:ce:79:ee:
b6:84:d0:b3:20:fe:b6:65:dc:e3:17:e4:af:d5:3a:
88:2e:ed:39:e8:62:4a:04:61:6f:1a:46:09:36:6b:
23:69:c1:23:4a:d4:b0:fb:8c:fa:23:d0:e7:8e:41:
f6:4b:b5:2e:77:2b:c8:96:81:dc:ba:0d:17:3f:9c:
60:12:63:98:9a:7e:b6:f8:8e:87:b2:4e:8f:7d:4b:
77:9c:18:09:f7:43:e5:0d:73:5d:a7:7b:e8:e3:ea:
c9:19:ea:73:00:e6:2b:12:61:d0:f1:09:20:27:95:
d4:4e:a4:a3:14:f9:da:11:b5:2e:f5:ff:21:62:91:
37:5b:dc:e4:45:6f:95:4b:a1:ff:90:9b:53:eb:05:
7f:4a:56:b2:91:e8:7b:f3:50:52:ab:40:bb:66:86:
2d:86:ae:ac:8b:01:0c:48:57:3c:a4:3f:9c:8f:48:
ba:91:cc:e6:cc:40:4a:08:df:5f:8e:d4:ae:27:fd:
34:3a:37:00:b4:e4:55:08:b0:00:fe:bf:e7:84:b6:
e8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9D:BA:5A:7A:F8:EC:A4:AA:C6:D6:DE:DD:87:97:52:36:3F:39:77
X509v3 Authority Key Identifier:
keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/u526Wnr47KSqxtbe3YeXUjY_OXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.176.0-5.100.187.255
77.223.161.0-77.223.191.255
85.93.224.0/19
91.135.48.0/20
178.248.96.0/21
185.3.0.0/22
185.24.188.0/22
188.93.184.0/21
IPv6:
2a03:ba00::-2a03:ba02:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
56:42:b7:70:a0:c2:df:b6:3d:49:33:dd:52:f6:78:be:f5:31:
7d:9f:c5:f8:61:e8:2a:cd:6d:a1:d5:1c:5f:52:f3:0f:d5:3b:
99:02:df:97:be:ba:d6:3b:b9:4e:e7:42:17:e5:aa:45:f3:be:
02:ef:d1:67:ff:f6:00:43:1f:cd:72:7b:2f:30:0d:7b:5c:fd:
b8:05:29:6a:4a:41:08:ac:5c:a8:4a:9e:2c:ed:08:ad:b0:e2:
ff:58:c1:39:66:80:57:7a:5f:31:2d:68:e8:e9:f0:34:41:11:
a0:1f:f4:e9:a2:32:3e:4a:8d:86:3a:a4:6a:9b:3e:eb:1e:e0:
99:fc:31:40:7c:c9:18:25:f0:ca:85:20:1d:0d:b1:96:e3:bd:
fb:18:5d:40:35:95:e9:a0:b7:c7:d3:cc:40:76:3f:85:e4:a8:
cb:03:2c:07:a2:0d:20:bd:5a:d0:8c:55:5a:e1:d7:1d:1b:23:
fb:9d:67:61:19:09:64:9a:47:04:bd:c7:b5:f2:9e:c8:61:63:
28:87:06:d1:39:63:cb:53:8b:6e:99:5f:3e:87:6b:5b:3f:4d:
05:0e:3f:b5:49:3a:df:75:83:a1:11:f7:b8:7a:17:39:83:77:
9a:64:11:b0:86:ec:17:d8:aa:19:73:fa:83:4b:3f:e6:cf:aa:
d1:f2:3d:af
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgISAZQiIBQ1FuUZTtSFQRC7HT5pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YWM0OWQxY2NkY2FlZGQ5YTEzZjQ4MDNkZjFhZWRjZTZk
YzExMTIwHhcNMjUwMTAxMTM0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjlkYmE1YTdhZjhlY2E0YWFjNmQ2ZGVkZDg3OTc1MjM2M2YzOTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2JzMSoypNTvxXmnBnFnDb/WSw7U
AKAutYSATKOhDx4F8Q/kQWg52XuzayqEQ6q1Fr9/mmiQr+HOee62hNCzIP62Zdzj
F+Sv1TqILu056GJKBGFvGkYJNmsjacEjStSw+4z6I9DnjkH2S7UudyvIloHcug0X
P5xgEmOYmn62+I6Hsk6PfUt3nBgJ90PlDXNdp3vo4+rJGepzAOYrEmHQ8QkgJ5XU
TqSjFPnaEbUu9f8hYpE3W9zkRW+VS6H/kJtT6wV/Slaykeh781BSq0C7ZoYthq6s
iwEMSFc8pD+cj0i6kczmzEBKCN9fjtSuJ/00OjcAtORVCLAA/r/nhLbo0QIDAQAB
o4ICWjCCAlYwHQYDVR0OBBYEFLudulp6+OykqsbW3t2Hl1I2Pzl3MB8GA1UdIwQY
MBaAFLmsSdHM3K7dmhP0gD3xrtzm3BESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81MzcxOTEtMTE3OS00OGVjLWFkOWYt
ZmZlNDNhNTJkM2Y2LzEvdTUyNlducjQ3S1NxeHRiZTNZZVhVallfT1hjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC81MzcxOTEtMTE3OS00OGVjLWFkOWYtZmZlNDNhNTJkM2Y2
LzEvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBGBAIAATBAMAwDBAQFZLAD
BAIFZLgwDAMEAE3foQMEBk3fgAMEBVVd4AMEBFuHMAMEA7L4YAMEArkDAAMEArkY
vAMEA7xduDAVBAIAAjAPMA0DBAEqA7oDBQAqA7oCMA0GCSqGSIb3DQEBCwUAA4IB
AQBWQrdwoMLftj1JM91S9ni+9TF9n8X4YegqzW2h1RxfUvMP1TuZAt+XvrrWO7lO
50IX5apF874C79Fn//YAQx/NcnsvMA17XP24BSlqSkEIrFyoSp4s7QitsOL/WME5
ZoBXel8xLWjo6fA0QRGgH/TpojI+So2GOqRqmz7rHuCZ/DFAfMkYJfDKhSAdDbGW
4737GF1ANZXpoLfH08xAdj+F5KjLAywHog0gvVrQjFVa4dcdGyP7nWdhGQlkmkcE
vce18p7IYWMohwbROWPLU4tumV8+h2tbP00FDj+1STrfdYOhEfe4ehc5g3eaZBGw
huwX2KoZc/qDSz/mz6rR8j2v
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:27:14 2025 by rpki-client