Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/T5vpP5FxHimeaZG-TdtzPcKwXl0.roa
File: T5vpP5FxHimeaZG-TdtzPcKwXl0.roa (raw, json)
Hash identifier: Mje1NcjlQumA785Ia4U2A2EOlrJ6nFwqT9hO7/g5/F4=
Subject key identifier: 4F:9B:E9:3F:91:71:1E:29:9E:69:91:BE:4D:DB:73:3D:C2:B0:5E:5D
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 0197203F6548B31F1D7AA2C4CBACD681EB72
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/T5vpP5FxHimeaZG-TdtzPcKwXl0.roa
Signing time: Fri 30 May 2025 08:11:55 +0000
ROA not before: Fri 30 May 2025 08:11:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202759
IP address blocks: 45.151.72.0/24 maxlen: 24
83.172.139.0/24 maxlen: 24
95.156.206.0/24 maxlen: 24
185.122.185.0/24 maxlen: 24
185.193.49.0/24 maxlen: 24
188.214.32.0/24 maxlen: 24
188.214.36.0/24 maxlen: 24
188.214.37.0/24 maxlen: 24
2a03:f80:372::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 21:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:20:3f:65:48:b3:1f:1d:7a:a2:c4:cb:ac:d6:81:eb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: May 30 08:11:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f9be93f91711e299e6991be4ddb733dc2b05e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:21:c4:9b:d2:85:d5:be:ad:18:81:bf:b2:
e0:50:25:d9:57:c9:e1:a4:c5:98:03:4b:2d:db:1e:
f5:89:cb:ea:3a:c3:89:de:34:a8:3f:e2:e4:61:f6:
11:53:54:5e:a9:32:e9:43:b3:70:79:f4:12:91:8c:
ac:09:51:0a:c6:a8:31:ba:8c:bb:db:eb:78:15:e2:
a8:ee:58:aa:d7:dc:fa:bc:26:96:75:8a:bd:f7:64:
37:08:29:07:db:ad:bf:7e:b4:b5:61:e6:c0:24:16:
0d:91:bd:5c:3a:ae:18:19:94:16:1a:c3:c4:e7:89:
35:4a:40:e9:a3:ca:d6:35:f9:59:a9:11:98:87:76:
00:79:79:5d:52:80:55:4f:af:e6:4f:a7:15:52:dd:
ab:64:2d:02:02:a9:23:af:05:17:f4:21:b5:71:25:
39:23:64:96:19:31:92:7e:8f:89:9d:f1:0b:1f:4c:
48:1f:8d:a4:c8:1e:4b:dc:4b:44:91:0f:8f:10:b2:
64:be:82:09:b7:2b:42:38:44:52:25:e1:99:84:5d:
9d:b6:5e:85:e3:a2:da:d2:be:e3:c3:39:e6:14:02:
60:16:2c:14:5c:f7:56:52:0b:d2:a0:7b:02:73:df:
09:bb:8b:c0:b1:7d:c5:be:64:f3:1c:06:d6:38:0d:
77:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9B:E9:3F:91:71:1E:29:9E:69:91:BE:4D:DB:73:3D:C2:B0:5E:5D
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/T5vpP5FxHimeaZG-TdtzPcKwXl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.72.0/24
83.172.139.0/24
95.156.206.0/24
185.122.185.0/24
185.193.49.0/24
188.214.32.0/24
188.214.36.0/23
IPv6:
2a03:f80:372::/48
Signature Algorithm: sha256WithRSAEncryption
0b:ef:81:48:a8:c2:20:d8:50:47:fa:a8:d0:e4:94:f9:a7:5f:
10:44:bd:72:a8:82:85:eb:10:d4:30:7e:69:be:5c:eb:9a:d2:
e3:9c:5c:60:26:92:a2:ba:b3:3f:fc:47:ca:90:3b:d8:54:7d:
7c:e8:bd:a7:99:6a:a3:e0:a7:b9:ed:9d:cc:da:a9:4a:2e:52:
c3:45:cb:af:54:49:d4:41:87:94:28:56:b1:0b:c7:d6:35:a2:
b6:12:cd:17:64:bf:d5:20:b1:27:3b:6c:f2:ad:a7:12:68:0d:
88:b0:49:da:46:6b:6b:2f:11:5f:23:a2:e2:5d:60:14:bb:46:
2f:99:b8:95:91:12:8b:9a:76:6b:12:13:bf:9c:16:40:59:f0:
81:59:8f:5b:10:b9:19:4e:2a:b0:5e:13:d7:69:79:18:d3:37:
f4:de:7b:c0:aa:02:5f:2f:e4:8c:f0:a3:e9:20:1a:d5:77:0b:
6a:9d:98:88:05:0c:f6:77:6b:9b:77:f3:89:4a:44:c2:95:fd:
22:c7:8e:c8:de:c4:48:39:25:28:03:1a:0c:b8:6d:bb:09:d4:
2f:ec:f1:2f:52:d7:cc:0c:40:0e:93:01:8e:90:59:73:b6:62:
0f:95:5c:72:89:c9:b8:7f:5d:b6:eb:cc:32:38:59:cd:81:7a:
88:48:0c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:36:08 2025 by rpki-client