Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/dGJLbAT2BEW_BeGKm3wcElWmzQM.roa
File: dGJLbAT2BEW_BeGKm3wcElWmzQM.roa (raw, json)
Hash identifier: LpwWMhfDphnGaoTK0Cq8sMyGBvrawhClQxZfQfT1u7A=
Subject key identifier: 74:62:4B:6C:04:F6:04:45:BF:05:E1:8A:9B:7C:1C:12:55:A6:CD:03
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 01972844EC31989074966373844767E633F7
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/dGJLbAT2BEW_BeGKm3wcElWmzQM.roa
Signing time: Sat 31 May 2025 21:34:54 +0000
ROA not before: Sat 31 May 2025 21:34:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202759
IP address blocks: 45.151.72.0/24 maxlen: 24
83.172.139.0/24 maxlen: 24
89.40.104.0/24 maxlen: 24
95.156.206.0/24 maxlen: 24
185.122.185.0/24 maxlen: 24
185.193.49.0/24 maxlen: 24
188.214.32.0/24 maxlen: 24
188.214.36.0/24 maxlen: 24
188.214.37.0/24 maxlen: 24
2a03:f80:372::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 05 Jun 2025 09:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:28:44:ec:31:98:90:74:96:63:73:84:47:67:e6:33:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: May 31 21:34:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74624b6c04f60445bf05e18a9b7c1c1255a6cd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cf:01:bb:47:4e:7d:d3:7a:e5:10:c0:52:da:
df:ea:bf:3d:c5:03:2f:ad:45:de:ad:db:d4:74:24:
99:60:6c:52:53:21:6a:da:35:d0:84:5a:31:58:32:
90:43:c4:bc:56:1e:8a:d2:9e:07:9a:3c:23:b4:08:
46:be:c5:7c:e8:3d:68:50:25:88:aa:5d:3a:33:34:
55:76:e4:f5:56:80:20:7d:ed:d6:1d:50:93:8c:15:
47:3f:bc:ce:a3:11:66:41:b4:f9:7a:bb:3b:35:4c:
c3:29:9f:df:54:c6:a6:aa:91:5e:51:46:1b:e9:a5:
c3:f1:70:7f:ec:75:cf:5c:01:fb:f7:da:8a:93:5f:
37:94:73:c6:df:83:b3:ce:46:e8:7b:42:88:fd:3f:
6c:bf:08:79:6f:29:4f:7d:85:f6:8c:dd:a4:b8:89:
15:4e:d8:62:fe:2e:d4:b2:a5:3a:18:6e:49:33:67:
4f:fe:6c:ed:3e:ff:92:48:20:e5:d9:05:62:e8:0c:
79:c6:a3:72:1f:c3:bf:9f:2e:f2:fe:98:5c:8d:26:
3e:2f:a0:a9:16:b2:b6:23:4f:e1:4a:5e:4c:aa:e4:
3f:e7:99:ab:a2:d7:87:03:76:08:ff:04:1d:3c:ea:
fc:fa:b5:f9:a3:21:4c:c2:42:fc:02:69:4a:ee:01:
d1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:62:4B:6C:04:F6:04:45:BF:05:E1:8A:9B:7C:1C:12:55:A6:CD:03
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/dGJLbAT2BEW_BeGKm3wcElWmzQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.72.0/24
83.172.139.0/24
89.40.104.0/24
95.156.206.0/24
185.122.185.0/24
185.193.49.0/24
188.214.32.0/24
188.214.36.0/23
IPv6:
2a03:f80:372::/48
Signature Algorithm: sha256WithRSAEncryption
0c:fa:79:74:69:70:ae:65:c8:47:b4:00:df:6b:55:8c:f4:e4:
f5:62:a3:90:f1:c3:cb:20:1c:58:fa:c1:d9:92:22:2c:28:ba:
b2:86:b6:44:51:d6:a3:43:14:68:ae:2d:ef:5b:a0:7b:47:a8:
21:6e:50:bc:5e:d3:db:8b:d0:a9:70:c2:21:0a:b3:31:39:e3:
ea:ce:09:dc:6a:1b:53:8e:74:6d:bd:4e:8e:70:3a:e1:b9:d2:
78:0f:fd:8f:36:e2:95:2b:65:e5:02:0e:fc:04:7d:b6:78:11:
39:3f:b1:0e:fa:7c:68:9e:aa:2a:91:cf:b5:cf:ce:5a:93:fc:
f1:c2:54:fd:2f:1e:dd:53:78:fe:29:83:38:3a:98:f8:3c:65:
56:e6:0f:44:96:0d:60:1a:10:2a:9a:4c:95:5f:9b:34:b2:9d:
85:b5:10:a7:7e:de:fb:f6:a2:ec:95:ab:56:dd:6d:75:63:5a:
23:0c:29:11:25:fd:13:60:1e:04:8a:37:2e:28:3b:ef:76:f6:
b1:54:11:5c:f6:ee:20:f2:7b:7f:d5:a4:a0:61:53:4c:c4:6d:
b5:8d:7d:c1:1d:30:fa:5c:52:69:bd:d1:9d:f0:74:f1:16:85:
70:48:e0:75:26:5c:30:48:2e:ff:c6:6b:d5:80:52:be:3e:f0:
09:ee:16:56
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgISAZcoROwxmJB0lmNzhEdn5jP3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj
MjhmNmEwHhcNMjUwNTMxMjEzNDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDYyNGI2YzA0ZjYwNDQ1YmYwNWUxOGE5YjdjMWMxMjU1YTZjZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys8Bu0dOfdN65RDAUtrf6r89xQMv
rUXerdvUdCSZYGxSUyFq2jXQhFoxWDKQQ8S8Vh6K0p4HmjwjtAhGvsV86D1oUCWI
ql06MzRVduT1VoAgfe3WHVCTjBVHP7zOoxFmQbT5ers7NUzDKZ/fVMamqpFeUUYb
6aXD8XB/7HXPXAH799qKk183lHPG34Ozzkboe0KI/T9svwh5bylPfYX2jN2kuIkV
Tthi/i7UsqU6GG5JM2dP/mztPv+SSCDl2QVi6Ax5xqNyH8O/ny7y/phcjSY+L6Cp
FrK2I0/hSl5MquQ/55mroteHA3YI/wQdPOr8+rX5oyFMwkL8AmlK7gHRNwIDAQAB
o4ICRDCCAkAwHQYDVR0OBBYEFHRiS2wE9gRFvwXhipt8HBJVps0DMB8GA1UdIwQY
MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt
YjM4ZTI2NzdiM2RjLzEvZEdKTGJBVDJCRVdfQmVHS20zd2NFbFdtelFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj
LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTA2BAIAATAwAwQALZdIAwQA
U6yLAwQAWShoAwQAX5zOAwQAuXq5AwQAucExAwQAvNYgAwQBvNYkMA8EAgACMAkD
BwAqAw+AA3IwDQYJKoZIhvcNAQELBQADggEBAAz6eXRpcK5lyEe0AN9rVYz05PVi
o5Dxw8sgHFj6wdmSIiwourKGtkRR1qNDFGiuLe9boHtHqCFuULxe09uL0KlwwiEK
szE54+rOCdxqG1OOdG29To5wOuG50ngP/Y824pUrZeUCDvwEfbZ4ETk/sQ76fGie
qiqRz7XPzlqT/PHCVP0vHt1TeP4pgzg6mPg8ZVbmD0SWDWAaECqaTJVfmzSynYW1
EKd+3vv2ouyVq1bdbXVjWiMMKREl/RNgHgSKNy4oO+929rFUEVz27iDye3/VpKBh
U0zEbbWNfcEdMPpcUmm90Z3wdPEWhXBI4HUmXDBILv/Ga9WAUr4+8AnuFlY=
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:10:41 2025 by rpki-client