Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jMTQ66Ikyz0MCGoVhXJFqL5jkT4.roa
File: jMTQ66Ikyz0MCGoVhXJFqL5jkT4.roa (raw, json)
Hash identifier: 4vVccSV0T4mQuEfK9y5PQfQJGdHh3Hd5QEGWoEGejns=
Subject key identifier: 8C:C4:D0:EB:A2:24:CB:3D:0C:08:6A:15:85:72:45:A8:BE:63:91:3E
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0196B0199B8BE012BBD9C540F204C584A9C4
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jMTQ66Ikyz0MCGoVhXJFqL5jkT4.roa
Signing time: Thu 08 May 2025 13:33:10 +0000
ROA not before: Thu 08 May 2025 13:33:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 45.132.180.0/24 maxlen: 24
195.211.190.0/24 maxlen: 24
2a01:7120:6::/48 maxlen: 48
2a01:7120:7::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 12 May 2025 18:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:19:9b:8b:e0:12:bb:d9:c5:40:f2:04:c5:84:a9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 8 13:33:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cc4d0eba224cb3d0c086a15857245a8be63913e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:98:94:80:c5:a8:f3:d8:b2:49:07:a7:7b:21:
25:ad:2c:79:24:85:75:7c:77:e9:81:10:85:ec:78:
b1:1b:6a:88:46:62:35:2d:1a:40:67:78:98:41:23:
35:02:df:ea:4a:f6:d7:c7:c3:61:0d:1f:b2:04:b8:
16:84:9d:2c:d0:05:1b:f4:2a:0e:0c:f1:96:09:14:
e8:e7:d2:df:ea:59:99:04:ab:fb:45:17:3a:81:33:
98:15:56:be:20:48:3b:52:5f:94:e3:23:dc:c3:b6:
df:b1:17:a5:38:c7:50:e5:0e:d4:b5:3a:89:7d:3a:
5e:a4:a2:0a:17:b5:9d:57:d8:87:e9:e5:e7:78:fd:
e0:e8:db:b2:92:13:5d:d4:da:72:8a:da:c6:91:b4:
07:4e:c6:2e:d1:b5:6c:cd:69:55:11:80:ab:90:2f:
e1:50:2a:e4:7f:09:79:a8:1a:15:8b:a0:0e:45:3b:
68:70:9c:90:d6:ee:36:ca:62:96:98:ee:8e:53:a9:
dd:1f:38:6f:99:83:36:bb:b7:28:6e:d1:b6:e5:ad:
18:d9:af:29:8a:69:b3:c7:be:a4:fa:0f:d4:d0:08:
7f:37:70:be:57:77:6f:64:4a:b7:dc:2d:70:38:66:
e9:b2:e4:cd:2f:d3:fa:98:f5:94:eb:e9:bf:41:d0:
85:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C4:D0:EB:A2:24:CB:3D:0C:08:6A:15:85:72:45:A8:BE:63:91:3E
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jMTQ66Ikyz0MCGoVhXJFqL5jkT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.180.0/24
195.211.190.0/24
IPv6:
2a01:7120:6::/47
Signature Algorithm: sha256WithRSAEncryption
65:8e:e1:db:d9:4a:ed:3c:b1:90:d4:1e:df:b7:70:6d:f8:43:
16:15:61:f7:75:d0:d8:49:cc:d3:b1:80:78:c5:f5:50:e0:82:
87:d7:d2:71:e2:5e:56:2f:e7:9a:a3:4c:64:0b:84:e6:76:3d:
45:40:a4:08:3c:11:61:dc:41:30:7f:08:90:1e:d7:21:00:06:
88:21:51:47:90:9a:bf:a9:99:b3:dd:a3:aa:8a:f5:3e:a4:32:
e4:10:5a:a9:5b:a6:9f:00:b6:a0:69:cd:12:e1:46:96:68:08:
f6:d5:06:0b:f1:d7:60:ba:0b:c3:48:92:cf:55:97:2b:4e:ed:
95:df:42:f4:22:02:68:f1:18:cb:e5:2f:03:d1:ab:00:cc:1d:
14:11:6d:9f:46:8b:d8:0a:4d:6d:41:b1:81:39:e0:06:e9:1f:
d3:f1:0b:21:be:a1:a3:31:40:c1:e3:99:eb:0b:71:e5:1c:6e:
d8:22:a6:fb:7b:56:a5:cb:37:db:69:b4:fa:51:5a:e8:ab:36:
f3:ed:7f:10:b3:c5:3e:11:11:5b:a5:d2:84:68:e9:ee:93:f6:
91:5a:07:c3:79:81:2a:06:28:b1:e6:c3:c6:4a:0c:4b:98:18:
7b:56:b1:fc:e6:d1:05:3a:91:05:1c:67:f2:c1:8f:6b:ed:ac:
db:d3:dc:6e
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZawGZuL4BK72cVA8gTFhKnEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjUwNTA4MTMzMzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2M0ZDBlYmEyMjRjYjNkMGMwODZhMTU4NTcyNDVhOGJlNjM5MTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopiUgMWo89iySQeneyElrSx5JIV1
fHfpgRCF7HixG2qIRmI1LRpAZ3iYQSM1At/qSvbXx8NhDR+yBLgWhJ0s0AUb9CoO
DPGWCRTo59Lf6lmZBKv7RRc6gTOYFVa+IEg7Ul+U4yPcw7bfsRelOMdQ5Q7UtTqJ
fTpepKIKF7WdV9iH6eXneP3g6NuykhNd1NpyitrGkbQHTsYu0bVszWlVEYCrkC/h
UCrkfwl5qBoVi6AORTtocJyQ1u42ymKWmO6OU6ndHzhvmYM2u7cobtG25a0Y2a8p
immzx76k+g/U0Ah/N3C+V3dvZEq33C1wOGbpsuTNL9P6mPWU6+m/QdCFKwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFIzE0OuiJMs9DAhqFYVyRai+Y5E+MB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvak1UUTY2SWt5ejBNQ0dvVmhYSkZxTDVqa1Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALYS0AwQA
w9O+MA8EAgACMAkDBwEqAXEgAAYwDQYJKoZIhvcNAQELBQADggEBAGWO4dvZSu08
sZDUHt+3cG34QxYVYfd10NhJzNOxgHjF9VDggofX0nHiXlYv55qjTGQLhOZ2PUVA
pAg8EWHcQTB/CJAe1yEABoghUUeQmr+pmbPdo6qK9T6kMuQQWqlbpp8AtqBpzRLh
RpZoCPbVBgvx12C6C8NIks9VlytO7ZXfQvQiAmjxGMvlLwPRqwDMHRQRbZ9Gi9gK
TW1BsYE54AbpH9PxCyG+oaMxQMHjmesLceUcbtgipvt7VqXLN9tptPpRWuirNvPt
fxCzxT4REVul0oRo6e6T9pFaB8N5gSoGKLHmw8ZKDEuYGHtWsfzm0QU6kQUcZ/LB
j2vtrNvT3G4=
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:30:07 2025 by rpki-client