Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/YzU9rmKgHYIu8wqQm4mKBk0ca-Q.roa
File: YzU9rmKgHYIu8wqQm4mKBk0ca-Q.roa (raw, json)
Hash identifier: GU4pH6B+kTGCyKRBqT6y9YGq1wrPPGvBLHOUgizp2DU=
Subject key identifier: 63:35:3D:AE:62:A0:1D:82:2E:F3:0A:90:9B:89:8A:06:4D:1C:6B:E4
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0197406AEA6631FA0FDCF5B5D9A1D2F114AE
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/YzU9rmKgHYIu8wqQm4mKBk0ca-Q.roa
Signing time: Thu 05 Jun 2025 14:07:18 +0000
ROA not before: Thu 05 Jun 2025 14:07:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.149.26.0/24 maxlen: 24
89.21.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Jun 2025 05:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:6a:ea:66:31:fa:0f:dc:f5:b5:d9:a1:d2:f1:14:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 5 14:07:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63353dae62a01d822ef30a909b898a064d1c6be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:c9:f8:21:21:7b:cf:bb:6d:70:c3:ad:e8:
70:68:71:76:62:14:a3:31:f2:a5:1e:34:fe:66:0e:
08:06:9b:95:ac:4e:56:af:c8:f0:21:c7:6e:fa:40:
44:ab:3d:8b:1e:0d:d6:7e:4d:97:3a:f1:a6:01:b9:
30:64:f9:54:d8:55:95:39:57:fe:e5:14:bc:8a:cf:
af:3d:8e:c0:e4:68:1e:ce:4b:be:49:1d:d3:da:f4:
d4:9e:1b:a4:98:84:62:8d:a9:6c:51:e1:85:d8:40:
1b:97:a4:4e:45:43:30:6d:3a:26:8b:d2:1d:7f:c3:
23:80:76:c9:e8:52:46:7e:6c:2f:1a:e0:b1:ae:da:
3d:12:ab:c3:6c:41:30:81:2f:63:92:55:4a:82:42:
51:8e:9a:a3:65:c5:b1:59:39:00:97:80:88:1c:f5:
ad:b6:98:64:5b:a8:33:91:2f:67:bb:22:a8:61:13:
55:4c:3f:8c:4c:44:89:4b:16:e4:f0:f8:fe:2e:65:
0c:15:05:a9:4c:84:23:1e:ca:74:74:ae:11:ed:2e:
e1:4a:1c:81:5b:73:61:72:66:a1:17:10:a3:06:76:
19:04:d9:26:a5:16:86:3c:e6:6a:d9:00:f6:23:0b:
a2:06:b6:71:6d:45:14:3d:b7:1c:e6:16:01:c0:55:
9e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:35:3D:AE:62:A0:1D:82:2E:F3:0A:90:9B:89:8A:06:4D:1C:6B:E4
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/YzU9rmKgHYIu8wqQm4mKBk0ca-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.26.0/24
89.21.84.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:61:79:a0:32:58:8b:77:59:5a:fc:15:ed:08:12:60:f6:87:
4e:fa:fa:c4:d1:c0:fb:98:39:f4:c2:1d:87:8e:29:fb:68:11:
a1:2d:06:3f:7a:5b:0d:56:16:28:db:d8:e4:28:27:02:2f:86:
b8:05:e7:22:4d:6f:8f:5f:b0:44:cc:9f:e0:18:07:5c:cd:af:
1d:bc:aa:ff:46:7a:be:48:64:46:ff:a0:31:77:26:2b:60:55:
e5:4d:72:1a:34:f7:b3:89:bb:18:da:c9:d9:72:2e:10:64:dc:
89:b9:19:29:d6:f7:87:64:cf:eb:17:6a:b2:77:77:9a:90:b5:
f5:ea:8c:8d:4c:62:d9:95:78:9e:e7:77:da:da:47:b9:b0:e5:
42:79:6d:25:23:91:9d:b6:9f:9a:f0:39:59:39:0e:a5:de:5d:
45:ce:9d:40:6a:3d:9a:4e:f5:a8:2e:55:57:98:a4:4b:f1:63:
09:0a:a1:92:b7:f2:94:47:ad:10:a4:cd:c2:e6:1b:12:ec:1f:
6f:c6:61:73:33:44:74:ae:6b:5c:a0:ae:9f:fe:ca:4c:f7:21:
e6:88:d4:92:7d:a7:6d:e3:61:ae:21:f0:b8:57:13:21:8c:d5:
d1:ac:39:d1:73:e4:21:5c:10:c7:f7:6f:26:4d:a4:a8:07:67:
b9:2f:16:e2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZdAaupmMfoP3PW12aHS8RSuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjUwNjA1MTQwNzE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzM1M2RhZTYyYTAxZDgyMmVmMzBhOTA5Yjg5OGEwNjRkMWM2YmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE/J+CEhe8+7bXDDrehwaHF2YhSj
MfKlHjT+Zg4IBpuVrE5Wr8jwIcdu+kBEqz2LHg3Wfk2XOvGmAbkwZPlU2FWVOVf+
5RS8is+vPY7A5Ggezku+SR3T2vTUnhukmIRijalsUeGF2EAbl6RORUMwbTomi9Id
f8MjgHbJ6FJGfmwvGuCxrto9EqvDbEEwgS9jklVKgkJRjpqjZcWxWTkAl4CIHPWt
tphkW6gzkS9nuyKoYRNVTD+MTESJSxbk8Pj+LmUMFQWpTIQjHsp0dK4R7S7hShyB
W3NhcmahFxCjBnYZBNkmpRaGPOZq2QD2IwuiBrZxbUUUPbcc5hYBwFWeWQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGM1Pa5ioB2CLvMKkJuJigZNHGvkMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvWXpVOXJtS2dIWUl1OHdxUW00bUtCazBjYS1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZUaAwQA
WRVUMA0GCSqGSIb3DQEBCwUAA4IBAQA+YXmgMliLd1la/BXtCBJg9odO+vrE0cD7
mDn0wh2Hjin7aBGhLQY/elsNVhYo29jkKCcCL4a4BeciTW+PX7BEzJ/gGAdcza8d
vKr/Rnq+SGRG/6AxdyYrYFXlTXIaNPezibsY2snZci4QZNyJuRkp1veHZM/rF2qy
d3eakLX16oyNTGLZlXie53fa2ke5sOVCeW0lI5Gdtp+a8DlZOQ6l3l1Fzp1Aaj2a
TvWoLlVXmKRL8WMJCqGSt/KUR60QpM3C5hsS7B9vxmFzM0R0rmtcoK6f/spM9yHm
iNSSfadt42GuIfC4VxMhjNXRrDnRc+QhXBDH928mTaSoB2e5Lxbi
-----END CERTIFICATE-----
Generated at Mon Jun 9 03:47:12 2025 by rpki-client