Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/Q6ulWZ7UUiguT2ZDU3iGu7rbbuE.roa
File: Q6ulWZ7UUiguT2ZDU3iGu7rbbuE.roa (raw, json)
Hash identifier: l2ChyG+jhVzFpakz4iVauj1dGxEzJn9Ly6CHBJiwKeU=
Subject key identifier: 43:AB:A5:59:9E:D4:52:28:2E:4F:66:43:53:78:86:BB:BA:DB:6E:E1
Certificate issuer: /CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
Certificate serial: 0194244505E658FF647AA9A81EE06878ADFA
Authority key identifier: B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/Q6ulWZ7UUiguT2ZDU3iGu7rbbuE.roa
Signing time: Wed 01 Jan 2025 23:48:10 +0000
ROA not before: Wed 01 Jan 2025 23:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202552
IP address blocks: 81.200.128.0/23 maxlen: 23
81.200.140.0/22 maxlen: 22
185.156.148.0/22 maxlen: 22
185.156.148.0/23 maxlen: 23
185.156.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Apr 2025 12:58:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:05:e6:58:ff:64:7a:a9:a8:1e:e0:68:78:ad:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
Validity
Not Before: Jan 1 23:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43aba5599ed452282e4f6643537886bbbadb6ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:c5:00:53:ee:1b:1c:70:9c:b1:cc:21:39:
f6:d7:c2:9f:a7:7e:09:66:d9:1e:3f:f3:32:a1:26:
00:2a:e7:9e:4f:95:f2:4e:e5:7d:43:5c:c6:f6:af:
51:7b:0c:fe:16:9f:b9:20:84:68:2e:73:7a:0d:cb:
9c:b9:0f:0b:9a:04:14:e9:62:a1:d1:c4:d1:8e:33:
35:52:ea:ed:6b:03:d9:ba:e8:91:e1:0b:44:ce:b9:
17:2e:05:f1:d0:15:63:18:ee:b7:ff:e8:99:b1:21:
16:2f:4b:d5:f2:70:d9:d6:ad:ec:0b:0e:70:b5:d6:
24:5e:eb:92:76:e5:da:e1:70:6a:aa:25:5a:6e:0d:
0a:2f:01:41:2c:bb:aa:71:b5:62:4c:59:dd:f4:fd:
8d:ce:84:a3:3b:fc:d3:63:ee:55:f7:46:4d:35:3d:
52:61:29:a3:35:2c:7a:ec:d1:a4:33:5e:f8:f2:92:
21:48:d6:bd:55:c8:15:e8:30:dc:38:82:d7:15:ae:
d3:9d:1a:21:19:f5:25:da:71:de:d9:8f:98:83:8c:
a0:74:eb:b8:c7:7e:04:56:e1:36:fb:13:6b:37:12:
ff:41:18:6c:82:11:60:4c:88:a3:89:d3:f0:fb:b8:
c6:df:2d:77:4b:56:53:04:f0:36:b3:8a:f6:da:c2:
e3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AB:A5:59:9E:D4:52:28:2E:4F:66:43:53:78:86:BB:BA:DB:6E:E1
X509v3 Authority Key Identifier:
keyid:B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/Q6ulWZ7UUiguT2ZDU3iGu7rbbuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.200.128.0/23
81.200.140.0/22
185.156.148.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:0a:ff:0a:84:ed:df:5e:24:d0:e8:e8:d3:b8:f2:15:9e:06:
38:f1:2d:42:52:40:db:18:39:24:fc:32:2d:52:88:30:9e:01:
b3:50:48:1e:31:56:30:b7:97:49:88:7d:53:85:a1:b2:1d:98:
c3:92:77:6f:95:0e:2d:5d:57:b4:b7:a3:99:3d:24:4c:77:3d:
7f:a0:a6:ad:1e:a0:d9:11:9e:cc:63:aa:89:38:34:d7:6a:8b:
e2:45:54:a3:af:1d:db:78:31:b8:a4:9b:1c:cc:18:ef:c9:39:
d8:f7:b2:56:f6:73:c4:bd:d0:9d:a7:af:55:f1:e5:f7:31:17:
fa:b3:67:6a:b7:98:f9:48:e3:be:0e:6f:0e:bf:2b:32:2f:76:
56:96:78:69:f1:2f:aa:e2:23:62:4f:93:f2:04:9d:88:9d:f0:
7a:40:ba:e3:97:ed:18:15:c2:1f:f2:7a:d5:19:3c:69:fc:4d:
09:a0:a1:38:20:40:3d:30:ab:82:01:59:1c:fc:c1:69:ff:17:
c2:50:00:02:df:4d:fa:90:4e:2d:29:9f:b5:d2:cf:23:6e:e1:
34:ed:24:39:1b:f7:85:2b:cc:bd:03:5e:7f:e6:12:03:78:e1:
df:d0:af:0d:d1:53:0b:a3:3c:2b:25:00:a4:82:30:5e:19:3b:
56:fe:bb:b6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQkRQXmWP9keqmoHuBoeK36MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZTBmNzk4NDFjMDIxMGQ5NWI0ZWY1NmZmNjg0NDFjMmFh
OWZjMGYwHhcNMjUwMTAxMjM0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2FiYTU1OTllZDQ1MjI4MmU0ZjY2NDM1Mzc4ODZiYmJhZGI2ZWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR/FAFPuGxxwnLHMITn218Kfp34J
ZtkeP/MyoSYAKueeT5XyTuV9Q1zG9q9Rewz+Fp+5IIRoLnN6DcucuQ8LmgQU6WKh
0cTRjjM1UurtawPZuuiR4QtEzrkXLgXx0BVjGO63/+iZsSEWL0vV8nDZ1q3sCw5w
tdYkXuuSduXa4XBqqiVabg0KLwFBLLuqcbViTFnd9P2NzoSjO/zTY+5V90ZNNT1S
YSmjNSx67NGkM1748pIhSNa9VcgV6DDcOILXFa7TnRohGfUl2nHe2Y+Yg4ygdOu4
x34EVuE2+xNrNxL/QRhsghFgTIijidPw+7jG3y13S1ZTBPA2s4r22sLjzwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEOrpVme1FIoLk9mQ1N4hru6227hMB8GA1UdIwQY
MBaAFLjg95hBwCENlbTvVv9oRBwqqfwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU9EM21FSEFJUTJWdE85V18yaEVIQ3FwX0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jOWU3MDQtOTU4ZC00MTNmLThhY2Mt
NmVhM2NiZmQzYTg0LzEvUTZ1bFdaN1VVaWd1VDJaRFUzaUd1N3JiYnVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9jOWU3MDQtOTU4ZC00MTNmLThhY2MtNmVhM2NiZmQzYTg0
LzEvdU9EM21FSEFJUTJWdE85V18yaEVIQ3FwX0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBUciAAwQC
UciMAwQCuZyUMA0GCSqGSIb3DQEBCwUAA4IBAQBsCv8KhO3fXiTQ6OjTuPIVngY4
8S1CUkDbGDkk/DItUogwngGzUEgeMVYwt5dJiH1ThaGyHZjDkndvlQ4tXVe0t6OZ
PSRMdz1/oKatHqDZEZ7MY6qJODTXaoviRVSjrx3beDG4pJsczBjvyTnY97JW9nPE
vdCdp69V8eX3MRf6s2dqt5j5SOO+Dm8OvysyL3ZWlnhp8S+q4iNiT5PyBJ2InfB6
QLrjl+0YFcIf8nrVGTxp/E0JoKE4IEA9MKuCAVkc/MFp/xfCUAAC3036kE4tKZ+1
0s8jbuE07SQ5G/eFK8y9A15/5hIDeOHf0K8N0VMLozwrJQCkgjBeGTtW/ru2
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:41:27 2025 by rpki-client