Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/b5qihpV_xvHz7jisdbMDV_HIvQY.roa
File: b5qihpV_xvHz7jisdbMDV_HIvQY.roa (raw, json)
Hash identifier: 5tl21EPUCJWwcruwKzPtM9lBKfYlSJMmCb66eXlMysY=
Subject key identifier: 6F:9A:A2:86:95:7F:C6:F1:F3:EE:38:AC:75:B3:03:57:F1:C8:BD:06
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 01942444EEEB4CE1D2EC3C66919FBB640E33
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/b5qihpV_xvHz7jisdbMDV_HIvQY.roa
Signing time: Wed 01 Jan 2025 23:48:04 +0000
ROA not before: Wed 01 Jan 2025 23:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 81.0.120.0/24 maxlen: 24
91.82.105.0/24 maxlen: 24
195.184.27.0/24 maxlen: 24
212.24.176.0/24 maxlen: 24
213.253.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Apr 2025 15:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ee:eb:4c:e1:d2:ec:3c:66:91:9f:bb:64:0e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 1 23:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f9aa286957fc6f1f3ee38ac75b30357f1c8bd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e4:ea:5d:68:b4:29:dc:95:7b:4c:9d:8d:5e:
5a:7f:51:0f:fe:18:0e:8a:cc:5d:b1:b2:09:fa:f8:
71:d6:b6:14:df:22:86:d0:01:21:53:0a:93:8a:14:
93:db:5d:7e:e0:6f:2e:5b:bf:34:55:d5:23:5b:03:
dc:32:4e:40:e2:b8:68:17:11:cb:1d:37:cf:14:69:
07:40:89:63:4e:80:09:a1:0a:a2:5a:6d:9c:ae:2a:
5e:57:e2:1d:0d:35:a0:9e:47:02:b4:44:a5:10:b1:
33:99:88:de:f4:cb:63:3e:5e:d1:c2:7a:2c:95:d2:
c9:a8:c7:a9:f9:e6:56:d0:f5:8c:59:45:a9:6b:71:
0b:22:32:c7:cc:1f:6a:7e:d2:74:a2:70:3e:a1:b8:
19:46:b9:7a:9f:6d:01:6b:0d:b9:65:d0:df:5b:37:
cb:2d:30:cb:15:b4:af:48:f0:26:79:fd:c8:e2:db:
b3:ec:72:0a:e6:8c:21:50:b4:03:2e:9f:24:34:63:
bc:7b:d3:18:60:4e:2f:f6:6b:0a:ea:49:69:10:38:
9c:c7:cc:18:24:f0:58:9b:d6:d3:c2:c6:a0:c6:2e:
13:6b:13:a1:3a:8b:b1:af:1f:53:46:bb:48:6b:b6:
14:7a:82:3b:3c:b5:5a:6d:fb:38:8d:b3:6e:b1:58:
4f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9A:A2:86:95:7F:C6:F1:F3:EE:38:AC:75:B3:03:57:F1:C8:BD:06
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/b5qihpV_xvHz7jisdbMDV_HIvQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.0.120.0/24
91.82.105.0/24
195.184.27.0/24
212.24.176.0/24
213.253.215.0/24
Signature Algorithm: sha256WithRSAEncryption
08:98:60:77:a2:a6:a4:69:86:16:16:b0:7b:78:56:23:e0:04:
cd:6d:e9:06:39:d3:db:29:0e:f1:6b:95:31:98:f9:f0:4a:0b:
5a:6e:66:3d:18:30:f9:dc:52:48:bb:81:2e:3f:ba:2e:2c:78:
2a:01:36:df:e4:89:fc:ee:9a:f7:8e:c0:2e:4f:3c:2f:ed:d0:
5d:78:db:f0:32:4a:2b:a1:33:55:bc:98:b8:d4:09:55:c5:30:
74:cf:2e:5a:94:15:6f:30:99:de:71:81:37:87:89:71:77:98:
d2:38:bd:4f:95:15:22:fc:a6:f0:68:2c:c8:16:73:c0:a9:42:
fb:38:9f:aa:f5:62:de:ff:1a:5a:04:b5:ed:58:9e:e7:cf:ad:
cd:94:fe:0b:31:7b:44:a6:f9:01:1e:3a:56:66:d7:53:d2:00:
83:02:e9:66:6b:d3:b8:3d:22:57:4e:a2:ee:be:27:a4:09:5a:
d1:85:e9:e3:24:02:a2:1c:55:a6:31:71:08:b7:22:d5:f1:eb:
18:24:4f:2c:78:6d:38:a6:29:3b:49:e6:5d:f7:9d:8d:f1:57:
77:38:63:ac:dc:ce:1e:69:95:de:11:f1:e5:28:7f:03:f1:1d:
1e:b8:ba:4a:d7:e4:26:dd:bc:78:83:ac:74:b3:01:38:13:1d:
95:1a:a4:90
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQkRO7rTOHS7DxmkZ+7ZA4zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5
ZDQyODgwHhcNMjUwMTAxMjM0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjlhYTI4Njk1N2ZjNmYxZjNlZTM4YWM3NWIzMDM1N2YxYzhiZDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eTqXWi0KdyVe0ydjV5af1EP/hgO
isxdsbIJ+vhx1rYU3yKG0AEhUwqTihST211+4G8uW780VdUjWwPcMk5A4rhoFxHL
HTfPFGkHQIljToAJoQqiWm2cripeV+IdDTWgnkcCtESlELEzmYje9MtjPl7Rwnos
ldLJqMep+eZW0PWMWUWpa3ELIjLHzB9qftJ0onA+obgZRrl6n20Baw25ZdDfWzfL
LTDLFbSvSPAmef3I4tuz7HIK5owhULQDLp8kNGO8e9MYYE4v9msK6klpEDicx8wY
JPBYm9bTwsagxi4TaxOhOouxrx9TRrtIa7YUeoI7PLVabfs4jbNusVhP7QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFG+aooaVf8bx8+44rHWzA1fxyL0GMB8GA1UdIwQY
MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It
ZWNjNDliZGMyYWQ4LzEvYjVxaWhwVl94dkh6N2ppc2RiTURWX0hJdlFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4
LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAUQB4AwQA
W1JpAwQAw7gbAwQA1BiwAwQA1f3XMA0GCSqGSIb3DQEBCwUAA4IBAQAImGB3oqak
aYYWFrB7eFYj4ATNbekGOdPbKQ7xa5UxmPnwSgtabmY9GDD53FJIu4EuP7ouLHgq
ATbf5In87pr3jsAuTzwv7dBdeNvwMkoroTNVvJi41AlVxTB0zy5alBVvMJnecYE3
h4lxd5jSOL1PlRUi/KbwaCzIFnPAqUL7OJ+q9WLe/xpaBLXtWJ7nz63NlP4LMXtE
pvkBHjpWZtdT0gCDAulma9O4PSJXTqLuviekCVrRhenjJAKiHFWmMXEItyLV8esY
JE8seG04pik7SeZd952N8Vd3OGOs3M4eaZXeEfHlKH8D8R0euLpK1+Qm3bx4g6x0
swE4Ex2VGqSQ
-----END CERTIFICATE-----
Generated at Sat Apr 12 16:39:08 2025 by rpki-client