Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/9VZ4EQlMgmZbmpP8TINZNn4B9jw.roa
File: 9VZ4EQlMgmZbmpP8TINZNn4B9jw.roa (raw, json)
Hash identifier: CCEjgeiVJlHYNbFbYHTFnnnR1ZzpLdH5rHQkWA75k5A=
Subject key identifier: F5:56:78:11:09:4C:82:66:5B:9A:93:FC:4C:83:59:36:7E:01:F6:3C
Certificate issuer: /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial: 0193AFEF18503269644171D9181EE0A1B93F
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/9VZ4EQlMgmZbmpP8TINZNn4B9jw.roa
Signing time: Tue 10 Dec 2024 09:38:22 +0000
ROA not before: Tue 10 Dec 2024 09:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 680
IP address blocks: 141.39.0.0/16 maxlen: 16
188.1.0.0/16 maxlen: 16
188.1.101.0/24 maxlen: 24
192.76.176.0/24 maxlen: 24
192.108.67.0/24 maxlen: 24
192.108.69.0/24 maxlen: 24
192.108.70.0/24 maxlen: 24
192.108.71.0/24 maxlen: 24
192.129.26.0/23 maxlen: 23
192.129.28.0/23 maxlen: 23
192.129.31.0/24 maxlen: 24
193.174.0.0/15 maxlen: 15
194.94.0.0/15 maxlen: 15
195.37.0.0/16 maxlen: 16
212.201.0.0/16 maxlen: 16
2001:638::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:af:ef:18:50:32:69:64:41:71:d9:18:1e:e0:a1:b9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Validity
Not Before: Dec 10 09:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5567811094c82665b9a93fc4c8359367e01f63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:54:c2:13:99:77:0a:4e:59:f7:b2:7d:1a:bf:
17:38:12:4b:4c:0a:9e:b8:21:29:e0:6a:d5:0a:48:
0b:07:e0:fe:70:e2:b0:b6:1c:00:a6:52:39:96:23:
5f:a1:22:1f:6f:b5:ec:6e:84:a9:3d:c7:9a:ab:6a:
21:c8:3a:bf:38:b1:19:05:a3:a2:7c:1e:0b:73:1d:
de:33:fa:84:ab:3c:00:d9:b7:e8:ca:01:07:4e:31:
4d:c0:8d:32:02:1d:77:e5:dd:b4:d9:8e:3e:16:c5:
4a:1b:f0:a6:0c:d6:46:90:ec:ba:e8:a2:55:8f:ea:
6f:91:46:71:42:ba:e7:71:35:71:41:8d:54:c2:4c:
52:19:b4:07:6d:cf:d1:cd:71:13:83:d0:d7:12:c0:
49:ad:f5:45:5d:f9:c0:03:66:37:2e:be:d0:87:f3:
6d:32:a3:56:31:75:70:34:48:29:a3:92:5a:e1:0d:
d0:a1:6a:b8:a5:4d:d6:d2:69:96:69:5f:0c:34:83:
c3:d9:c6:70:66:2f:58:de:23:40:44:0a:89:24:6d:
06:5f:b4:50:32:59:14:e7:50:50:88:08:57:51:b7:
ee:a0:39:0d:ac:34:ff:2e:3a:45:36:f3:b0:89:33:
4c:ce:24:9f:d9:e2:66:4a:6d:7c:b4:d6:03:fb:95:
31:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:56:78:11:09:4C:82:66:5B:9A:93:FC:4C:83:59:36:7E:01:F6:3C
X509v3 Authority Key Identifier:
keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/9VZ4EQlMgmZbmpP8TINZNn4B9jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.39.0.0/16
188.1.0.0/16
192.76.176.0/24
192.108.67.0/24
192.108.69.0-192.108.71.255
192.129.26.0-192.129.29.255
192.129.31.0/24
193.174.0.0/15
194.94.0.0/15
195.37.0.0/16
212.201.0.0/16
IPv6:
2001:638::/32
Signature Algorithm: sha256WithRSAEncryption
9b:0e:b2:62:38:8f:e5:c5:28:bc:35:d6:eb:88:5d:7d:eb:97:
6f:2b:06:37:c1:8f:89:62:b5:b6:d4:c5:56:fe:d0:fc:66:ad:
8b:35:fc:79:0e:e1:7b:d3:27:64:b8:02:68:2e:11:08:40:30:
87:eb:1b:62:50:b9:56:c7:99:8a:0a:48:6a:79:be:69:1a:cf:
bd:34:f0:ee:c5:50:f7:06:47:b9:9b:b1:ff:c8:3c:8a:fa:bb:
40:7a:d8:4c:55:24:13:f9:dd:4f:a3:9e:14:31:bc:7a:fc:0d:
f4:83:12:6d:8d:45:d3:ff:c5:6a:b7:42:51:91:ad:6d:8e:12:
00:33:99:8b:67:f4:b7:4f:70:cf:d4:34:85:76:d9:fb:74:19:
a6:88:4d:41:10:32:40:fe:9b:49:75:ed:94:b5:5d:89:e2:41:
54:5f:6d:77:91:54:b7:98:7c:6a:74:c5:b9:c7:b5:1d:c3:02:
f7:e3:70:5c:29:89:a1:09:63:d2:5d:b8:25:85:2a:9e:2d:1a:
24:c2:9c:06:e4:42:f6:72:ba:29:83:ae:d5:44:e0:62:6c:0c:
6d:ac:ad:d4:e1:6b:c3:41:93:82:81:0b:fa:a3:91:cf:f2:52:
d7:4d:b7:50:ad:c2:a4:e2:e2:35:1b:c8:c3:78:99:a6:8d:fa:
a4:7e:74:03
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgISAZOv7xhQMmlkQXHZGB7gobk/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OTk5MDNkYWI4NWY2YTU5NzcyYjNlZGZkNGJmMGU0OTFh
ZjU3YzQwHhcNMjQxMjEwMDkzODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTU2NzgxMTA5NGM4MjY2NWI5YTkzZmM0YzgzNTkzNjdlMDFmNjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lTCE5l3Ck5Z97J9Gr8XOBJLTAqe
uCEp4GrVCkgLB+D+cOKwthwAplI5liNfoSIfb7XsboSpPceaq2ohyDq/OLEZBaOi
fB4Lcx3eM/qEqzwA2bfoygEHTjFNwI0yAh135d202Y4+FsVKG/CmDNZGkOy66KJV
j+pvkUZxQrrncTVxQY1UwkxSGbQHbc/RzXETg9DXEsBJrfVFXfnAA2Y3Lr7Qh/Nt
MqNWMXVwNEgpo5Ja4Q3QoWq4pU3W0mmWaV8MNIPD2cZwZi9Y3iNARAqJJG0GX7RQ
MlkU51BQiAhXUbfuoDkNrDT/LjpFNvOwiTNMziSf2eJmSm18tNYD+5UxJQIDAQAB
o4ICXjCCAlowHQYDVR0OBBYEFPVWeBEJTIJmW5qT/EyDWTZ+AfY8MB8GA1UdIwQY
MBaAFKSZkD2rhfall3Kz7f1L8OSRr1fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQt
NTdlYzEyZTg2NDFlLzEvOVZaNEVRbE1nbVpibXBQOFRJTlpObjRCOWp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQtNTdlYzEyZTg2NDFl
LzEvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHQGCCsGAQUFBwEHAQH/BGUwYzBSBAIAATBMAwMAjScDAwC8
AQMEAMBMsAMEAMBsQzAMAwQAwGxFAwQDwGxAMAwDBAHAgRoDBAHAgRwDBADAgR8D
AwHBrgMDAcJeAwMAwyUDAwDUyTANBAIAAjAHAwUAIAEGODANBgkqhkiG9w0BAQsF
AAOCAQEAmw6yYjiP5cUovDXW64hdfeuXbysGN8GPiWK1ttTFVv7Q/GatizX8eQ7h
e9MnZLgCaC4RCEAwh+sbYlC5VseZigpIanm+aRrPvTTw7sVQ9wZHuZux/8g8ivq7
QHrYTFUkE/ndT6OeFDG8evwN9IMSbY1F0//FardCUZGtbY4SADOZi2f0t09wz9Q0
hXbZ+3QZpohNQRAyQP6bSXXtlLVdieJBVF9td5FUt5h8anTFuce1HcMC9+NwXCmJ
oQlj0l24JYUqni0aJMKcBuRC9nK6KYOu1UTgYmwMbayt1OFrw0GTgoEL+qORz/JS
1023UK3CpOLiNRvIw3iZpo36pH50Aw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:36:35 2025 by rpki-client