Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/IeQc24iOQWgDkiG7sWSKQQeaZy4.roa
File: IeQc24iOQWgDkiG7sWSKQQeaZy4.roa (raw, json)
Hash identifier: yP1DB8ZY1axdagF8GVz1u9WS1ob0/LJJ3VMMYkSkh/k=
Subject key identifier: 21:E4:1C:DB:88:8E:41:68:03:92:21:BB:B1:64:8A:41:07:9A:67:2E
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01969FDEF297D63DF37F30D9183394421C3D
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/IeQc24iOQWgDkiG7sWSKQQeaZy4.roa
Signing time: Mon 05 May 2025 09:55:10 +0000
ROA not before: Mon 05 May 2025 09:55:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34450
IP address blocks: 85.204.125.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.37.136.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 09:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:de:f2:97:d6:3d:f3:7f:30:d9:18:33:94:42:1c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: May 5 09:55:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21e41cdb888e4168039221bbb1648a41079a672e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:e7:f0:8d:27:83:79:f1:8f:d3:fe:71:f4:
75:14:02:95:2c:88:c8:98:43:0e:62:0b:65:8c:f7:
69:7e:00:13:9a:c5:58:44:2c:4f:c7:36:00:80:6e:
c2:9f:42:13:2f:5b:18:03:0f:bd:a8:59:eb:29:a4:
08:26:da:e4:79:ca:52:46:b4:81:1d:83:fe:50:6f:
3d:a3:44:92:52:19:08:0c:8d:c4:16:3e:60:b3:50:
82:c3:29:f9:75:19:69:a7:f7:32:44:78:9f:5c:86:
27:26:a6:9e:12:76:af:1f:b7:e6:69:49:ff:3c:09:
fe:08:5a:b6:aa:87:6c:48:a0:17:03:5a:dc:04:a0:
9e:45:d2:26:92:7f:b5:f2:45:58:2f:89:92:d8:e8:
ca:7e:d0:76:33:89:48:b7:b5:00:0c:da:54:a5:fc:
81:54:c1:59:0b:3b:53:ac:c6:14:8b:42:bb:21:e4:
e4:f5:d9:a6:6a:ac:2e:37:b8:01:6a:8e:6b:9c:34:
96:8b:50:9e:30:a1:4b:de:f1:52:30:67:4f:f5:85:
d7:d7:3d:33:75:1e:54:24:80:a9:4a:dc:da:40:27:
57:61:73:4c:8c:cc:6f:98:9d:3d:ed:1b:0f:6c:26:
2b:3e:a4:0e:50:56:29:58:22:c2:88:2d:6f:cc:e5:
02:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E4:1C:DB:88:8E:41:68:03:92:21:BB:B1:64:8A:41:07:9A:67:2E
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/IeQc24iOQWgDkiG7sWSKQQeaZy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
86.106.104.0/24
89.34.8.0/21
89.37.136.0/24
89.44.209.0/24
93.113.158.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
9c:51:76:17:f7:7b:cf:f9:eb:18:08:30:24:da:c4:a5:34:60:
9e:8c:6f:ab:a3:d3:74:85:12:73:cf:89:ec:ff:9b:26:d0:d0:
6a:c5:f6:1d:90:59:d5:ce:06:13:d3:f2:c1:40:02:ce:96:29:
5e:b4:83:25:66:10:a3:67:7b:8f:a2:0c:ce:04:30:a0:4e:ed:
eb:92:3f:a7:b1:68:47:cc:05:d9:1e:f7:a4:d7:dd:67:16:bf:
dd:df:35:2a:d8:13:e2:59:50:cf:0d:43:4d:85:04:3c:13:62:
4e:33:66:05:bc:99:fb:85:ca:95:2f:db:a6:1d:71:09:f0:c2:
8f:f8:e0:c1:cf:47:f7:1c:9a:fc:2a:28:c6:90:fe:de:b1:3b:
38:49:e8:00:f4:a3:7b:33:43:06:68:15:3f:e7:8d:24:b9:04:
4a:6a:72:bb:06:80:e7:74:f4:b5:fe:30:a7:b4:5d:93:d4:f4:
ca:ef:50:68:84:f9:2a:d8:d6:50:94:08:97:14:58:c2:3c:21:
37:11:55:30:d1:d5:63:1f:dd:1f:80:52:ef:1c:b0:0c:ce:b5:
24:70:55:9c:84:9e:26:4f:29:0b:93:ac:17:92:c5:67:57:f5:
52:8d:51:68:76:58:0c:12:02:3d:3a:1c:9e:ee:55:e0:31:bb:
06:66:19:26
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgISAZaf3vKX1j3zfzDZGDOUQhw9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5
M2FlYjkwHhcNMjUwNTA1MDk1NTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWU0MWNkYjg4OGU0MTY4MDM5MjIxYmJiMTY0OGE0MTA3OWE2NzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyPn8I0ng3nxj9P+cfR1FAKVLIjI
mEMOYgtljPdpfgATmsVYRCxPxzYAgG7Cn0ITL1sYAw+9qFnrKaQIJtrkecpSRrSB
HYP+UG89o0SSUhkIDI3EFj5gs1CCwyn5dRlpp/cyRHifXIYnJqaeEnavH7fmaUn/
PAn+CFq2qodsSKAXA1rcBKCeRdImkn+18kVYL4mS2OjKftB2M4lIt7UADNpUpfyB
VMFZCztTrMYUi0K7IeTk9dmmaqwuN7gBao5rnDSWi1CeMKFL3vFSMGdP9YXX1z0z
dR5UJICpStzaQCdXYXNMjMxvmJ097RsPbCYrPqQOUFYpWCLCiC1vzOUCiwIDAQAB
o4ICXDCCAlgwHQYDVR0OBBYEFCHkHNuIjkFoA5Ihu7FkikEHmmcuMB8GA1UdIwQY
MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt
NWQ0OGI2NWNlNTczLzEvSWVRYzI0aU9RV2dEa2lHN3NXU0tRUWVhWnk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz
LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTBOBAIAATBIAwQAVcx9AwQA
VmpoAwQDWSIIAwQAWSWIAwQAWSzRAwQAXXGeAwQAXXI3AwQAXXJjAwQAXXKrAwQA
vNUSAwQBvNdIAwQAvPAOMA8EAgACMAkDBwAqBbaAAAEwDQYJKoZIhvcNAQELBQAD
ggEBAJxRdhf3e8/56xgIMCTaxKU0YJ6Mb6uj03SFEnPPiez/mybQ0GrF9h2QWdXO
BhPT8sFAAs6WKV60gyVmEKNne4+iDM4EMKBO7euSP6exaEfMBdke96TX3WcWv93f
NSrYE+JZUM8NQ02FBDwTYk4zZgW8mfuFypUv26YdcQnwwo/44MHPR/ccmvwqKMaQ
/t6xOzhJ6AD0o3szQwZoFT/njSS5BEpqcrsGgOd09LX+MKe0XZPU9MrvUGiE+SrY
1lCUCJcUWMI8ITcRVTDR1WMf3R+AUu8csAzOtSRwVZyEniZPKQuTrBeSxWdX9VKN
UWh2WAwSAj06HJ7uVeAxuwZmGSY=
-----END CERTIFICATE-----
Generated at Sun Jun 8 17:39:45 2025 by rpki-client