Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/5d1mUWgfLkTC_o6rAj0_gdhE9m0.roa
File: 5d1mUWgfLkTC_o6rAj0_gdhE9m0.roa (raw, json)
Hash identifier: mRU31PDx+azZyi4YXODKV4dL41vsJRDhNK2Guk7lExU=
Subject key identifier: E5:DD:66:51:68:1F:2E:44:C2:FE:8E:AB:02:3D:3F:81:D8:44:F6:6D
Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial: 019633AD573D99D1B4836AED63EB69C46B60
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/5d1mUWgfLkTC_o6rAj0_gdhE9m0.roa
Signing time: Mon 14 Apr 2025 09:42:00 +0000
ROA not before: Mon 14 Apr 2025 09:42:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59437
IP address blocks: 85.234.64.0/24 maxlen: 24
93.119.168.0/24 maxlen: 24
93.119.169.0/24 maxlen: 24
109.61.121.0/24 maxlen: 24
2a03:90c0:680::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:ad:57:3d:99:d1:b4:83:6a:ed:63:eb:69:c4:6b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Validity
Not Before: Apr 14 09:42:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5dd6651681f2e44c2fe8eab023d3f81d844f66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8c:94:4e:73:59:52:6c:71:a6:f2:e1:0d:40:
f8:5f:d6:06:46:2b:d4:2b:b2:bc:7d:b2:03:46:20:
27:9f:0b:c6:f1:4b:c7:17:27:7a:6b:5c:09:f1:97:
61:2e:0e:ae:ec:2b:9d:3f:24:00:3d:d4:ca:ca:59:
ed:ed:60:7a:40:e8:18:b6:73:78:5b:bd:a6:51:de:
75:fd:7d:be:e4:8a:28:46:7b:29:c8:cc:18:6a:86:
ea:68:42:39:67:27:fc:14:7d:77:a9:20:5c:1e:32:
7c:80:82:5b:88:26:f6:95:15:a8:cb:e6:31:ad:cc:
e7:82:40:5b:58:3b:d9:7c:e9:ee:e2:05:1e:ee:65:
14:c2:d2:72:6a:52:a5:bd:d7:b3:94:d3:64:02:b2:
82:e2:2a:06:85:5e:27:e0:de:cf:62:bb:57:99:19:
d0:a9:c7:78:df:c1:5d:f3:d0:d9:8a:c6:48:82:7c:
d1:90:54:27:50:fe:be:5a:52:a3:ba:f6:af:07:41:
90:f9:c9:50:39:ca:95:c0:d3:15:21:60:81:33:28:
7e:0a:6c:e4:62:c6:0d:42:8b:da:17:4a:c6:36:85:
d5:8c:a9:62:dd:41:3b:fc:8b:a3:1a:e1:b9:20:c5:
7f:b0:1b:22:57:1c:81:6d:ef:69:6a:49:75:f0:3f:
06:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DD:66:51:68:1F:2E:44:C2:FE:8E:AB:02:3D:3F:81:D8:44:F6:6D
X509v3 Authority Key Identifier:
keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/5d1mUWgfLkTC_o6rAj0_gdhE9m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.234.64.0/24
93.119.168.0/23
109.61.121.0/24
IPv6:
2a03:90c0:680::/44
Signature Algorithm: sha256WithRSAEncryption
8e:14:1f:93:5b:73:15:08:9f:61:af:1e:7a:a2:b4:f1:e4:9e:
c6:cc:8a:d0:10:a8:85:2e:ba:5f:0d:67:45:27:05:a3:cf:de:
f9:81:53:61:54:96:45:ab:ec:78:00:21:36:55:0a:9b:65:cf:
ff:92:8d:66:83:83:30:18:c9:30:a4:23:20:33:aa:0f:26:7c:
a3:65:f3:ae:cf:09:86:4d:89:60:e7:9c:f8:3b:6a:d7:34:08:
63:6a:d7:4b:5a:3a:7b:cf:f7:7d:47:06:e9:b7:83:09:69:39:
ea:90:4f:ec:7a:f8:56:fd:d8:79:07:bc:2e:59:83:ca:16:cb:
e4:a6:0f:ff:d1:35:fc:5b:68:65:53:68:1d:fb:2d:fb:13:31:
a4:77:ca:1d:7f:1e:46:27:cc:c7:a6:ab:fa:ed:0a:bc:b0:06:
d5:f8:aa:a2:a2:41:62:a7:8b:c8:8f:4b:43:9c:e8:67:c1:00:
89:07:04:f9:d0:bd:12:23:ae:ad:db:35:b5:13:12:ff:4d:fc:
bb:1a:a1:e7:80:2c:33:18:fb:73:b8:62:e1:b1:9c:da:24:d6:
43:ad:41:2a:c9:d1:87:c6:73:ff:c4:40:34:35:bc:43:a9:06:
78:2e:80:59:ba:7a:72:9f:87:cb:9b:95:19:1f:6c:51:80:dd:
e1:14:4d:bb
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZYzrVc9mdG0g2rtY+tpxGtgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw
MDhhZWMwHhcNMjUwNDE0MDk0MjAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWRkNjY1MTY4MWYyZTQ0YzJmZThlYWIwMjNkM2Y4MWQ4NDRmNjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oyUTnNZUmxxpvLhDUD4X9YGRivU
K7K8fbIDRiAnnwvG8UvHFyd6a1wJ8ZdhLg6u7CudPyQAPdTKylnt7WB6QOgYtnN4
W72mUd51/X2+5IooRnspyMwYaobqaEI5Zyf8FH13qSBcHjJ8gIJbiCb2lRWoy+Yx
rczngkBbWDvZfOnu4gUe7mUUwtJyalKlvdezlNNkArKC4ioGhV4n4N7PYrtXmRnQ
qcd438Fd89DZisZIgnzRkFQnUP6+WlKjuvavB0GQ+clQOcqVwNMVIWCBMyh+Cmzk
YsYNQovaF0rGNoXVjKli3UE7/IujGuG5IMV/sBsiVxyBbe9pakl18D8GywIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFOXdZlFoHy5Ewv6OqwI9P4HYRPZtMB8GA1UdIwQY
MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt
YjA3ZDg0MTZhZTRhLzEvNWQxbVVXZ2ZMa1RDX282ckFqMF9nZGhFOW0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh
LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAVepAAwQB
XXeoAwQAbT15MA8EAgACMAkDBwQqA5DABoAwDQYJKoZIhvcNAQELBQADggEBAI4U
H5NbcxUIn2GvHnqitPHknsbMitAQqIUuul8NZ0UnBaPP3vmBU2FUlkWr7HgAITZV
Cptlz/+SjWaDgzAYyTCkIyAzqg8mfKNl867PCYZNiWDnnPg7atc0CGNq10taOnvP
931HBum3gwlpOeqQT+x6+Fb92HkHvC5Zg8oWy+SmD//RNfxbaGVTaB37LfsTMaR3
yh1/HkYnzMemq/rtCrywBtX4qqKiQWKni8iPS0Oc6GfBAIkHBPnQvRIjrq3bNbUT
Ev9N/LsaoeeALDMY+3O4YuGxnNok1kOtQSrJ0YfGc//EQDQ1vEOpBngugFm6enKf
h8ublRkfbFGA3eEUTbs=
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:24:34 2025 by rpki-client