Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/gJB500hvuGtG2Q6H0mYRT6R7iRA.roa
File: gJB500hvuGtG2Q6H0mYRT6R7iRA.roa (raw, json)
Hash identifier: AaQCd3dVcwGCJEZ+coN7h9lSehhP1/Fj/1SQ4NHKgcc=
Subject key identifier: 80:90:79:D3:48:6F:B8:6B:46:D9:0E:87:D2:66:11:4F:A4:7B:89:10
Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial: 0195ECC505DB8D1C90162C435141CAE1F8CE
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/gJB500hvuGtG2Q6H0mYRT6R7iRA.roa
Signing time: Mon 31 Mar 2025 15:14:49 +0000
ROA not before: Mon 31 Mar 2025 15:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59437
IP address blocks: 93.119.168.0/24 maxlen: 24
93.119.169.0/24 maxlen: 24
109.61.121.0/24 maxlen: 24
2a03:90c0:680::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 14 Apr 2025 09:42:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ec:c5:05:db:8d:1c:90:16:2c:43:51:41:ca:e1:f8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Validity
Not Before: Mar 31 15:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=809079d3486fb86b46d90e87d266114fa47b8910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d9:7a:6a:24:71:bd:3a:bd:04:4a:59:64:9b:
68:27:5b:00:3a:b4:9d:6a:ae:eb:7a:f8:c2:ef:ab:
3e:db:fb:2e:45:fb:c5:97:b8:e2:23:d7:b2:93:f9:
24:14:4b:80:90:12:6c:5a:3a:48:e2:d3:a1:71:e2:
60:03:82:1b:f9:7b:a5:f8:35:6e:42:84:f3:97:f7:
2e:9f:20:f8:2f:fe:c3:01:8d:e9:f1:1f:be:c6:c5:
6e:e0:fc:cf:8f:85:d0:10:79:e9:b6:e4:8b:2b:e4:
54:87:c5:84:40:64:0b:cb:0c:c6:4e:b9:51:7a:0b:
42:76:53:92:b6:c3:26:7e:eb:54:f9:19:0e:5c:3a:
8f:10:6c:86:14:ab:de:ac:1b:34:16:cf:a8:29:d2:
b5:f5:f4:10:28:00:7a:59:00:5d:01:31:47:09:94:
9d:b9:d5:fb:f8:fa:47:7c:7d:60:55:a3:5b:b5:3b:
ff:0a:b6:e4:70:ff:b1:be:ff:e7:c1:6a:b7:09:2c:
31:74:f1:a1:fe:72:33:78:aa:db:d5:ff:c8:3f:0a:
d4:c6:02:b2:c6:ee:5d:06:ff:f5:d9:a4:14:28:6a:
66:d6:d1:2b:db:73:f9:29:d9:61:96:59:7e:2e:38:
c1:7a:ff:df:47:c8:37:41:e6:c5:19:19:ff:2b:03:
38:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:90:79:D3:48:6F:B8:6B:46:D9:0E:87:D2:66:11:4F:A4:7B:89:10
X509v3 Authority Key Identifier:
keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/gJB500hvuGtG2Q6H0mYRT6R7iRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.168.0/23
109.61.121.0/24
IPv6:
2a03:90c0:680::/44
Signature Algorithm: sha256WithRSAEncryption
b1:25:a2:ad:43:30:e6:8a:02:29:65:c8:3b:75:f5:db:bf:af:
b8:29:ba:c5:d6:28:bd:27:27:1b:37:25:54:6e:ea:ff:a2:be:
a4:cf:13:56:97:2a:b8:e1:08:1c:5a:fc:3e:a7:2d:9e:39:9f:
c2:dc:35:18:c2:84:03:f8:55:7a:1d:6e:12:74:8c:40:b9:fb:
db:76:1e:2f:5b:e2:eb:8f:b8:9d:6f:ad:51:f4:85:3e:9d:14:
6e:d5:34:fd:f5:fd:ea:8c:73:c4:da:4d:ec:2f:93:f5:29:7b:
89:92:60:47:55:4a:13:5a:3d:97:db:e3:a9:c0:66:c5:16:aa:
72:14:76:32:52:d6:3b:06:09:11:e2:d8:84:63:1a:88:de:d0:
08:2c:1a:38:ab:1d:74:28:f2:d1:65:ed:db:dd:1b:4c:9a:a5:
89:d0:2f:77:51:eb:8e:c9:fd:ca:9c:a3:6a:e4:f4:0c:53:1b:
07:0b:3e:df:d8:e8:c6:a7:5b:93:3a:83:79:2c:a0:19:88:f8:
a7:da:35:5b:fa:2c:54:07:99:cd:33:99:7b:a3:39:09:86:38:
0e:96:6e:88:9b:c0:6a:c8:93:87:26:cf:01:73:9a:e7:11:f0:
26:2b:06:f8:54:ba:98:4d:00:28:82:47:76:0d:64:9d:00:f0:
d9:3a:54:03
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZXsxQXbjRyQFixDUUHK4fjOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw
MDhhZWMwHhcNMjUwMzMxMTUxNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDkwNzlkMzQ4NmZiODZiNDZkOTBlODdkMjY2MTE0ZmE0N2I4OTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9l6aiRxvTq9BEpZZJtoJ1sAOrSd
aq7revjC76s+2/suRfvFl7jiI9eyk/kkFEuAkBJsWjpI4tOhceJgA4Ib+Xul+DVu
QoTzl/cunyD4L/7DAY3p8R++xsVu4PzPj4XQEHnptuSLK+RUh8WEQGQLywzGTrlR
egtCdlOStsMmfutU+RkOXDqPEGyGFKverBs0Fs+oKdK19fQQKAB6WQBdATFHCZSd
udX7+PpHfH1gVaNbtTv/CrbkcP+xvv/nwWq3CSwxdPGh/nIzeKrb1f/IPwrUxgKy
xu5dBv/12aQUKGpm1tEr23P5Kdlhlll+LjjBev/fR8g3QebFGRn/KwM49QIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFICQedNIb7hrRtkOh9JmEU+ke4kQMB8GA1UdIwQY
MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt
YjA3ZDg0MTZhZTRhLzEvZ0pCNTAwaHZ1R3RHMlE2SDBtWVJUNlI3aVJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh
LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBXXeoAwQA
bT15MA8EAgACMAkDBwQqA5DABoAwDQYJKoZIhvcNAQELBQADggEBALEloq1DMOaK
AillyDt19du/r7gpusXWKL0nJxs3JVRu6v+ivqTPE1aXKrjhCBxa/D6nLZ45n8Lc
NRjChAP4VXodbhJ0jEC5+9t2Hi9b4uuPuJ1vrVH0hT6dFG7VNP31/eqMc8TaTewv
k/Upe4mSYEdVShNaPZfb46nAZsUWqnIUdjJS1jsGCRHi2IRjGoje0AgsGjirHXQo
8tFl7dvdG0yapYnQL3dR647J/cqco2rk9AxTGwcLPt/Y6ManW5M6g3ksoBmI+Kfa
NVv6LFQHmc0zmXujOQmGOA6WboibwGrIk4cmzwFzmucR8CYrBvhUuphNACiCR3YN
ZJ0A8Nk6VAM=
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:00:26 2025 by rpki-client