Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/frv9qA72eHXhhp4DALtGXr2kMaE.roa
File: frv9qA72eHXhhp4DALtGXr2kMaE.roa (raw, json)
Hash identifier: qIp2y0ZJDwvZrZUm+t67J7jKuAFgFP3Rmijk6du5BvQ=
Subject key identifier: 7E:BB:FD:A8:0E:F6:78:75:E1:86:9E:03:00:BB:46:5E:BD:A4:31:A1
Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial: 01936042C9891BB7DA654DA0ABC3B4ADC73C
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/frv9qA72eHXhhp4DALtGXr2kMaE.roa
Signing time: Sun 24 Nov 2024 22:20:09 +0000
ROA not before: Sun 24 Nov 2024 22:20:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35042
IP address blocks: 88.214.25.0/24 maxlen: 24
91.228.101.0/24 maxlen: 24
185.55.240.0/22 maxlen: 22
193.24.208.0/22 maxlen: 22
194.24.160.0/24 maxlen: 24
2a00:1910::/29 maxlen: 29
2a00:1911::/32 maxlen: 32
2a09:8700::/32 maxlen: 32
2a12:5e41::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 24 Nov 2024 23:28:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:60:42:c9:89:1b:b7:da:65:4d:a0:ab:c3:b4:ad:c7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Validity
Not Before: Nov 24 22:20:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ebbfda80ef67875e1869e0300bb465ebda431a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:34:d0:fc:a6:a6:a9:a3:31:9a:5a:aa:0d:0e:
f1:08:30:1d:48:15:fd:37:05:fb:b3:15:70:09:47:
be:12:85:68:05:67:ef:ba:5c:a1:c4:63:a8:7e:4b:
08:bb:41:1b:48:17:61:89:cb:38:3b:23:3d:7c:2d:
dd:9a:c2:b1:d8:85:e1:2e:07:25:38:8f:b4:8a:d8:
e6:e4:97:8e:68:11:3e:54:03:9b:1d:73:ac:d7:10:
93:7e:68:78:4e:f5:bd:45:2e:ae:78:7b:b6:45:e0:
5c:79:14:62:69:0c:ca:f5:ba:9e:69:83:6d:9e:97:
07:d9:74:02:df:50:f6:7d:5e:a0:a8:87:30:47:fc:
92:a3:10:59:72:10:6c:12:51:16:a5:6e:29:de:9a:
44:8d:87:5b:58:3a:d0:27:40:6c:67:4a:59:f7:1a:
6e:76:80:65:fd:de:81:85:ed:00:c7:6c:a9:cb:ce:
23:f3:08:c1:1c:4d:56:53:ba:93:b4:39:2b:45:13:
af:b3:5a:42:92:99:0d:14:2f:dc:de:3b:39:39:35:
5b:9d:ca:54:6c:fa:df:1e:dc:03:3d:75:02:9b:ce:
d0:ba:27:ff:a7:65:2e:3a:66:9f:51:1f:e1:44:6e:
3d:c8:70:bc:de:9a:97:fa:4f:5e:94:4a:0d:fd:f9:
3c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BB:FD:A8:0E:F6:78:75:E1:86:9E:03:00:BB:46:5E:BD:A4:31:A1
X509v3 Authority Key Identifier:
keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/frv9qA72eHXhhp4DALtGXr2kMaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.25.0/24
91.228.101.0/24
185.55.240.0/22
193.24.208.0/22
194.24.160.0/24
IPv6:
2a00:1910::/29
2a09:8700::/32
2a12:5e41::/32
Signature Algorithm: sha256WithRSAEncryption
af:1d:86:b1:ad:94:64:a7:10:f1:c0:95:d6:e1:58:f0:7c:09:
20:08:3e:54:98:db:49:6d:c6:e0:31:e4:33:6f:4a:ef:a1:0a:
1d:28:ce:b3:a6:57:77:28:43:74:53:ae:7e:2f:b8:ef:f9:41:
10:26:f7:ed:d5:e5:9e:8e:76:d7:e1:70:c6:7c:8f:42:30:d6:
c9:f7:f2:e4:90:ca:93:eb:51:0a:07:c6:6e:79:fd:43:79:56:
99:7a:9b:30:71:bc:7e:9a:14:a9:a2:c3:7a:6a:14:49:7f:1c:
b5:f7:41:86:f3:73:03:7f:de:63:2c:84:c5:23:03:6e:cd:2f:
48:6e:5b:71:ee:72:cc:56:49:0f:8d:76:6d:11:50:94:ee:32:
b5:1a:f5:6c:73:34:a4:ad:02:d7:74:d2:70:87:48:85:35:d7:
1a:57:4c:a2:25:5d:00:83:3e:c0:72:d1:16:be:14:5a:90:26:
ce:b3:af:b2:f4:18:79:c3:e5:c3:5e:79:c9:3e:9b:42:be:a4:
42:48:c1:e9:4a:53:ba:00:d2:c5:26:06:b5:76:ce:60:eb:a3:
96:d5:19:b2:87:e9:de:30:05:59:d1:4e:66:e8:87:0b:22:04:
55:91:d8:e6:34:0b:0a:77:5d:42:58:06:b6:43:e9:31:52:63:
b6:cc:71:38
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAZNgQsmJG7faZU2gq8O0rcc8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZDlhOTI4MmM5ZDI1NDdjNTY2NjM0ZjNiYWNjY2JjZjI1
ODg4MjcwHhcNMjQxMTI0MjIyMDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWJiZmRhODBlZjY3ODc1ZTE4NjllMDMwMGJiNDY1ZWJkYTQzMWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTTQ/KamqaMxmlqqDQ7xCDAdSBX9
NwX7sxVwCUe+EoVoBWfvulyhxGOofksIu0EbSBdhics4OyM9fC3dmsKx2IXhLgcl
OI+0itjm5JeOaBE+VAObHXOs1xCTfmh4TvW9RS6ueHu2ReBceRRiaQzK9bqeaYNt
npcH2XQC31D2fV6gqIcwR/ySoxBZchBsElEWpW4p3ppEjYdbWDrQJ0BsZ0pZ9xpu
doBl/d6Bhe0Ax2ypy84j8wjBHE1WU7qTtDkrRROvs1pCkpkNFC/c3js5OTVbncpU
bPrfHtwDPXUCm87Quif/p2UuOmafUR/hRG49yHC83pqX+k9elEoN/fk8FwIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFH67/agO9nh14YaeAwC7Rl69pDGhMB8GA1UdIwQY
MBaAFPXZqSgsnSVHxWZjTzuszLzyWIgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjct
OGNmNDFjYWZkY2UyLzEvZnJ2OXFBNzJlSFhoaHA0REFMdEdYcjJrTWFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjctOGNmNDFjYWZkY2Uy
LzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAkBAIAATAeAwQAWNYZAwQA
W+RlAwQCuTfwAwQCwRjQAwQAwhigMBsEAgACMBUDBQMqABkQAwUAKgmHAAMFACoS
XkEwDQYJKoZIhvcNAQELBQADggEBAK8dhrGtlGSnEPHAldbhWPB8CSAIPlSY20lt
xuAx5DNvSu+hCh0ozrOmV3coQ3RTrn4vuO/5QRAm9+3V5Z6OdtfhcMZ8j0Iw1sn3
8uSQypPrUQoHxm55/UN5Vpl6mzBxvH6aFKmiw3pqFEl/HLX3QYbzcwN/3mMshMUj
A27NL0huW3HucsxWSQ+Ndm0RUJTuMrUa9WxzNKStAtd00nCHSIU11xpXTKIlXQCD
PsBy0Ra+FFqQJs6zr7L0GHnD5cNeeck+m0K+pEJIwelKU7oA0sUmBrV2zmDro5bV
GbKH6d4wBVnRTmbohwsiBFWR2OY0Cwp3XUJYBrZD6TFSY7bMcTg=
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:17:37 2025 by rpki-client