Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/q00u-1xBr1huiLkGx5bSONGaH4I.roa
File: q00u-1xBr1huiLkGx5bSONGaH4I.roa (raw, json)
Hash identifier: w6nZS1tEPqV7ww1LkH46ZmfK8rLbu+AF/j7P+PIOwR0=
Subject key identifier: AB:4D:2E:FB:5C:41:AF:58:6E:88:B9:06:C7:96:D2:38:D1:9A:1F:82
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0196D79E6CF11FC8579D190744B810986D7C
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/q00u-1xBr1huiLkGx5bSONGaH4I.roa
Signing time: Fri 16 May 2025 05:43:26 +0000
ROA not before: Fri 16 May 2025 05:43:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 134.222.48.0/22 maxlen: 24
134.222.60.0/22 maxlen: 24
134.222.72.0/22 maxlen: 24
134.222.100.0/22 maxlen: 24
134.222.156.0/22 maxlen: 24
134.222.172.0/22 maxlen: 24
134.222.196.0/22 maxlen: 24
134.222.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 May 2025 07:45:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:9e:6c:f1:1f:c8:57:9d:19:07:44:b8:10:98:6d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: May 16 05:43:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab4d2efb5c41af586e88b906c796d238d19a1f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cc:f6:d7:9e:a5:22:aa:71:93:4c:56:50:6a:
07:6c:6b:3a:90:20:87:09:78:c3:7c:9c:60:ff:ac:
c9:32:e8:c3:02:ff:2a:d9:4b:7f:56:35:80:64:88:
16:f7:bd:8b:c1:8e:2a:7e:08:a0:8b:70:be:1a:9d:
ac:4a:17:6b:be:a4:db:0d:44:11:be:62:3b:9b:16:
5f:01:94:eb:24:33:41:11:fe:d1:26:ac:8f:b4:e2:
0d:fa:88:c8:db:ac:38:37:16:26:15:b0:f9:00:6b:
7a:93:24:f8:79:38:6a:24:a0:e7:c9:ac:0e:a8:6e:
3d:84:72:1c:ca:4d:fd:e0:70:05:f1:b9:cd:38:cd:
dd:50:36:d9:88:0b:da:48:c6:64:04:3b:66:07:90:
11:50:cc:75:4d:f9:03:05:d9:9b:ee:ee:1b:c7:03:
3c:f1:69:4a:e0:2e:aa:85:6d:d9:3d:ca:96:70:89:
46:39:84:9d:fe:a3:bd:24:be:65:9a:fd:8f:9d:23:
85:59:14:a9:df:88:88:83:42:64:f6:35:13:52:e1:
29:02:2e:70:5c:3b:68:ca:43:8d:89:6b:13:eb:de:
8b:84:66:16:e3:2b:66:db:97:e4:6e:59:80:e3:e5:
34:a5:81:f9:2e:6a:7d:dc:66:a9:da:72:bf:06:c8:
35:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4D:2E:FB:5C:41:AF:58:6E:88:B9:06:C7:96:D2:38:D1:9A:1F:82
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/q00u-1xBr1huiLkGx5bSONGaH4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.222.48.0/22
134.222.60.0/22
134.222.72.0/22
134.222.100.0/22
134.222.156.0/22
134.222.172.0/22
134.222.196.0/22
134.222.232.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:ee:49:96:3d:90:94:69:f6:09:79:ac:8c:77:40:5f:de:62:
1d:cd:2f:e3:54:53:16:5c:b0:24:d6:61:da:f4:21:e4:a4:d0:
0d:76:b8:18:29:92:ca:55:1e:59:fa:33:19:ef:a1:43:05:6f:
44:d1:fa:b8:2f:4f:e8:80:84:bb:43:f0:97:3a:28:7c:2f:c5:
dd:ae:08:ef:d4:53:0e:54:9d:fb:63:ce:47:54:d8:eb:4b:f4:
52:71:3e:96:72:c5:71:b8:d8:6c:e6:ca:a6:95:14:94:a3:3d:
a8:7d:44:92:b1:db:ea:a5:85:c6:1d:5d:26:13:a6:f8:e8:96:
db:b2:bd:12:08:0e:6f:dc:0b:3a:39:85:8f:9d:b5:74:dd:9c:
0e:8d:48:09:10:50:8e:71:1d:85:57:04:61:dc:54:72:1f:0f:
b8:c7:58:bf:a7:3b:db:ed:b5:0a:c6:06:13:0e:bd:34:6a:05:
7d:89:8d:e7:0b:c1:25:b7:dd:35:3a:32:dd:a4:d8:0a:8f:7e:
27:cd:94:91:f6:1a:92:29:b5:29:20:bc:ff:61:77:4b:5c:cd:
c9:2c:eb:1d:00:2c:32:a5:70:09:47:16:54:cb:a0:db:bc:ca:
16:8a:65:4d:34:a3:a4:77:49:08:f2:d4:ee:93:d9:be:11:a4:
44:d6:1b:49
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZbXnmzxH8hXnRkHRLgQmG18MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjUwNTE2MDU0MzI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjRkMmVmYjVjNDFhZjU4NmU4OGI5MDZjNzk2ZDIzOGQxOWExZjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucz2156lIqpxk0xWUGoHbGs6kCCH
CXjDfJxg/6zJMujDAv8q2Ut/VjWAZIgW972LwY4qfgigi3C+Gp2sShdrvqTbDUQR
vmI7mxZfAZTrJDNBEf7RJqyPtOIN+ojI26w4NxYmFbD5AGt6kyT4eThqJKDnyawO
qG49hHIcyk394HAF8bnNOM3dUDbZiAvaSMZkBDtmB5ARUMx1TfkDBdmb7u4bxwM8
8WlK4C6qhW3ZPcqWcIlGOYSd/qO9JL5lmv2PnSOFWRSp34iIg0Jk9jUTUuEpAi5w
XDtoykONiWsT696LhGYW4ytm25fkblmA4+U0pYH5Lmp93Gap2nK/Bsg1mwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFKtNLvtcQa9Yboi5BseW0jjRmh+CMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvcTAwdS0xeEJyMWh1aUxrR3g1YlNPTkdhSDRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCht4wAwQC
ht48AwQCht5IAwQCht5kAwQCht6cAwQCht6sAwQCht7EAwQCht7oMA0GCSqGSIb3
DQEBCwUAA4IBAQAO7kmWPZCUafYJeayMd0Bf3mIdzS/jVFMWXLAk1mHa9CHkpNAN
drgYKZLKVR5Z+jMZ76FDBW9E0fq4L0/ogIS7Q/CXOih8L8Xdrgjv1FMOVJ37Y85H
VNjrS/RScT6WcsVxuNhs5sqmlRSUoz2ofUSSsdvqpYXGHV0mE6b46Jbbsr0SCA5v
3As6OYWPnbV03ZwOjUgJEFCOcR2FVwRh3FRyHw+4x1i/pzvb7bUKxgYTDr00agV9
iY3nC8Elt901OjLdpNgKj34nzZSR9hqSKbUpILz/YXdLXM3JLOsdACwypXAJRxZU
y6DbvMoWimVNNKOkd0kI8tTuk9m+EaRE1htJ
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:27:29 2025 by rpki-client