Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Q-UsTUTJv4T0ofBVd-0ayrdsces.roa
File: Q-UsTUTJv4T0ofBVd-0ayrdsces.roa (raw, json)
Hash identifier: CQGXQe2lbC8kkNHqvkJzf8c1MKM8TrcyhdHfUfKnHyM=
Subject key identifier: 43:E5:2C:4D:44:C9:BF:84:F4:A1:F0:55:77:ED:1A:CA:B7:6C:71:EB
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0194F18964D87B5940D39E6B5C3C01F4BD30
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Q-UsTUTJv4T0ofBVd-0ayrdsces.roa
Signing time: Mon 10 Feb 2025 20:25:00 +0000
ROA not before: Mon 10 Feb 2025 20:25:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60721
IP address blocks: 93.190.13.0/24 maxlen: 24
185.98.61.0/24 maxlen: 24
185.141.34.0/24 maxlen: 24
185.185.232.0/24 maxlen: 24
185.243.182.0/24 maxlen: 24
193.160.142.0/24 maxlen: 24
193.223.104.0/24 maxlen: 24
193.223.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Mar 2025 09:38:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f1:89:64:d8:7b:59:40:d3:9e:6b:5c:3c:01:f4:bd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Feb 10 20:25:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43e52c4d44c9bf84f4a1f05577ed1acab76c71eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:87:b2:c3:69:05:ff:fb:3f:5d:16:6d:6a:3d:
69:21:ad:93:45:ce:89:85:66:bf:1c:cc:cd:e0:57:
e2:59:d9:26:55:34:d5:ec:49:af:4c:f8:c1:5c:dc:
d6:02:8d:68:50:37:a9:36:bc:65:42:7c:43:15:4f:
e0:01:9a:f0:10:f2:55:c8:0e:e7:51:66:1d:c7:e8:
09:1a:57:10:ec:dc:d5:39:46:94:d4:6a:47:e7:c6:
9b:aa:c8:95:54:a6:1d:b3:3d:eb:bb:e7:18:36:1e:
34:36:6f:40:ad:a7:6d:82:c7:82:d7:cb:9f:9d:e7:
b7:0d:a8:8f:29:1d:25:0b:34:83:8a:e9:05:85:cb:
a8:0a:25:66:89:0c:95:df:a2:55:a2:51:8b:95:1d:
f8:22:82:6e:ff:87:30:0d:a9:f6:72:25:31:25:62:
16:30:3a:28:e1:1d:25:84:b2:dc:1f:a9:5a:7b:d8:
7a:3b:29:e5:fc:0d:c4:06:dc:a9:c9:89:4c:7c:c0:
0b:56:6b:85:65:ed:13:67:58:6f:ac:d6:ba:17:7d:
ad:bc:1b:5e:e7:3c:58:39:e1:9c:6d:cc:04:53:d4:
6b:99:46:83:e4:a9:72:87:9d:c6:8c:1e:20:fe:55:
cf:fd:ad:4a:af:ca:8b:28:68:14:e3:5b:34:4e:9c:
47:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E5:2C:4D:44:C9:BF:84:F4:A1:F0:55:77:ED:1A:CA:B7:6C:71:EB
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Q-UsTUTJv4T0ofBVd-0ayrdsces.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.13.0/24
185.98.61.0/24
185.141.34.0/24
185.185.232.0/24
185.243.182.0/24
193.160.142.0/24
193.223.104.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:e9:ab:cd:7c:af:53:5e:e4:05:39:33:9b:16:85:83:0b:a9:
ce:da:13:44:57:a4:25:45:70:f7:e1:f0:e7:37:86:70:22:23:
10:a4:9b:86:b5:16:90:14:32:1a:28:b7:df:7a:75:57:6c:de:
5e:c0:36:b8:08:2a:63:6c:91:89:6f:1b:25:ef:de:1d:8b:67:
5a:e7:c9:34:9d:68:8c:ed:84:86:18:7b:2f:8c:13:a0:7e:2e:
bf:c9:39:15:6a:86:98:ef:49:89:ae:5e:07:d8:f3:63:95:04:
2c:ac:93:f4:b4:38:81:d4:d9:c8:98:7d:77:00:2b:7c:0a:4d:
70:3d:87:df:40:b1:0e:33:6e:c0:42:3d:22:25:ca:c2:f2:b2:
17:33:ad:71:83:a2:1a:c1:88:67:d8:2b:95:9c:00:41:83:9f:
d8:b1:2d:8a:ad:0e:44:a3:22:f1:0e:7a:24:03:3b:07:9e:83:
38:a7:4e:ba:e1:c4:43:d4:86:82:ca:6b:22:47:a3:3b:c1:96:
cd:80:17:83:56:ac:b6:a5:a8:d3:93:15:25:e5:1b:6a:c8:9b:
03:fc:08:6b:a8:2a:64:07:c9:54:24:c4:79:ee:e3:34:44:f0:
74:74:2d:e5:8f:5c:37:e1:c2:d9:ea:88:2d:5a:e7:5b:56:68:
17:b1:16:16
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZTxiWTYe1lA055rXDwB9L0wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjUwMjEwMjAyNTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2U1MmM0ZDQ0YzliZjg0ZjRhMWYwNTU3N2VkMWFjYWI3NmM3MWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIeyw2kF//s/XRZtaj1pIa2TRc6J
hWa/HMzN4FfiWdkmVTTV7EmvTPjBXNzWAo1oUDepNrxlQnxDFU/gAZrwEPJVyA7n
UWYdx+gJGlcQ7NzVOUaU1GpH58abqsiVVKYdsz3ru+cYNh40Nm9AradtgseC18uf
nee3DaiPKR0lCzSDiukFhcuoCiVmiQyV36JVolGLlR34IoJu/4cwDan2ciUxJWIW
MDoo4R0lhLLcH6lae9h6Oynl/A3EBtypyYlMfMALVmuFZe0TZ1hvrNa6F32tvBte
5zxYOeGcbcwEU9RrmUaD5Klyh53GjB4g/lXP/a1Kr8qLKGgU41s0TpxHqwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFEPlLE1Eyb+E9KHwVXftGsq3bHHrMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvUS1Vc1RVVEp2NFQwb2ZCVmQtMGF5cmRzY2VzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAXb4NAwQA
uWI9AwQAuY0iAwQAubnoAwQAufO2AwQAwaCOAwQBwd9oMA0GCSqGSIb3DQEBCwUA
A4IBAQCc6avNfK9TXuQFOTObFoWDC6nO2hNEV6QlRXD34fDnN4ZwIiMQpJuGtRaQ
FDIaKLffenVXbN5ewDa4CCpjbJGJbxsl794di2da58k0nWiM7YSGGHsvjBOgfi6/
yTkVaoaY70mJrl4H2PNjlQQsrJP0tDiB1NnImH13ACt8Ck1wPYffQLEOM27AQj0i
JcrC8rIXM61xg6IawYhn2CuVnABBg5/YsS2KrQ5EoyLxDnokAzsHnoM4p0664cRD
1IaCymsiR6M7wZbNgBeDVqy2pajTkxUl5RtqyJsD/AhrqCpkB8lUJMR57uM0RPB0
dC3lj1w34cLZ6ogtWudbVmgXsRYW
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:38 2025 by rpki-client