Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/c76tftQpsSs3PMIjBua2KF2nFtQ.roa
File: c76tftQpsSs3PMIjBua2KF2nFtQ.roa (raw, json)
Hash identifier: 8pgm5n9Fw0+2YGPRpcQO1fG7cPhiYBMiRRmI+wpFKCA=
Subject key identifier: 73:BE:AD:7E:D4:29:B1:2B:37:3C:C2:23:06:E6:B6:28:5D:A7:16:D4
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01954BCE1D32F411BFF6055A168CBCAF9E71
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/c76tftQpsSs3PMIjBua2KF2nFtQ.roa
Signing time: Fri 28 Feb 2025 09:05:53 +0000
ROA not before: Fri 28 Feb 2025 09:05:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 84.51.232.0/24 maxlen: 24
92.51.234.0/24 maxlen: 24
92.51.235.0/24 maxlen: 24
92.51.255.0/24 maxlen: 24
103.210.196.0/24 maxlen: 24
107.150.166.0/24 maxlen: 24
185.161.111.0/24 maxlen: 24
192.140.220.0/24 maxlen: 24
192.140.221.0/24 maxlen: 24
203.188.165.0/24 maxlen: 24
203.188.181.0/24 maxlen: 24
213.254.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 13:18:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4b:ce:1d:32:f4:11:bf:f6:05:5a:16:8c:bc:af:9e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Feb 28 09:05:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73bead7ed429b12b373cc22306e6b6285da716d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c2:da:58:f7:8f:b2:87:a2:0d:c8:f7:dc:48:
ab:80:33:f7:9f:48:9d:2a:c4:0e:34:fb:c0:58:2b:
e1:4e:ed:af:8f:a5:82:85:e4:56:45:d9:e6:ce:f9:
13:85:fc:11:a1:b8:d4:cf:8b:ab:ab:50:9e:98:55:
73:00:13:ae:58:a2:f5:db:01:e4:46:50:df:f5:be:
c1:b3:4a:53:fe:b0:91:14:8e:50:b6:b2:7e:89:46:
88:9c:ab:be:bb:dd:d1:96:70:d4:b0:e2:24:c7:89:
69:68:82:32:d4:4b:9f:20:a2:d9:46:88:d1:fb:0b:
3e:ed:c6:29:66:bd:54:ac:b7:e6:30:50:1c:24:aa:
2a:f3:44:c9:db:d9:37:0f:12:44:0c:92:26:ca:90:
25:6e:0c:cc:a2:4a:b5:b7:b4:15:cb:f9:46:2c:d0:
a7:a0:c9:97:8e:16:9f:38:0b:a0:1c:bb:bd:e4:fe:
43:b4:b3:0a:5b:9d:9d:7f:b1:cd:b6:99:00:21:77:
95:12:16:ac:c5:e6:09:11:d0:34:32:80:61:a0:19:
e2:00:ac:4f:cf:1b:c8:9c:00:d6:f0:5f:9c:0d:df:
60:1d:f2:ec:90:6f:d9:09:39:05:f4:d7:64:f1:43:
be:2b:f6:34:dd:7b:d2:82:fe:c8:92:15:87:ab:81:
be:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BE:AD:7E:D4:29:B1:2B:37:3C:C2:23:06:E6:B6:28:5D:A7:16:D4
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/c76tftQpsSs3PMIjBua2KF2nFtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.51.232.0/24
92.51.234.0/23
92.51.255.0/24
103.210.196.0/24
107.150.166.0/24
185.161.111.0/24
192.140.220.0/23
203.188.165.0/24
203.188.181.0/24
213.254.160.0/24
Signature Algorithm: sha256WithRSAEncryption
53:69:88:4b:ea:bf:f2:e9:2b:14:10:22:1e:64:8a:05:3a:d4:
8f:cc:40:a3:f7:fb:53:0a:63:7a:22:0d:2e:3e:78:3f:da:52:
95:4c:ca:47:fd:f7:75:75:ce:9c:cf:cc:87:18:ab:14:84:15:
f9:0a:3b:dc:6a:af:da:d0:02:4e:39:5a:8a:6d:81:0b:d4:2e:
8d:6f:80:85:3d:36:92:0c:98:57:3d:6c:fd:a3:9d:ed:e4:12:
9d:e9:6e:6a:e1:2c:67:c0:2b:82:d9:eb:f7:e6:83:21:6d:4b:
a9:70:3c:4f:69:af:de:ef:d4:c1:42:55:17:69:91:de:97:a9:
4a:11:78:59:28:38:71:41:d8:38:14:cd:aa:51:32:71:fc:f7:
36:ff:83:c2:4b:1d:32:1a:f1:eb:4c:1f:6f:3d:f1:50:4c:44:
e2:1d:1d:77:1f:94:5e:27:e4:86:1e:84:cc:11:6f:f0:f6:c3:
d6:01:4f:f3:47:64:ef:f6:40:27:33:2c:ef:70:91:19:88:7c:
f6:c2:70:a2:26:6e:20:bb:4a:a9:53:1f:5e:0a:45:aa:c3:7c:
7c:c4:c8:85:c6:6b:d3:14:da:17:ca:79:e9:c3:b0:60:24:7e:
22:9c:ba:58:ab:ac:bb:4a:95:cb:a1:e8:b6:06:8b:a9:fe:92:
3f:5d:0c:b2
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZVLzh0y9BG/9gVaFoy8r55xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjUwMjI4MDkwNTUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2JlYWQ3ZWQ0MjliMTJiMzczY2MyMjMwNmU2YjYyODVkYTcxNmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncLaWPePsoeiDcj33EirgDP3n0id
KsQONPvAWCvhTu2vj6WCheRWRdnmzvkThfwRobjUz4urq1CemFVzABOuWKL12wHk
RlDf9b7Bs0pT/rCRFI5QtrJ+iUaInKu+u93RlnDUsOIkx4lpaIIy1EufIKLZRojR
+ws+7cYpZr1UrLfmMFAcJKoq80TJ29k3DxJEDJImypAlbgzMokq1t7QVy/lGLNCn
oMmXjhafOAugHLu95P5DtLMKW52df7HNtpkAIXeVEhasxeYJEdA0MoBhoBniAKxP
zxvInADW8F+cDd9gHfLskG/ZCTkF9Ndk8UO+K/Y03XvSgv7IkhWHq4G+tQIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFHO+rX7UKbErNzzCIwbmtihdpxbUMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvYzc2dGZ0UXBzU3MzUE1JakJ1YTJLRjJuRnRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAVDPoAwQB
XDPqAwQAXDP/AwQAZ9LEAwQAa5amAwQAuaFvAwQBwIzcAwQAy7ylAwQAy7y1AwQA
1f6gMA0GCSqGSIb3DQEBCwUAA4IBAQBTaYhL6r/y6SsUECIeZIoFOtSPzECj9/tT
CmN6Ig0uPng/2lKVTMpH/fd1dc6cz8yHGKsUhBX5Cjvcaq/a0AJOOVqKbYEL1C6N
b4CFPTaSDJhXPWz9o53t5BKd6W5q4SxnwCuC2ev35oMhbUupcDxPaa/e79TBQlUX
aZHel6lKEXhZKDhxQdg4FM2qUTJx/Pc2/4PCSx0yGvHrTB9vPfFQTETiHR13H5Re
J+SGHoTMEW/w9sPWAU/zR2Tv9kAnMyzvcJEZiHz2wnCiJm4gu0qpUx9eCkWqw3x8
xMiFxmvTFNoXynnpw7BgJH4inLpYq6y7SpXLoei2Boup/pI/XQyy
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:36:24 2025 by rpki-client