Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/93WQfzpeiZi8DO9nzTpd3Ez8ZQ0.roa
File: 93WQfzpeiZi8DO9nzTpd3Ez8ZQ0.roa (raw, json)
Hash identifier: BfvTMUM9FxxRnOmoSlmy94ryvgmM4dFYucw7mQJ5cxA=
Subject key identifier: F7:75:90:7F:3A:5E:89:98:BC:0C:EF:67:CD:3A:5D:DC:4C:FC:65:0D
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019681F57B538E479320C1E44C73B2FBD7A8
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/93WQfzpeiZi8DO9nzTpd3Ez8ZQ0.roa
Signing time: Tue 29 Apr 2025 14:31:10 +0000
ROA not before: Tue 29 Apr 2025 14:31:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 82.115.10.0/23 maxlen: 24
89.251.10.0/24 maxlen: 24
188.253.104.0/22 maxlen: 24
188.253.108.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Apr 2025 19:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:f5:7b:53:8e:47:93:20:c1:e4:4c:73:b2:fb:d7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Apr 29 14:31:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f775907f3a5e8998bc0cef67cd3a5ddc4cfc650d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:17:4b:62:15:4b:10:72:58:cf:73:cb:f2:de:
df:4d:33:d8:4a:01:a0:81:80:cd:d9:d4:dc:8a:a5:
02:e4:0b:be:0c:44:46:bc:71:6a:06:8c:e7:6f:a6:
07:c4:bc:f6:6f:b8:a4:6b:c3:64:85:f1:76:61:27:
d5:c9:f1:8e:37:48:df:4f:f7:8e:da:b3:46:c0:35:
02:4a:0d:46:8e:ba:fb:c5:7d:b3:c9:65:3b:39:ca:
26:a9:cc:95:f6:04:c4:a4:56:c7:df:da:16:f3:8b:
5a:47:73:78:3a:18:82:28:fa:c4:be:5d:40:4c:91:
93:f8:cd:a7:a6:9c:89:ab:60:53:3b:a7:95:f7:ed:
c2:33:8d:ba:12:97:ae:ab:dc:3b:bb:77:93:67:7f:
27:5e:99:7c:5d:96:c4:1a:ad:16:26:ca:ae:c5:cf:
5f:dd:5c:ca:3d:c8:5a:ff:08:bf:36:38:06:9f:cc:
2e:4f:1a:f8:ed:ea:f7:13:e6:35:d5:25:da:59:34:
01:c5:47:36:8b:dd:80:b9:a1:94:27:f3:4f:0e:47:
cf:aa:8f:06:26:7a:44:af:c2:ff:fe:ac:1a:62:99:
97:30:b6:87:63:0f:8d:be:e0:66:0f:7a:f6:6e:21:
86:89:58:36:46:f1:be:c9:7f:92:fe:f6:aa:f1:74:
73:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:75:90:7F:3A:5E:89:98:BC:0C:EF:67:CD:3A:5D:DC:4C:FC:65:0D
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/93WQfzpeiZi8DO9nzTpd3Ez8ZQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.10.0/23
89.251.10.0/24
188.253.104.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:26:eb:0e:ce:89:c8:34:e6:4a:a4:78:e6:44:40:d8:84:5a:
41:a5:50:fe:e8:4c:c8:89:b6:e4:0a:31:26:de:5d:3a:49:c5:
59:bb:6c:65:b7:1a:38:e6:a9:2c:71:b2:67:6f:eb:c7:6c:b3:
89:11:07:2d:02:62:1a:2d:65:c7:8b:ad:9c:99:c3:dd:af:cd:
0d:e0:07:01:d3:29:22:7b:37:76:5c:33:3d:f8:79:ad:d2:0d:
34:76:c0:c3:b2:14:b7:2a:96:89:90:8b:4b:58:a7:84:df:77:
49:61:dc:eb:fe:ee:3e:18:7f:3a:be:3d:c4:7f:18:12:22:4f:
cf:bb:43:47:8b:26:96:93:b5:90:d2:c9:df:a9:f0:c9:77:0b:
8d:a8:54:58:f4:c7:c4:db:6b:74:4d:43:af:99:5d:db:17:c2:
cf:29:c6:b9:ee:45:a8:a0:96:2c:d4:e6:7b:6b:07:bc:f9:b1:
24:7d:de:53:0f:ff:73:af:15:37:33:35:df:16:49:f2:30:cf:
9e:b7:83:e5:2c:3a:d3:97:4c:ef:6e:d9:4d:60:38:18:fb:67:
9c:be:00:b3:31:94:be:d7:e1:bc:74:06:4b:9e:e5:3b:2a:42:
49:6c:e0:b0:2c:b5:16:49:a6:6a:a3:4f:b3:52:30:e6:ef:5e:
f8:eb:3f:73
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZaB9XtTjkeTIMHkTHOy+9eoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjUwNDI5MTQzMTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzc1OTA3ZjNhNWU4OTk4YmMwY2VmNjdjZDNhNWRkYzRjZmM2NTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBdLYhVLEHJYz3PL8t7fTTPYSgGg
gYDN2dTciqUC5Au+DERGvHFqBoznb6YHxLz2b7ika8NkhfF2YSfVyfGON0jfT/eO
2rNGwDUCSg1Gjrr7xX2zyWU7OcomqcyV9gTEpFbH39oW84taR3N4OhiCKPrEvl1A
TJGT+M2nppyJq2BTO6eV9+3CM426Epeuq9w7u3eTZ38nXpl8XZbEGq0WJsquxc9f
3VzKPcha/wi/NjgGn8wuTxr47er3E+Y11SXaWTQBxUc2i92AuaGUJ/NPDkfPqo8G
JnpEr8L//qwaYpmXMLaHYw+NvuBmD3r2biGGiVg2RvG+yX+S/vaq8XRzYwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPd1kH86XomYvAzvZ806XdxM/GUNMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvOTNXUWZ6cGVpWmk4RE85bnpUcGQzRXo4WlEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBUnMKAwQA
WfsKAwQDvP1oMA0GCSqGSIb3DQEBCwUAA4IBAQAaJusOzonINOZKpHjmREDYhFpB
pVD+6EzIibbkCjEm3l06ScVZu2xltxo45qkscbJnb+vHbLOJEQctAmIaLWXHi62c
mcPdr80N4AcB0ykiezd2XDM9+Hmt0g00dsDDshS3KpaJkItLWKeE33dJYdzr/u4+
GH86vj3EfxgSIk/Pu0NHiyaWk7WQ0snfqfDJdwuNqFRY9MfE22t0TUOvmV3bF8LP
Kca57kWooJYs1OZ7awe8+bEkfd5TD/9zrxU3MzXfFknyMM+et4PlLDrTl0zvbtlN
YDgY+2ecvgCzMZS+1+G8dAZLnuU7KkJJbOCwLLUWSaZqo0+zUjDm71746z9z
-----END CERTIFICATE-----
Generated at Fri Jun 13 10:32:38 2025 by rpki-client