Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/tLXf3pU6hvLKobPnaTa1fs1XVGA.roa
File: tLXf3pU6hvLKobPnaTa1fs1XVGA.roa (raw, json)
Hash identifier: QzoUnaLO8JVBvr4kfU5hACoZ32+sQkoZ7bIWUxRO4q8=
Subject key identifier: B4:B5:DF:DE:95:3A:86:F2:CA:A1:B3:E7:69:36:B5:7E:CD:57:54:60
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0196C0410B4CFE5CD06B4FA22399C3056442
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/tLXf3pU6hvLKobPnaTa1fs1XVGA.roa
Signing time: Sun 11 May 2025 16:50:10 +0000
ROA not before: Sun 11 May 2025 16:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 62.171.240.0/22 maxlen: 24
194.238.78.0/24 maxlen: 24
194.238.79.0/24 maxlen: 24
213.18.196.0/22 maxlen: 24
213.18.208.0/22 maxlen: 24
213.18.220.0/22 maxlen: 24
213.18.245.0/24 maxlen: 24
217.177.0.0/21 maxlen: 24
217.177.35.0/24 maxlen: 24
217.177.44.0/22 maxlen: 24
217.177.48.0/22 maxlen: 24
217.177.52.0/22 maxlen: 24
217.179.56.0/22 maxlen: 24
217.179.72.0/22 maxlen: 24
217.179.80.0/22 maxlen: 24
217.179.124.0/22 maxlen: 24
217.179.220.0/22 maxlen: 24
217.180.12.0/24 maxlen: 24
217.180.13.0/24 maxlen: 24
217.180.14.0/24 maxlen: 24
217.180.20.0/24 maxlen: 24
217.180.22.0/23 maxlen: 24
217.180.38.0/24 maxlen: 24
217.180.45.0/24 maxlen: 24
217.180.46.0/24 maxlen: 24
217.180.59.0/24 maxlen: 24
217.180.61.0/24 maxlen: 24
217.181.80.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 May 2025 07:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:41:0b:4c:fe:5c:d0:6b:4f:a2:23:99:c3:05:64:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: May 11 16:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4b5dfde953a86f2caa1b3e76936b57ecd575460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:39:78:21:95:64:57:99:d5:e0:60:47:18:
c3:1f:af:75:1a:73:2f:c1:b4:da:2b:6e:d9:74:2e:
27:51:3c:37:08:ea:d3:c2:9f:48:ef:05:3c:4f:11:
ee:8f:ff:4f:91:bd:9d:c3:7b:89:c8:60:c5:c9:a1:
02:ff:0f:46:de:f1:b8:b2:bc:20:dd:95:27:45:d4:
0a:b2:a6:62:0b:69:97:bb:a1:13:55:12:59:2a:82:
b9:74:05:38:cd:73:b8:b1:ae:a7:d4:57:bf:19:f1:
03:0d:55:cf:68:26:66:c4:a3:30:ca:d3:0f:27:f3:
f7:9b:ca:70:d5:c9:79:fa:79:fd:b4:78:8f:91:49:
5d:bf:0e:aa:d9:95:72:af:62:23:55:45:dd:10:56:
f5:ed:4d:0e:e9:fc:56:72:d2:c3:c4:8d:9d:4a:68:
58:f5:50:be:3c:44:ca:98:7f:85:65:73:3d:6c:9e:
9d:a0:7d:61:47:f4:50:8b:4d:62:de:4c:0a:83:fb:
a3:f4:55:ac:32:64:56:d1:ee:95:ea:83:c7:b0:7a:
ab:f1:e4:e7:63:23:b2:95:ec:d2:d5:93:0d:45:3d:
93:31:dd:36:65:2a:6b:97:e8:b6:a3:2f:89:aa:37:
f6:65:75:9e:6c:4e:f7:ad:c9:a9:46:e6:c1:b9:d0:
a2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B5:DF:DE:95:3A:86:F2:CA:A1:B3:E7:69:36:B5:7E:CD:57:54:60
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/tLXf3pU6hvLKobPnaTa1fs1XVGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.240.0/22
194.238.78.0/23
213.18.196.0/22
213.18.208.0/22
213.18.220.0/22
213.18.245.0/24
217.177.0.0/21
217.177.35.0/24
217.177.44.0-217.177.55.255
217.179.56.0/22
217.179.72.0/22
217.179.80.0/22
217.179.124.0/22
217.179.220.0/22
217.180.12.0-217.180.14.255
217.180.20.0/24
217.180.22.0/23
217.180.38.0/24
217.180.45.0-217.180.46.255
217.180.59.0/24
217.180.61.0/24
217.181.80.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:0e:bd:d6:70:b2:e3:f7:13:a6:3e:38:6c:a8:79:89:b2:04:
41:85:5a:eb:00:8e:d7:c9:f7:37:ae:5a:3e:e4:d5:8f:7b:11:
41:ec:b0:1f:8e:4d:08:5c:e0:4e:d2:7d:93:43:33:96:07:87:
20:e7:97:0b:79:19:13:57:ad:20:97:2c:14:a1:a3:e2:58:7f:
cc:31:b8:c2:2f:3b:b1:5a:0f:96:38:2b:f5:98:e0:47:41:ca:
1f:95:0d:76:98:55:18:f8:aa:fa:3c:df:e7:48:2d:b6:b8:5e:
5c:1b:32:19:a7:70:dc:05:d2:c3:e5:69:42:78:67:34:64:df:
19:b0:78:6f:0e:7f:63:8d:a1:66:d1:ac:5d:92:a6:1d:b5:ed:
8a:55:db:60:83:79:00:a1:9d:5d:28:de:c8:28:5f:17:08:b2:
ba:ce:21:5b:0b:46:19:27:90:e6:01:b0:89:ad:5b:29:0c:8c:
d9:05:14:42:6c:4d:72:d8:e4:b2:1f:59:69:fa:12:e4:33:48:
83:39:79:fa:42:56:49:34:46:f7:a5:f9:f6:d0:ff:77:01:ea:
8e:a1:40:61:25:4e:3f:56:33:01:99:0f:c7:0d:fe:8e:85:58:
ed:da:51:87:1b:5c:63:43:17:2e:b6:2b:f3:dc:0f:e8:83:bf:
7f:49:4a:e0
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgISAZbAQQtM/lzQa0+iI5nDBWRCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy
ZGE3NGQwHhcNMjUwNTExMTY1MDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGI1ZGZkZTk1M2E4NmYyY2FhMWIzZTc2OTM2YjU3ZWNkNTc1NDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0A5eCGVZFeZ1eBgRxjDH691GnMv
wbTaK27ZdC4nUTw3COrTwp9I7wU8TxHuj/9Pkb2dw3uJyGDFyaEC/w9G3vG4srwg
3ZUnRdQKsqZiC2mXu6ETVRJZKoK5dAU4zXO4sa6n1Fe/GfEDDVXPaCZmxKMwytMP
J/P3m8pw1cl5+nn9tHiPkUldvw6q2ZVyr2IjVUXdEFb17U0O6fxWctLDxI2dSmhY
9VC+PETKmH+FZXM9bJ6doH1hR/RQi01i3kwKg/uj9FWsMmRW0e6V6oPHsHqr8eTn
YyOylezS1ZMNRT2TMd02ZSprl+i2oy+Jqjf2ZXWebE73rcmpRubBudCiAQIDAQAB
o4ICpDCCAqAwHQYDVR0OBBYEFLS1396VOobyyqGz52k2tX7NV1RgMB8GA1UdIwQY
MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt
YzE5OTQyNzM3ZTZkLzEvdExYZjNwVTZodkxLb2JQbmFUYTFmczFYVkdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk
LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG5BggrBgEFBQcBBwEB/wSBqTCBpjCBowQCAAEwgZwDBAI+
q/ADBAHC7k4DBALVEsQDBALVEtADBALVEtwDBADVEvUDBAPZsQADBADZsSMwDAME
AtmxLAMEA9mxMAMEAtmzOAMEAtmzSAMEAtmzUAMEAtmzfAMEAtmz3DAMAwQC2bQM
AwQA2bQOAwQA2bQUAwQB2bQWAwQA2bQmMAwDBADZtC0DBADZtC4DBADZtDsDBADZ
tD0DBAPZtVAwDQYJKoZIhvcNAQELBQADggEBAJ4OvdZwsuP3E6Y+OGyoeYmyBEGF
WusAjtfJ9zeuWj7k1Y97EUHssB+OTQhc4E7SfZNDM5YHhyDnlwt5GRNXrSCXLBSh
o+JYf8wxuMIvO7FaD5Y4K/WY4EdByh+VDXaYVRj4qvo83+dILba4XlwbMhmncNwF
0sPlaUJ4ZzRk3xmweG8Of2ONoWbRrF2Sph217YpV22CDeQChnV0o3sgoXxcIsrrO
IVsLRhknkOYBsImtWykMjNkFFEJsTXLY5LIfWWn6EuQzSIM5efpCVkk0Rvel+fbQ
/3cB6o6hQGElTj9WMwGZD8cN/o6FWO3aUYcbXGNDFy62K/PcD+iDv39JSuA=
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:55:46 2025 by rpki-client