Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/SzIYNPUoEL2lNgHPu6Cv9-8A3NQ.roa
File: SzIYNPUoEL2lNgHPu6Cv9-8A3NQ.roa (raw, json)
Hash identifier: L9MrT1ApDR9Zu3Mt30XmDFK5d0LlyrmWV2EUjKDxz5E=
Subject key identifier: 4B:32:18:34:F5:28:10:BD:A5:36:01:CF:BB:A0:AF:F7:EF:00:DC:D4
Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial: 019427475D3F3E76599444CACAABBF3E3EEC
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/SzIYNPUoEL2lNgHPu6Cv9-8A3NQ.roa
Signing time: Thu 02 Jan 2025 13:49:35 +0000
ROA not before: Thu 02 Jan 2025 13:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62005
IP address blocks: 45.86.228.0/24 maxlen: 24
45.86.229.0/24 maxlen: 24
45.86.231.0/24 maxlen: 24
45.129.199.0/24 maxlen: 24
45.143.166.0/23 maxlen: 23
62.106.66.0/24 maxlen: 24
77.72.85.0/24 maxlen: 24
91.235.234.0/24 maxlen: 24
91.242.241.0/24 maxlen: 24
146.19.143.0/24 maxlen: 24
146.19.254.0/24 maxlen: 24
176.124.32.0/24 maxlen: 24
176.124.33.0/24 maxlen: 24
185.39.18.0/24 maxlen: 24
185.123.53.0/24 maxlen: 24
193.109.120.0/24 maxlen: 24
193.200.16.0/24 maxlen: 24
193.200.17.0/24 maxlen: 24
194.26.141.0/24 maxlen: 24
194.61.120.0/24 maxlen: 24
194.61.121.0/24 maxlen: 24
195.54.160.0/24 maxlen: 24
212.46.38.0/24 maxlen: 24
213.109.147.0/24 maxlen: 24
213.109.192.0/24 maxlen: 24
2a10:1fc0:1::/48 maxlen: 48
2a10:1fc0:2::/48 maxlen: 48
2a10:1fc0:3::/48 maxlen: 48
2a10:1fc0:4::/48 maxlen: 48
2a10:1fc0:5::/48 maxlen: 48
2a10:1fc0:6::/48 maxlen: 48
2a10:1fc0:8::/48 maxlen: 48
2a10:1fc0:9::/48 maxlen: 48
2a10:1fc0:b::/48 maxlen: 48
2a10:1fc0:c::/48 maxlen: 48
2a10:1fc0:d::/48 maxlen: 48
2a10:1fc0:e::/48 maxlen: 48
2a10:1fc0:f::/48 maxlen: 48
2a10:1fc0:10::/48 maxlen: 48
2a10:1fc0:11::/48 maxlen: 48
2a10:1fc0:12::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 28 Mar 2025 14:15:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:5d:3f:3e:76:59:94:44:ca:ca:ab:bf:3e:3e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Validity
Not Before: Jan 2 13:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b321834f52810bda53601cfbba0aff7ef00dcd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:ac:d9:26:99:60:58:d6:3d:e3:a3:cc:0a:
6e:62:00:e1:71:2a:f2:ad:c1:09:bf:81:8f:05:e7:
55:e0:7f:f5:bd:7d:b7:e5:c7:f0:ae:c0:2d:26:61:
3b:cf:a4:2e:57:32:50:a2:25:e2:ec:87:af:1a:85:
99:d0:82:01:af:96:06:63:5d:e0:35:c3:79:98:a2:
d1:36:2d:ba:d5:87:a2:cf:68:f2:38:64:1a:ff:dd:
00:a4:e5:e3:bb:6c:5c:75:fc:ef:7f:a2:39:67:70:
ea:58:14:40:37:fc:44:e2:ed:88:42:19:12:6e:8f:
dc:f5:e3:b7:84:e9:3b:df:a8:da:03:9e:03:98:9f:
5f:a7:6e:c3:8a:b1:16:96:c6:5a:7e:55:46:09:98:
12:3d:d7:8c:98:ed:5d:8b:7b:e2:0a:a9:01:f9:ff:
49:6f:60:17:9d:6f:22:e3:49:c1:32:5d:1a:2a:b6:
59:ab:f5:34:d4:a4:a1:b1:17:3d:6c:b9:e4:ca:e3:
a8:44:59:d8:dc:7d:5d:1d:25:73:0e:31:a6:8d:2b:
1d:44:05:7d:f9:c0:7e:ce:04:65:fd:55:e1:bb:9b:
ca:4e:10:62:3a:cf:a1:82:b5:31:38:f9:c1:34:86:
9a:35:1c:a3:31:b6:41:5f:3e:25:c6:af:61:5a:67:
42:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:32:18:34:F5:28:10:BD:A5:36:01:CF:BB:A0:AF:F7:EF:00:DC:D4
X509v3 Authority Key Identifier:
keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/SzIYNPUoEL2lNgHPu6Cv9-8A3NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.228.0/23
45.86.231.0/24
45.129.199.0/24
45.143.166.0/23
62.106.66.0/24
77.72.85.0/24
91.235.234.0/24
91.242.241.0/24
146.19.143.0/24
146.19.254.0/24
176.124.32.0/23
185.39.18.0/24
185.123.53.0/24
193.109.120.0/24
193.200.16.0/23
194.26.141.0/24
194.61.120.0/23
195.54.160.0/24
212.46.38.0/24
213.109.147.0/24
213.109.192.0/24
IPv6:
2a10:1fc0:1::-2a10:1fc0:6:ffff:ffff:ffff:ffff:ffff
2a10:1fc0:8::/47
2a10:1fc0:b::-2a10:1fc0:12:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
16:af:c2:72:04:b3:53:d2:15:38:01:10:89:65:f8:2a:ff:a0:
51:51:a8:3e:e2:e9:34:80:36:00:be:92:32:d1:d1:08:5c:d6:
ab:e3:c7:c0:38:0a:c9:e2:ca:d0:f1:ec:a5:d2:7d:b2:8f:16:
5a:d0:c4:4a:fc:93:a7:f8:a9:24:6b:59:06:ce:de:47:03:18:
59:21:8f:48:71:50:86:f8:ea:99:5c:3f:fa:ae:6d:00:d6:88:
7f:c9:27:29:59:d1:83:1d:d5:d6:42:40:73:0b:64:98:30:59:
15:9a:ce:95:cc:77:d5:35:32:67:9a:74:48:a0:85:79:11:8c:
92:8f:a9:30:e3:65:06:cf:e1:16:83:3e:4e:db:1c:3f:1b:7b:
34:3f:d1:1c:8c:a9:75:0b:8c:f5:6b:84:0f:a6:6a:3e:0d:91:
6f:97:f1:86:de:8c:a8:49:91:d6:81:0a:e5:03:f4:40:8e:20:
db:73:9b:89:93:e7:49:e7:52:3c:e4:4d:24:8f:b3:ed:cd:2c:
1d:27:a3:ec:c5:57:c7:f6:cf:10:f1:9f:30:53:e5:58:d0:a2:
da:40:12:b4:94:cf:0a:d9:de:4b:c4:1e:48:a9:2c:aa:eb:fa:
49:fb:01:ee:ff:b9:cf:f1:ba:b4:ce:ea:72:e6:02:c5:50:4c:
d3:ae:ea:fb
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgISAZQnR10/PnZZlETKyqu/Pj7sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NzMyMGQwMzA5MzAxNzhlNmY3Y2VlZjkxZDJhYjg3ODRk
M2RjMTYwHhcNMjUwMTAyMTM0OTM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjMyMTgzNGY1MjgxMGJkYTUzNjAxY2ZiYmEwYWZmN2VmMDBkY2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJis2SaZYFjWPeOjzApuYgDhcSry
rcEJv4GPBedV4H/1vX235cfwrsAtJmE7z6QuVzJQoiXi7IevGoWZ0IIBr5YGY13g
NcN5mKLRNi261Yeiz2jyOGQa/90ApOXju2xcdfzvf6I5Z3DqWBRAN/xE4u2IQhkS
bo/c9eO3hOk736jaA54DmJ9fp27DirEWlsZaflVGCZgSPdeMmO1di3viCqkB+f9J
b2AXnW8i40nBMl0aKrZZq/U01KShsRc9bLnkyuOoRFnY3H1dHSVzDjGmjSsdRAV9
+cB+zgRl/VXhu5vKThBiOs+hgrUxOPnBNIaaNRyjMbZBXz4lxq9hWmdCYwIDAQAB
o4ICvjCCArowHQYDVR0OBBYEFEsyGDT1KBC9pTYBz7ugr/fvANzUMB8GA1UdIwQY
MBaAFJRzINAwkwF45vfO75HSq4eE09wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEt
OGFjNGEyMTkzOGI0LzEvU3pJWU5QVW9FTDJsTmdIUHU2Q3Y5LThBM05RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEtOGFjNGEyMTkzOGI0
LzEvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHTBggrBgEFBQcBBwEB/wSBwzCBwDCBhAQCAAEwfgMEAS1W
5AMEAC1W5wMEAC2BxwMEAS2PpgMEAD5qQgMEAE1IVQMEAFvr6gMEAFvy8QMEAJIT
jwMEAJIT/gMEAbB8IAMEALknEgMEALl7NQMEAMFteAMEAcHIEAMEAMIajQMEAcI9
eAMEAMM2oAMEANQuJgMEANVtkwMEANVtwDA3BAIAAjAxMBIDBwAqEB/AAAEDBwAq
EB/AAAYDBwEqEB/AAAgwEgMHACoQH8AACwMHACoQH8AAEjANBgkqhkiG9w0BAQsF
AAOCAQEAFq/CcgSzU9IVOAEQiWX4Kv+gUVGoPuLpNIA2AL6SMtHRCFzWq+PHwDgK
yeLK0PHspdJ9so8WWtDESvyTp/ipJGtZBs7eRwMYWSGPSHFQhvjqmVw/+q5tANaI
f8knKVnRgx3V1kJAcwtkmDBZFZrOlcx31TUyZ5p0SKCFeRGMko+pMONlBs/hFoM+
TtscPxt7ND/RHIypdQuM9WuED6ZqPg2Rb5fxht6MqEmR1oEK5QP0QI4g23ObiZPn
SedSPORNJI+z7c0sHSej7MVXx/bPEPGfMFPlWNCi2kAStJTPCtneS8QeSKksquv6
SfsB7v+5z/G6tM7qcuYCxVBM067q+w==
-----END CERTIFICATE-----
Generated at Sat Apr 12 21:40:29 2025 by rpki-client