Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/9L5LG_vy_ACTzM1QtLJlNSMYQFc.roa
File: 9L5LG_vy_ACTzM1QtLJlNSMYQFc.roa (raw, json)
Hash identifier: 8JZdteHk9kevAhXZ1mI2ufJ8wP6g0GuYWxEaVjPFHFo=
Subject key identifier: F4:BE:4B:1B:FB:F2:FC:00:93:CC:CD:50:B4:B2:65:35:23:18:40:57
Certificate issuer: /CN=75ea894ee05775e0ef061d086ca252147f5c91de
Certificate serial: 0194266BF5D58D84E7036992FB2A152C1628
Authority key identifier: 75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/9L5LG_vy_ACTzM1QtLJlNSMYQFc.roa
Signing time: Thu 02 Jan 2025 09:49:56 +0000
ROA not before: Thu 02 Jan 2025 09:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58075
IP address blocks: 37.235.80.0/21 maxlen: 24
45.95.68.0/22 maxlen: 24
45.154.44.0/22 maxlen: 24
185.21.52.0/22 maxlen: 24
185.43.20.0/22 maxlen: 24
185.96.148.0/22 maxlen: 24
185.186.172.0/22 maxlen: 24
194.110.22.0/24 maxlen: 24
194.110.27.0/24 maxlen: 24
194.110.30.0/24 maxlen: 24
194.110.72.0/24 maxlen: 24
2a04:9380::/29 maxlen: 64
Validation: Failed, certificate revoked on Tue 14 Jan 2025 09:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f5:d5:8d:84:e7:03:69:92:fb:2a:15:2c:16:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75ea894ee05775e0ef061d086ca252147f5c91de
Validity
Not Before: Jan 2 09:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4be4b1bfbf2fc0093cccd50b4b2653523184057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:8f:22:b2:7e:22:08:99:07:03:40:a4:bf:
3a:62:1c:b1:32:56:67:7a:be:47:18:60:6f:79:78:
96:8b:0d:c2:e7:c0:51:56:b9:2f:1c:0b:65:20:ca:
8e:e7:76:28:d3:b2:c5:76:29:6c:33:0f:15:8a:60:
44:04:c1:14:b6:48:28:64:3e:be:93:fb:bd:e1:46:
af:7b:86:dd:35:1f:c6:d6:87:0a:45:04:b9:7a:76:
84:23:07:09:b2:fa:07:fe:b2:5d:93:6e:5d:e4:04:
be:2d:54:1f:8b:54:28:76:52:8c:2f:b8:21:92:91:
23:c4:ea:cd:85:5f:45:4a:8b:6c:ec:cf:3b:cc:29:
5c:d9:62:84:52:b9:94:5b:c1:7a:f6:06:98:cc:d4:
ee:73:f7:e2:86:a1:9c:1c:81:47:49:ee:13:9b:2f:
69:e7:53:dd:b0:e2:93:4a:07:46:d6:1c:5b:cb:c6:
e9:13:72:93:c3:0f:31:93:20:d1:d0:bd:1b:d1:44:
ac:a6:10:54:d2:d2:30:5a:a1:94:f0:9d:8e:f3:4a:
11:48:a1:5f:7b:6f:84:38:b4:0a:9d:17:39:e9:a4:
bf:b0:7e:96:55:03:18:75:16:a6:c1:eb:d6:33:83:
68:36:18:57:11:a8:5e:44:0a:49:53:23:58:5e:75:
f8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BE:4B:1B:FB:F2:FC:00:93:CC:CD:50:B4:B2:65:35:23:18:40:57
X509v3 Authority Key Identifier:
keyid:75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/9L5LG_vy_ACTzM1QtLJlNSMYQFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.80.0/21
45.95.68.0/22
45.154.44.0/22
185.21.52.0/22
185.43.20.0/22
185.96.148.0/22
185.186.172.0/22
194.110.22.0/24
194.110.27.0/24
194.110.30.0/24
194.110.72.0/24
IPv6:
2a04:9380::/29
Signature Algorithm: sha256WithRSAEncryption
2c:30:5e:9b:d2:4d:ac:64:22:6d:0c:37:45:60:68:1e:31:03:
8d:74:d0:40:e2:26:10:69:71:41:40:b4:e4:7d:77:21:69:f4:
d9:a9:52:13:69:d6:21:76:4f:09:4a:0e:7b:7c:0d:7b:9d:15:
66:28:5d:9b:53:f8:90:2c:35:d3:1c:86:03:3a:8b:ae:15:fe:
85:1e:25:62:a7:21:07:19:09:88:4e:12:4c:59:10:11:63:b5:
79:b6:96:14:9c:7b:a7:e4:87:05:d3:e2:39:a2:dc:0c:55:f4:
33:96:d7:30:fc:b8:db:bc:9b:32:47:3e:22:59:18:e7:cf:1e:
6b:c6:43:a5:c3:40:6a:f2:36:03:59:49:94:ac:67:ad:3a:7b:
44:cd:92:b3:6b:82:c2:04:27:18:1e:5c:e2:3d:69:6c:19:a9:
42:de:e1:dc:04:e7:b9:b1:13:25:af:1b:70:d2:86:4f:54:0b:
f4:55:0b:a6:51:12:6e:0c:9f:5f:84:1f:27:6e:14:f4:48:3e:
d5:93:63:44:db:88:cf:f0:99:13:f4:f6:37:08:73:1a:26:01:
3a:1b:7b:ea:1c:f3:eb:e2:22:11:5e:ad:1d:0a:9f:44:7c:a0:
1d:13:34:8c:f9:9d:97:2b:e5:d1:59:a7:23:95:3a:fd:a0:b5:
4d:72:ca:a1
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgISAZQma/XVjYTnA2mS+yoVLBYoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZWE4OTRlZTA1Nzc1ZTBlZjA2MWQwODZjYTI1MjE0N2Y1
YzkxZGUwHhcNMjUwMTAyMDk0OTU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGJlNGIxYmZiZjJmYzAwOTNjY2NkNTBiNGIyNjUzNTIzMTg0MDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8ePIrJ+IgiZBwNApL86YhyxMlZn
er5HGGBveXiWiw3C58BRVrkvHAtlIMqO53Yo07LFdilsMw8VimBEBMEUtkgoZD6+
k/u94Uave4bdNR/G1ocKRQS5enaEIwcJsvoH/rJdk25d5AS+LVQfi1QodlKML7gh
kpEjxOrNhV9FSots7M87zClc2WKEUrmUW8F69gaYzNTuc/fihqGcHIFHSe4Tmy9p
51PdsOKTSgdG1hxby8bpE3KTww8xkyDR0L0b0USsphBU0tIwWqGU8J2O80oRSKFf
e2+EOLQKnRc56aS/sH6WVQMYdRamwevWM4NoNhhXEaheRApJUyNYXnX4TQIDAQAB
o4ICVDCCAlAwHQYDVR0OBBYEFPS+Sxv78vwAk8zNULSyZTUjGEBXMB8GA1UdIwQY
MBaAFHXqiU7gV3Xg7wYdCGyiUhR/XJHeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGVxSlR1QlhkZUR2QmgwSWJLSlNGSDlja2Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xY2RjZTItYTNmOC00NGI2LWI1ZTEt
YjdmMjk4NGViNjUzLzEvOUw1TEdfdnlfQUNUek0xUXRMSmxOU01ZUUZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8xY2RjZTItYTNmOC00NGI2LWI1ZTEtYjdmMjk4NGViNjUz
LzEvZGVxSlR1QlhkZUR2QmgwSWJLSlNGSDlja2Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQDJetQAwQC
LV9EAwQCLZosAwQCuRU0AwQCuSsUAwQCuWCUAwQCubqsAwQAwm4WAwQAwm4bAwQA
wm4eAwQAwm5IMA0EAgACMAcDBQMqBJOAMA0GCSqGSIb3DQEBCwUAA4IBAQAsMF6b
0k2sZCJtDDdFYGgeMQONdNBA4iYQaXFBQLTkfXchafTZqVITadYhdk8JSg57fA17
nRVmKF2bU/iQLDXTHIYDOouuFf6FHiVipyEHGQmIThJMWRARY7V5tpYUnHun5IcF
0+I5otwMVfQzltcw/LjbvJsyRz4iWRjnzx5rxkOlw0Bq8jYDWUmUrGetOntEzZKz
a4LCBCcYHlziPWlsGalC3uHcBOe5sRMlrxtw0oZPVAv0VQumURJuDJ9fhB8nbhT0
SD7Vk2NE24jP8JkT9PY3CHMaJgE6G3vqHPPr4iIRXq0dCp9EfKAdEzSM+Z2XK+XR
WacjlTr9oLVNcsqh
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:05:46 2025 by rpki-client