Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/Av9JpZ7UD9REZPJ-Z_fVHzsfJME.roa
File: Av9JpZ7UD9REZPJ-Z_fVHzsfJME.roa (raw, json)
Hash identifier: Iv8/KTPfD2/e9NrMyN7kOevvk68zlDQYUklQZlmENuA=
Subject key identifier: 02:FF:49:A5:9E:D4:0F:D4:44:64:F2:7E:67:F7:D5:1F:3B:1F:24:C1
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01942827B143497190BD527167F9BC37B23B
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/Av9JpZ7UD9REZPJ-Z_fVHzsfJME.roa
Signing time: Thu 02 Jan 2025 17:54:37 +0000
ROA not before: Thu 02 Jan 2025 17:54:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 213.182.198.0/24 maxlen: 24
213.182.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 29 Mar 2025 15:44:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:b1:43:49:71:90:bd:52:71:67:f9:bc:37:b2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Jan 2 17:54:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02ff49a59ed40fd44464f27e67f7d51f3b1f24c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d0:68:e0:f0:f6:b3:6c:f3:15:fe:f5:be:6c:
e3:4b:09:c6:36:c5:7e:e9:e6:12:f9:60:60:95:ff:
7d:12:d7:8d:20:ea:29:55:c8:1c:15:bb:a1:75:14:
ff:d1:4c:aa:9e:32:e4:c3:7f:7a:f4:bc:25:77:68:
d7:7b:eb:18:b6:4b:3a:a8:f7:32:45:ed:b5:cb:e5:
2b:b9:72:a8:61:90:70:72:78:b2:35:49:13:89:fb:
44:51:17:ae:4a:6b:bc:bb:98:eb:09:49:0e:1d:a0:
c9:2c:fe:5b:f7:27:c8:39:a3:3d:2e:8b:1a:3e:2c:
c8:01:af:cd:a2:36:58:1f:84:bb:63:57:b0:ba:b4:
35:c0:30:37:8c:09:fc:32:53:28:2f:81:1b:d5:f4:
b8:55:22:f4:8b:3a:e1:32:7f:c7:d8:94:df:39:4a:
a5:fa:64:88:0b:81:a6:95:64:b8:fd:1c:24:16:da:
f7:e3:d6:15:26:98:da:75:1d:b2:9f:3a:70:51:9e:
17:05:57:7b:c4:ee:c8:ae:06:de:21:e0:7a:e1:fb:
c5:dd:87:bd:f9:27:eb:ef:24:90:f0:20:6f:f0:34:
60:98:3c:fb:3d:16:ef:80:da:93:fd:37:04:f8:8f:
49:0a:9f:35:e7:69:21:ee:4e:c5:83:ab:7e:48:23:
94:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FF:49:A5:9E:D4:0F:D4:44:64:F2:7E:67:F7:D5:1F:3B:1F:24:C1
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/Av9JpZ7UD9REZPJ-Z_fVHzsfJME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.198.0/24
213.182.205.0/24
Signature Algorithm: sha256WithRSAEncryption
05:ea:7d:6c:f0:bc:9a:34:ab:17:87:44:95:d4:c4:c1:db:87:
59:f5:5f:a5:52:e2:49:ce:e3:4f:97:d9:ae:ad:3a:94:cc:bf:
44:c7:70:40:53:88:f8:bc:aa:79:35:19:dd:9e:04:45:2d:e2:
15:4f:04:8a:cd:76:ef:7a:bc:0c:13:e3:b6:66:d6:66:0a:bd:
69:ab:ec:b6:72:bf:0e:09:1e:ce:a0:12:e9:60:34:09:dc:6c:
d3:9b:08:e7:f5:5b:90:e8:ea:06:5d:23:6d:b1:7b:60:da:3c:
ae:c0:47:39:4f:67:b6:54:7b:fc:3b:5e:c9:4b:fb:88:3c:8f:
27:b3:08:38:97:0e:1e:76:36:f8:52:7e:b9:33:3b:db:39:e5:
2c:cb:aa:a3:59:53:11:07:83:07:a9:2f:2b:fd:72:5c:65:9b:
e2:76:5a:bb:24:5d:f6:7b:0a:33:77:89:00:26:e8:02:b2:af:
5b:8f:f6:ca:11:37:87:3c:bd:6a:7b:e7:88:9e:a5:6e:e7:d2:
0e:0e:7b:08:12:2b:a5:4d:60:52:0e:79:50:fc:0e:0c:4c:3e:
9b:64:1c:53:e0:04:37:09:ce:c2:5b:51:ff:43:c8:91:53:55:
fd:9c:80:d2:52:8d:73:c3:df:00:22:1c:e5:d3:53:73:8d:7d:
d8:92:d1:9a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoJ7FDSXGQvVJxZ/m8N7I7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy
MTVkYTcwHhcNMjUwMTAyMTc1NDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmZmNDlhNTllZDQwZmQ0NDQ2NGYyN2U2N2Y3ZDUxZjNiMWYyNGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NBo4PD2s2zzFf71vmzjSwnGNsV+
6eYS+WBglf99EteNIOopVcgcFbuhdRT/0UyqnjLkw3969Lwld2jXe+sYtks6qPcy
Re21y+UruXKoYZBwcniyNUkTiftEUReuSmu8u5jrCUkOHaDJLP5b9yfIOaM9Losa
PizIAa/NojZYH4S7Y1ewurQ1wDA3jAn8MlMoL4Eb1fS4VSL0izrhMn/H2JTfOUql
+mSIC4GmlWS4/RwkFtr349YVJpjadR2ynzpwUZ4XBVd7xO7IrgbeIeB64fvF3Ye9
+Sfr7ySQ8CBv8DRgmDz7PRbvgNqT/TcE+I9JCp8152kh7k7Fg6t+SCOUBQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAL/SaWe1A/URGTyfmf31R87HyTBMB8GA1UdIwQY
MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct
OWU0MTNlYmY0MmYzLzEvQXY5SnBaN1VEOVJFWlBKLVpfZlZIenNmSk1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz
LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1bbGAwQA
1bbNMA0GCSqGSIb3DQEBCwUAA4IBAQAF6n1s8LyaNKsXh0SV1MTB24dZ9V+lUuJJ
zuNPl9murTqUzL9Ex3BAU4j4vKp5NRndngRFLeIVTwSKzXbverwME+O2ZtZmCr1p
q+y2cr8OCR7OoBLpYDQJ3GzTmwjn9VuQ6OoGXSNtsXtg2jyuwEc5T2e2VHv8O17J
S/uIPI8nswg4lw4edjb4Un65MzvbOeUsy6qjWVMRB4MHqS8r/XJcZZvidlq7JF32
ewozd4kAJugCsq9bj/bKETeHPL1qe+eInqVu59IODnsIEiulTWBSDnlQ/A4MTD6b
ZBxT4AQ3Cc7CW1H/Q8iRU1X9nIDSUo1zw98AIhzl01NzjX3YktGa
-----END CERTIFICATE-----
Generated at Thu Apr 3 22:23:43 2025 by rpki-client