Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/_9b2rBq5sRc2BqfwIn3RdSt-D_k.roa
File: _9b2rBq5sRc2BqfwIn3RdSt-D_k.roa (raw, json)
Hash identifier: s3LYAKtaba61snnu3Vjv3p06Gn4X8nFDll2kNAthTq8=
Subject key identifier: FF:D6:F6:AC:1A:B9:B1:17:36:06:A7:F0:22:7D:D1:75:2B:7E:0F:F9
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 01965D9CF8A4C1931F6A8EC8D9D030FA7E84
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/_9b2rBq5sRc2BqfwIn3RdSt-D_k.roa
Signing time: Tue 22 Apr 2025 13:08:10 +0000
ROA not before: Tue 22 Apr 2025 13:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31586
IP address blocks: 80.84.224.0/19 maxlen: 24
81.4.96.0/22 maxlen: 24
81.4.112.0/21 maxlen: 24
81.21.136.0/21 maxlen: 24
85.158.248.0/22 maxlen: 24
85.158.252.0/23 maxlen: 23
91.205.32.0/22 maxlen: 24
141.255.180.0/22 maxlen: 24
185.69.232.0/22 maxlen: 24
185.84.72.0/22 maxlen: 24
185.95.68.0/22 maxlen: 24
185.105.204.0/22 maxlen: 24
185.105.216.0/22 maxlen: 24
193.93.172.0/22 maxlen: 24
217.21.241.0/24 maxlen: 24
2001:828::/32 maxlen: 48
2a05:2500::/32 maxlen: 48
2a05:a282::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 23 Apr 2025 06:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:9c:f8:a4:c1:93:1f:6a:8e:c8:d9:d0:30:fa:7e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Apr 22 13:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffd6f6ac1ab9b1173606a7f0227dd1752b7e0ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7a:cb:3e:0f:3d:8f:d4:72:a4:fc:96:41:7c:
5c:19:e9:92:80:a8:60:aa:65:b8:3e:79:5a:9b:0b:
60:e8:99:8c:3a:9a:f6:83:44:fe:f1:fd:d0:82:6f:
b9:fe:31:29:70:30:f3:98:1d:ea:88:90:44:df:61:
fd:17:43:91:36:36:5d:35:b6:19:99:06:39:aa:db:
89:60:5c:57:e3:1b:64:9f:b4:14:b0:05:13:6c:d6:
a6:ac:c9:09:86:c4:45:42:be:7f:54:98:0e:b5:4f:
dd:98:ce:4a:68:ee:e0:12:db:48:2f:65:91:05:69:
ef:e6:35:b3:e3:2f:b9:9a:0b:4f:96:3c:a7:1e:cc:
6e:82:eb:d3:e1:0d:4c:a3:89:a5:bb:d7:e4:e9:99:
62:13:af:af:5c:f9:6c:b7:15:1d:b2:fc:42:f5:b7:
5d:66:7a:30:3e:47:b4:63:a8:8c:2b:a2:53:0b:e6:
b7:80:2f:96:0c:ac:35:6b:cf:ee:ef:12:63:01:74:
91:07:11:ad:f6:08:45:36:10:e5:8c:cf:57:e1:d8:
20:c7:13:30:9c:10:7a:ca:9a:55:db:7a:42:3d:74:
d4:04:59:8a:26:c9:2f:b0:b3:79:5d:14:f2:c4:50:
2b:b8:cd:03:26:3e:6f:4d:59:74:e2:29:e3:fb:bd:
fb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D6:F6:AC:1A:B9:B1:17:36:06:A7:F0:22:7D:D1:75:2B:7E:0F:F9
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/_9b2rBq5sRc2BqfwIn3RdSt-D_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.224.0/19
81.4.96.0/22
81.4.112.0/21
81.21.136.0/21
85.158.248.0-85.158.253.255
91.205.32.0/22
141.255.180.0/22
185.69.232.0/22
185.84.72.0/22
185.95.68.0/22
185.105.204.0/22
185.105.216.0/22
193.93.172.0/22
217.21.241.0/24
IPv6:
2001:828::/32
2a05:2500::/32
2a05:a282::/32
Signature Algorithm: sha256WithRSAEncryption
26:1b:f9:a2:00:b7:0e:d2:93:b7:ac:ea:fb:0e:b0:26:fc:6a:
58:7a:57:f8:e4:69:e5:c4:bc:3d:50:c7:8e:0d:2c:9a:06:e8:
22:c7:ea:f0:4a:3d:9c:2c:c0:fb:d5:94:f7:bc:23:49:22:3d:
c8:6c:af:a3:e0:71:c8:82:27:f8:d2:2e:4a:12:f3:8e:8f:b9:
ce:91:e0:2b:99:a1:89:81:74:35:a2:47:9d:c8:d0:1b:04:79:
c9:03:62:0f:1c:11:70:21:4e:d1:e6:56:36:9a:8b:f4:1b:be:
6d:1d:57:b7:c6:d5:57:62:9d:71:6b:d4:5f:46:fd:e1:97:ec:
14:63:b8:8e:7a:99:02:66:bb:b5:84:64:f5:4b:df:31:fc:4b:
1c:e2:ae:48:3e:99:5a:20:f9:4f:c0:db:48:86:b1:2a:81:ce:
3c:f8:ab:46:19:3b:92:ca:eb:ab:54:64:e4:ab:23:ae:54:8c:
76:71:23:5f:98:98:ba:b6:dc:5c:49:db:9f:01:d1:2e:a2:43:
6e:48:a2:e1:a4:0d:4a:84:42:9d:07:e2:b1:fd:43:d0:99:81:
ae:7f:50:60:8e:50:bb:8f:82:e0:22:6a:cf:f6:01:b5:23:c8:
97:ed:8a:d8:24:f5:5a:ca:a9:4c:86:c2:f5:45:30:25:39:63:
ad:64:90:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:45:04 2025 by rpki-client