Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/bDP7ZXMKH894epbw8HRpwbB-iFo.roa
File: bDP7ZXMKH894epbw8HRpwbB-iFo.roa (raw, json)
Hash identifier: Ag/tFWO6Uv5Dx/EAPRHBNKF4YcDQZ2QKwXTDvT/yp5A=
Subject key identifier: 6C:33:FB:65:73:0A:1F:CF:78:7A:96:F0:F0:74:69:C1:B0:7E:88:5A
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 01965CA30834EBFB3D9519DB7CF231FF5296
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/bDP7ZXMKH894epbw8HRpwbB-iFo.roa
Signing time: Tue 22 Apr 2025 08:35:10 +0000
ROA not before: Tue 22 Apr 2025 08:35:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31586
IP address blocks: 80.84.224.0/19 maxlen: 24
81.4.112.0/21 maxlen: 24
81.21.136.0/21 maxlen: 24
91.205.32.0/22 maxlen: 24
141.255.180.0/22 maxlen: 24
185.69.232.0/22 maxlen: 24
185.84.72.0/22 maxlen: 24
185.95.68.0/22 maxlen: 24
185.105.204.0/22 maxlen: 24
185.105.216.0/22 maxlen: 24
193.93.172.0/22 maxlen: 24
217.21.241.0/24 maxlen: 24
2001:828::/32 maxlen: 48
2a05:2500::/32 maxlen: 48
2a05:a282::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 22 Apr 2025 12:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:a3:08:34:eb:fb:3d:95:19:db:7c:f2:31:ff:52:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Apr 22 08:35:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c33fb65730a1fcf787a96f0f07469c1b07e885a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:08:1c:2a:f1:61:bb:f1:2c:c6:58:47:a0:
30:c3:e5:63:e1:56:6c:db:29:19:99:7a:49:1e:d9:
5a:84:fe:02:dc:f9:17:a4:2a:09:5d:0c:7a:72:79:
93:ca:70:ad:5a:09:3b:0d:c4:1c:4c:a2:4b:5f:46:
e5:ab:6b:11:fc:08:b1:98:c0:78:9c:dc:5c:53:bb:
d4:a6:65:f3:35:13:a9:34:e7:f4:62:b2:c6:fc:ee:
25:ba:14:b5:e6:98:3d:ff:3b:7e:1b:d6:a2:05:0f:
ce:2f:27:7b:c0:af:0a:af:6d:46:0c:13:3a:ac:71:
26:13:71:a0:c2:ad:8f:40:4f:6f:3c:75:20:04:f6:
1a:1b:eb:44:82:53:2f:8f:43:87:d5:2f:72:b8:23:
45:2b:65:8c:c9:3f:3c:00:8d:e2:2f:94:68:42:b1:
25:a6:c5:68:92:03:2e:5d:41:f3:31:3c:f3:fd:ef:
82:80:b6:5a:09:39:1e:d2:06:84:8c:19:44:75:b5:
dc:22:a3:86:9e:d1:d8:2e:6a:f1:fa:20:4a:12:8d:
a9:d2:62:f1:bd:3e:c1:17:79:f3:8d:e8:8f:db:7d:
27:e8:af:9c:0a:e5:17:4a:da:c7:df:2c:0e:af:c9:
84:12:8d:ae:b9:8d:ce:56:4c:b7:a7:f4:9e:d7:75:
3c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:33:FB:65:73:0A:1F:CF:78:7A:96:F0:F0:74:69:C1:B0:7E:88:5A
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/bDP7ZXMKH894epbw8HRpwbB-iFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.224.0/19
81.4.112.0/21
81.21.136.0/21
91.205.32.0/22
141.255.180.0/22
185.69.232.0/22
185.84.72.0/22
185.95.68.0/22
185.105.204.0/22
185.105.216.0/22
193.93.172.0/22
217.21.241.0/24
IPv6:
2001:828::/32
2a05:2500::/32
2a05:a282::/32
Signature Algorithm: sha256WithRSAEncryption
ae:41:85:c3:e1:39:e5:9b:98:66:c8:2b:3e:18:2a:bf:79:77:
4b:5a:db:d3:81:95:d1:8c:a4:3a:0f:6c:1b:bb:68:7a:07:8f:
7f:13:2e:8c:18:fe:7b:53:70:33:e7:cc:16:82:d5:27:71:d0:
e8:5a:37:6b:d4:63:9c:30:15:1e:97:ca:77:4a:c9:c8:85:29:
0b:d2:49:86:2b:86:23:c1:57:c2:35:af:74:70:a7:2f:11:a0:
d8:91:94:4c:c8:d0:f0:94:91:13:5e:1a:ec:c9:b5:8a:37:93:
e9:da:c1:16:e3:cd:8a:d2:00:e8:2b:ba:25:f0:cf:61:f9:b6:
25:09:bf:3f:53:66:b8:35:eb:a0:17:87:9c:71:66:a0:c8:aa:
7c:ad:d0:b3:a9:55:9c:5d:22:96:dc:fd:84:d5:f7:33:3a:dd:
ca:a9:54:06:ee:c4:3b:93:2c:92:0b:4a:56:ef:b2:fc:7a:f7:
7c:b5:92:73:52:3b:39:33:55:b4:7c:7e:6c:19:9e:d2:03:d8:
a8:80:30:ca:27:85:db:0e:de:dd:5c:f8:42:31:b8:65:fd:fc:
90:dc:71:7d:bb:17:ba:e2:a8:93:b8:a9:72:9f:77:8c:e3:85:
a2:28:38:66:20:33:76:34:b9:e6:60:c0:20:ad:30:b1:0a:7e:
f2:39:27:82
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgISAZZcowg06/s9lRnbfPIx/1KWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3
NTJhZTcwHhcNMjUwNDIyMDgzNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzMzZmI2NTczMGExZmNmNzg3YTk2ZjBmMDc0NjljMWIwN2U4ODVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx4IHCrxYbvxLMZYR6Aww+Vj4VZs
2ykZmXpJHtlahP4C3PkXpCoJXQx6cnmTynCtWgk7DcQcTKJLX0blq2sR/AixmMB4
nNxcU7vUpmXzNROpNOf0YrLG/O4luhS15pg9/zt+G9aiBQ/OLyd7wK8Kr21GDBM6
rHEmE3Ggwq2PQE9vPHUgBPYaG+tEglMvj0OH1S9yuCNFK2WMyT88AI3iL5RoQrEl
psVokgMuXUHzMTzz/e+CgLZaCTke0gaEjBlEdbXcIqOGntHYLmrx+iBKEo2p0mLx
vT7BF3nzjeiP230n6K+cCuUXStrH3ywOr8mEEo2uuY3OVky3p/Se13U8FwIDAQAB
o4ICaDCCAmQwHQYDVR0OBBYEFGwz+2VzCh/PeHqW8PB0acGwfohaMB8GA1UdIwQY
MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt
MmI5MjBiZGUzOTkwLzEvYkRQN1pYTUtIODk0ZXBidzhIUnB3YkItaUZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw
LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEHAQH/BG8wbTBOBAIAATBIAwQFUFTgAwQD
UQRwAwQDURWIAwQCW80gAwQCjf+0AwQCuUXoAwQCuVRIAwQCuV9EAwQCuWnMAwQC
uWnYAwQCwV2sAwQA2RXxMBsEAgACMBUDBQAgAQgoAwUAKgUlAAMFACoFooIwDQYJ
KoZIhvcNAQELBQADggEBAK5BhcPhOeWbmGbIKz4YKr95d0ta29OBldGMpDoPbBu7
aHoHj38TLowY/ntTcDPnzBaC1Sdx0OhaN2vUY5wwFR6XyndKyciFKQvSSYYrhiPB
V8I1r3Rwpy8RoNiRlEzI0PCUkRNeGuzJtYo3k+nawRbjzYrSAOgruiXwz2H5tiUJ
vz9TZrg166AXh5xxZqDIqnyt0LOpVZxdIpbc/YTV9zM63cqpVAbuxDuTLJILSlbv
svx693y1knNSOzkzVbR8fmwZntID2KiAMMonhdsO3t1c+EIxuGX9/JDccX27F7ri
qJO4qXKfd4zjhaIoOGYgM3Y0ueZgwCCtMLEKfvI5J4I=
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:07:32 2025 by rpki-client