Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/bNiy6Nh5h6s6aYVpHmBCKIF5URY.roa
File: bNiy6Nh5h6s6aYVpHmBCKIF5URY.roa (raw, json)
Hash identifier: GK8PsqC+LMD+UB+akK3gRX04YedlqWk90aBlg5AVlqY=
Subject key identifier: 6C:D8:B2:E8:D8:79:87:AB:3A:69:85:69:1E:60:42:28:81:79:51:16
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 01965C9BB5FA4D38FB858A1E4BD43D6CB7E9
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/bNiy6Nh5h6s6aYVpHmBCKIF5URY.roa
Signing time: Tue 22 Apr 2025 08:27:10 +0000
ROA not before: Tue 22 Apr 2025 08:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21155
IP address blocks: 80.84.224.0/19 maxlen: 19
81.4.64.0/19 maxlen: 19
81.4.96.0/22 maxlen: 22
81.4.112.0/22 maxlen: 22
81.4.116.0/22 maxlen: 22
83.96.128.0/17 maxlen: 17
85.158.248.0/22 maxlen: 22
85.158.252.0/23 maxlen: 23
91.142.240.0/20 maxlen: 20
91.142.244.0/23 maxlen: 23
91.142.252.0/23 maxlen: 23
91.142.254.0/23 maxlen: 23
91.216.162.0/24 maxlen: 24
185.95.68.0/22 maxlen: 24
193.93.172.0/22 maxlen: 24
193.242.119.0/24 maxlen: 24
2001:828::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 22 Apr 2025 08:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:9b:b5:fa:4d:38:fb:85:8a:1e:4b:d4:3d:6c:b7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Apr 22 08:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cd8b2e8d87987ab3a6985691e60422881795116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:65:a5:18:49:0a:2b:83:c6:5c:81:d7:2d:b3:
a1:24:3e:83:ef:e4:3a:01:68:fa:53:5f:96:49:ce:
b2:ae:74:af:1d:f9:5f:d6:c8:33:75:be:f3:85:65:
93:78:f5:6e:b2:dd:17:ac:9a:32:2c:8b:70:57:c8:
f5:73:6d:87:74:b6:35:68:7c:5a:25:31:78:aa:bc:
a5:ae:38:b7:e7:a8:1f:f1:ff:bf:2b:fa:9e:81:0f:
e7:a6:61:4b:ea:e2:a4:a2:6f:9b:cf:c4:9c:46:3f:
24:87:11:6c:bd:eb:ed:8a:ea:15:97:86:82:ed:d4:
cf:57:8d:34:fb:95:73:b6:98:ee:11:d2:9a:be:e5:
7d:3b:91:e0:d1:08:cb:32:45:15:39:e7:97:9d:16:
27:ab:c5:3d:81:1b:e7:58:cd:3d:d3:75:50:94:d5:
89:b6:c7:e9:2c:f3:e4:24:b2:89:0d:12:2a:2f:a7:
71:20:a1:de:cc:46:42:d2:53:29:2b:05:c0:9a:d1:
a2:f2:70:2c:31:2f:ca:c2:f3:cb:13:a0:d1:e2:89:
82:f4:01:9a:91:cd:c2:8a:36:83:59:b0:6d:54:26:
ae:ec:7a:b2:01:8b:ac:c4:fe:02:26:bf:ff:13:19:
ec:64:ac:d0:2a:47:ea:e2:6b:4e:64:f5:b1:a7:69:
e7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D8:B2:E8:D8:79:87:AB:3A:69:85:69:1E:60:42:28:81:79:51:16
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/bNiy6Nh5h6s6aYVpHmBCKIF5URY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.224.0/19
81.4.64.0-81.4.99.255
81.4.112.0/21
83.96.128.0/17
85.158.248.0-85.158.253.255
91.142.240.0/20
91.216.162.0/24
185.95.68.0/22
193.93.172.0/22
193.242.119.0/24
IPv6:
2001:828::/32
Signature Algorithm: sha256WithRSAEncryption
02:17:17:47:b4:da:e3:f7:4e:9a:35:8c:c4:52:62:f5:31:38:
bf:df:39:86:16:e4:49:ab:78:4f:a3:4c:84:b6:92:d0:f4:58:
5b:ce:d0:64:15:a2:99:47:e0:84:6c:ef:d6:6a:51:9e:78:9c:
e8:dc:61:c3:8b:90:8a:ba:6c:7b:f5:73:86:f9:a1:b2:38:f3:
1c:a6:d9:41:f1:97:db:fe:8d:77:a8:c9:42:6b:f8:f8:76:eb:
fb:0a:11:53:bd:93:df:f4:00:aa:ae:b3:b0:b1:9d:60:da:7e:
a2:61:e8:3b:c0:45:2a:c9:94:27:f7:59:21:75:0a:0a:6f:4e:
18:75:58:cf:12:67:2f:bf:5a:59:1c:e6:f1:32:34:be:38:b0:
58:2b:48:fc:8d:41:c7:3b:54:c3:ad:b8:55:00:ae:49:b8:e6:
00:73:2f:9a:cc:93:31:b0:b8:c9:dc:6a:b8:56:c7:66:fc:aa:
96:62:a9:7d:95:4d:b2:6b:15:6a:a3:bf:19:10:e5:85:c8:3c:
a0:64:5f:2d:e3:c9:4b:67:3b:44:df:f5:9c:f2:b1:8c:fd:b3:
53:94:9e:95:03:b5:ad:06:cf:d3:a9:51:07:23:45:88:4f:83:
96:9e:92:a0:46:8f:b4:9f:93:3f:4c:a0:ce:bb:ea:c3:c7:73:
e4:a1:76:86
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgISAZZcm7X6TTj7hYoeS9Q9bLfpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3
NTJhZTcwHhcNMjUwNDIyMDgyNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2Q4YjJlOGQ4Nzk4N2FiM2E2OTg1NjkxZTYwNDIyODgxNzk1MTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGWlGEkKK4PGXIHXLbOhJD6D7+Q6
AWj6U1+WSc6yrnSvHflf1sgzdb7zhWWTePVust0XrJoyLItwV8j1c22HdLY1aHxa
JTF4qrylrji356gf8f+/K/qegQ/npmFL6uKkom+bz8ScRj8khxFsvevtiuoVl4aC
7dTPV400+5VztpjuEdKavuV9O5Hg0QjLMkUVOeeXnRYnq8U9gRvnWM0903VQlNWJ
tsfpLPPkJLKJDRIqL6dxIKHezEZC0lMpKwXAmtGi8nAsMS/KwvPLE6DR4omC9AGa
kc3CijaDWbBtVCau7HqyAYusxP4CJr//ExnsZKzQKkfq4mtOZPWxp2nnMQIDAQAB
o4ICXjCCAlowHQYDVR0OBBYEFGzYsujYeYerOmmFaR5gQiiBeVEWMB8GA1UdIwQY
MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt
MmI5MjBiZGUzOTkwLzEvYk5peTZOaDVoNnM2YVlWcEhtQkNLSUY1VVJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw
LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHQGCCsGAQUFBwEHAQH/BGUwYzBSBAIAATBMAwQFUFTgMAwD
BAZRBEADBAJRBGADBANRBHADBAdTYIAwDAMEA1We+AMEAVWe/AMEBFuO8AMEAFvY
ogMEArlfRAMEAsFdrAMEAMHydzANBAIAAjAHAwUAIAEIKDANBgkqhkiG9w0BAQsF
AAOCAQEAAhcXR7Ta4/dOmjWMxFJi9TE4v985hhbkSat4T6NMhLaS0PRYW87QZBWi
mUfghGzv1mpRnnic6Nxhw4uQirpse/VzhvmhsjjzHKbZQfGX2/6Nd6jJQmv4+Hbr
+woRU72T3/QAqq6zsLGdYNp+omHoO8BFKsmUJ/dZIXUKCm9OGHVYzxJnL79aWRzm
8TI0vjiwWCtI/I1BxztUw624VQCuSbjmAHMvmsyTMbC4ydxquFbHZvyqlmKpfZVN
smsVaqO/GRDlhcg8oGRfLePJS2c7RN/1nPKxjP2zU5SelQO1rQbP06lRByNFiE+D
lp6SoEaPtJ+TP0ygzrvqw8dz5KF2hg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 16:10:41 2025 by rpki-client