Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nZzqiL90_s9b_vGUGwz-ipwXNgI.roa
File: nZzqiL90_s9b_vGUGwz-ipwXNgI.roa (raw, json)
Hash identifier: y3diQ4s/vFP+gflpVJ3rZBlzHG3fmelYVech3evKZUI=
Subject key identifier: 9D:9C:EA:88:BF:74:FE:CF:5B:FE:F1:94:1B:0C:FE:8A:9C:17:36:02
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01944B9B0A234F4E2A7A4EB92F9598CB813F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nZzqiL90_s9b_vGUGwz-ipwXNgI.roa
Signing time: Thu 09 Jan 2025 15:07:19 +0000
ROA not before: Thu 09 Jan 2025 15:07:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207046
IP address blocks: 45.134.84.0/22 maxlen: 24
80.71.155.0/24 maxlen: 24
178.212.225.0/24 maxlen: 24
185.221.16.0/23 maxlen: 23
185.224.220.0/22 maxlen: 22
185.227.206.0/24 maxlen: 24
185.227.207.0/24 maxlen: 24
185.239.141.0/24 maxlen: 24
185.247.4.0/22 maxlen: 24
185.247.5.0/24 maxlen: 24
185.247.6.0/23 maxlen: 24
185.247.7.0/24 maxlen: 24
185.249.204.0/22 maxlen: 22
185.250.182.0/23 maxlen: 24
194.113.28.0/22 maxlen: 24
194.146.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 11 Jan 2025 11:06:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:9b:0a:23:4f:4e:2a:7a:4e:b9:2f:95:98:cb:81:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 9 15:07:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d9cea88bf74fecf5bfef1941b0cfe8a9c173602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:26:a1:65:bd:ae:92:48:9c:d4:8e:b2:0c:d4:
2f:1e:c3:25:0c:eb:55:a2:95:97:c0:d4:8f:bd:b9:
b3:2e:40:8a:69:f7:15:2a:0b:57:3a:05:88:97:06:
4e:ad:ef:dd:56:39:e1:5d:79:3a:18:34:14:9a:ed:
fd:24:95:ba:41:00:b1:ec:99:18:c4:b7:de:5c:14:
ae:d7:98:d8:32:69:aa:33:8d:4d:10:f5:2d:78:12:
d7:7e:08:5b:6b:13:62:c4:8d:8f:aa:78:fa:ed:99:
e5:f9:7b:be:61:26:f5:c7:fd:85:dd:7d:80:7e:5b:
37:47:cb:8f:a7:b1:a2:2d:4d:aa:9c:93:97:05:7a:
30:87:fb:f0:fc:34:5e:26:36:c1:b4:b8:e5:75:bc:
5d:c3:85:80:bf:64:4e:76:43:00:7a:79:93:b8:cd:
69:50:2b:72:78:1a:dc:74:be:71:72:7a:84:6a:92:
d9:3d:78:ef:35:e6:be:c9:91:81:5d:f8:6c:bf:ff:
3f:cd:cd:29:bc:85:50:34:6a:3e:44:07:83:e7:83:
69:41:dc:89:49:41:09:8b:1f:53:29:45:17:31:20:
ab:b5:ff:3a:e7:db:22:76:ef:30:4e:22:d1:88:cd:
4b:4f:87:3c:45:1b:c1:7b:0c:0f:7c:0e:78:dc:b0:
09:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9C:EA:88:BF:74:FE:CF:5B:FE:F1:94:1B:0C:FE:8A:9C:17:36:02
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nZzqiL90_s9b_vGUGwz-ipwXNgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.84.0/22
80.71.155.0/24
178.212.225.0/24
185.221.16.0/23
185.224.220.0/22
185.227.206.0/23
185.239.141.0/24
185.247.4.0/22
185.249.204.0/22
185.250.182.0/23
194.113.28.0/22
194.146.220.0/22
Signature Algorithm: sha256WithRSAEncryption
92:a5:fc:b7:c9:9b:c7:44:54:10:42:9d:64:57:17:e2:e8:2a:
f1:33:d1:c3:96:02:84:14:88:26:e5:fa:ac:ce:12:10:fc:d5:
55:3c:47:39:ca:ae:5a:e8:c2:a7:59:a9:51:23:02:09:38:07:
0a:1e:9d:e4:43:e8:a5:a5:57:f6:f2:c3:4e:cf:69:c6:ad:5d:
ca:e7:82:5a:d5:e8:da:52:64:77:a7:a0:3d:62:cf:51:6f:59:
36:c8:3c:01:23:4a:d7:8d:02:77:4c:c2:39:70:44:3e:7d:d9:
07:88:50:1e:d8:6f:94:cd:f6:af:85:7f:39:0d:81:53:cc:5b:
59:9e:96:74:7d:a1:db:79:a5:4b:c9:87:c2:2d:6d:02:62:f4:
a9:45:c1:f1:d5:89:cf:66:da:aa:a8:50:89:47:3a:d8:ff:bf:
3a:10:db:86:2e:ce:b2:11:86:ad:68:4f:60:a3:af:be:2e:32:
ee:74:aa:a2:f0:88:d7:6f:0d:52:78:a7:76:99:c0:35:51:54:
df:bc:6b:d9:60:ff:43:52:1f:9e:46:29:d5:b2:ce:99:d6:4e:
9c:4b:7e:8b:c7:05:9e:f8:87:80:cc:f7:b3:4c:41:c3:18:36:
04:d2:da:b2:ab:79:87:ac:fb:fb:47:d2:45:7e:a6:2d:89:b0:
e1:33:95:0c
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZRLmwojT04qek65L5WYy4E/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwMTA5MTUwNzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDljZWE4OGJmNzRmZWNmNWJmZWYxOTQxYjBjZmU4YTljMTczNjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSahZb2ukkic1I6yDNQvHsMlDOtV
opWXwNSPvbmzLkCKafcVKgtXOgWIlwZOre/dVjnhXXk6GDQUmu39JJW6QQCx7JkY
xLfeXBSu15jYMmmqM41NEPUteBLXfghbaxNixI2Pqnj67Znl+Xu+YSb1x/2F3X2A
fls3R8uPp7GiLU2qnJOXBXowh/vw/DReJjbBtLjldbxdw4WAv2ROdkMAenmTuM1p
UCtyeBrcdL5xcnqEapLZPXjvNea+yZGBXfhsv/8/zc0pvIVQNGo+RAeD54NpQdyJ
SUEJix9TKUUXMSCrtf8659sidu8wTiLRiM1LT4c8RRvBewwPfA543LAJiwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFJ2c6oi/dP7PW/7xlBsM/oqcFzYCMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvblp6cWlMOTBfczliX3ZHVUd3ei1pcHdYTmdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQCLYZUAwQA
UEebAwQAstThAwQBud0QAwQCueDcAwQBuePOAwQAue+NAwQCufcEAwQCufnMAwQB
ufq2AwQCwnEcAwQCwpLcMA0GCSqGSIb3DQEBCwUAA4IBAQCSpfy3yZvHRFQQQp1k
Vxfi6CrxM9HDlgKEFIgm5fqszhIQ/NVVPEc5yq5a6MKnWalRIwIJOAcKHp3kQ+il
pVf28sNOz2nGrV3K54Ja1ejaUmR3p6A9Ys9Rb1k2yDwBI0rXjQJ3TMI5cEQ+fdkH
iFAe2G+UzfavhX85DYFTzFtZnpZ0faHbeaVLyYfCLW0CYvSpRcHx1YnPZtqqqFCJ
RzrY/786ENuGLs6yEYataE9go6++LjLudKqi8IjXbw1SeKd2mcA1UVTfvGvZYP9D
Uh+eRinVss6Z1k6cS36LxwWe+IeAzPezTEHDGDYE0tqyq3mHrPv7R9JFfqYtibDh
M5UM
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:11:39 2025 by rpki-client