Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/hOhTqimsI-f40r8atSYwcwdYTZ0.roa
File: hOhTqimsI-f40r8atSYwcwdYTZ0.roa (raw, json)
Hash identifier: YKKy3woNlNMAjD8g3ty4wEi+yethfj8Q2qafgZTXW3w=
Subject key identifier: 84:E8:53:AA:29:AC:23:E7:F8:D2:BF:1A:B5:26:30:73:07:58:4D:9D
Certificate issuer: /CN=8b054485ee62c6f1939613cba20669eef4504f79
Certificate serial: 019464BD3EDEEC1775ED98028FEC1EE4D67D
Authority key identifier: 8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/hOhTqimsI-f40r8atSYwcwdYTZ0.roa
Signing time: Tue 14 Jan 2025 12:15:11 +0000
ROA not before: Tue 14 Jan 2025 12:15:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59908
IP address blocks: 141.170.208.0/21 maxlen: 24
141.170.214.0/24 maxlen: 24
185.67.112.0/24 maxlen: 24
185.67.114.0/24 maxlen: 24
185.67.115.0/24 maxlen: 24
193.164.226.0/23 maxlen: 24
2a00:a3a0::/32 maxlen: 96
2a03:2460::/32 maxlen: 96
Validation: Failed, certificate revoked on Thu 16 Jan 2025 12:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:64:bd:3e:de:ec:17:75:ed:98:02:8f:ec:1e:e4:d6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b054485ee62c6f1939613cba20669eef4504f79
Validity
Not Before: Jan 14 12:15:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84e853aa29ac23e7f8d2bf1ab526307307584d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:07:f7:97:bd:f1:e9:41:ed:59:f6:c1:e0:24:
cd:03:f0:1d:68:33:ab:55:92:d1:62:9a:c6:3d:f1:
ed:ee:d4:7b:b8:d6:6b:a7:ff:6d:c0:d5:b7:2b:6b:
c1:76:21:91:93:ff:31:9c:b6:c8:17:9d:49:59:ac:
15:f0:87:67:24:cb:0d:c6:c4:cb:f0:b6:c8:25:bd:
a1:ad:b3:a4:63:84:16:f2:35:77:08:7f:bd:1b:68:
fe:04:9c:28:c2:79:27:d6:55:c4:c8:a6:d1:5e:dd:
95:f5:c7:77:e4:3f:2c:4d:30:bd:bb:62:31:d7:ff:
16:f7:62:cd:bb:1e:d9:6c:8c:00:52:8e:b6:ed:a9:
be:d4:01:d7:e6:e0:98:c5:04:d8:76:99:9e:68:46:
69:39:b2:ca:2c:46:28:e8:25:b5:46:07:84:48:48:
bc:10:7b:69:e7:d3:f9:d9:4e:9a:e3:06:c6:18:a5:
f4:7a:a3:cc:ff:91:cb:49:6a:30:50:3d:9c:9f:e1:
0d:ee:b7:c8:ac:90:0d:fc:2d:0f:06:3a:d7:1c:61:
8a:50:c8:bf:76:d5:82:2c:9a:02:51:00:ea:f8:0a:
b8:08:b1:f5:59:7b:5b:86:c9:fc:59:7d:4e:e7:1f:
a6:cd:19:c2:ea:da:98:7b:67:af:fc:8b:a1:5c:81:
56:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E8:53:AA:29:AC:23:E7:F8:D2:BF:1A:B5:26:30:73:07:58:4D:9D
X509v3 Authority Key Identifier:
keyid:8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/hOhTqimsI-f40r8atSYwcwdYTZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.170.208.0/21
185.67.112.0/24
185.67.114.0/23
193.164.226.0/23
IPv6:
2a00:a3a0::/32
2a03:2460::/32
Signature Algorithm: sha256WithRSAEncryption
3c:31:d2:e2:1b:fd:25:c0:4b:a4:32:08:eb:b7:5a:40:62:d7:
f2:e3:a9:d6:44:77:1f:b8:e3:6a:83:50:a2:76:b4:0c:fc:47:
e5:10:9a:d7:5f:d0:20:eb:dd:60:09:5c:8a:b2:29:7d:77:31:
ef:c3:83:32:fc:68:f4:8a:21:60:2e:8f:cd:c3:44:17:ac:26:
45:b2:bc:85:f4:0e:25:67:3b:e0:16:c5:21:e7:93:0d:50:a4:
94:e0:ca:b1:bb:93:8a:7e:65:53:a2:ab:05:23:6c:9d:49:ba:
0e:64:19:ce:ed:62:e1:95:ba:f1:38:09:56:97:c9:34:18:64:
5f:50:dc:8e:ca:c2:ad:96:ff:18:1b:51:7d:c0:ad:f5:8d:12:
54:6e:82:1f:f3:65:77:f5:d6:10:2e:df:01:06:45:33:2f:53:
3b:51:55:69:7f:e5:94:6c:af:9f:12:1c:94:e4:0a:20:b7:32:
02:ed:11:d9:64:7c:34:73:d3:14:a3:ba:8d:9a:bd:cc:1c:2b:
4e:8b:bb:e2:f8:b5:01:9a:56:54:77:20:41:d5:12:b7:6f:a1:
80:53:52:4d:36:8c:e5:bc:3d:99:97:1e:96:d0:d2:41:5d:02:
41:90:b4:52:49:9c:61:f3:9a:27:cb:3d:20:c0:11:61:64:2d:
11:63:02:cb
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZRkvT7e7Bd17ZgCj+we5NZ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMDU0NDg1ZWU2MmM2ZjE5Mzk2MTNjYmEyMDY2OWVlZjQ1
MDRmNzkwHhcNMjUwMTE0MTIxNTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGU4NTNhYTI5YWMyM2U3ZjhkMmJmMWFiNTI2MzA3MzA3NTg0ZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQf3l73x6UHtWfbB4CTNA/AdaDOr
VZLRYprGPfHt7tR7uNZrp/9twNW3K2vBdiGRk/8xnLbIF51JWawV8IdnJMsNxsTL
8LbIJb2hrbOkY4QW8jV3CH+9G2j+BJwownkn1lXEyKbRXt2V9cd35D8sTTC9u2Ix
1/8W92LNux7ZbIwAUo627am+1AHX5uCYxQTYdpmeaEZpObLKLEYo6CW1RgeESEi8
EHtp59P52U6a4wbGGKX0eqPM/5HLSWowUD2cn+EN7rfIrJAN/C0PBjrXHGGKUMi/
dtWCLJoCUQDq+Aq4CLH1WXtbhsn8WX1O5x+mzRnC6tqYe2ev/IuhXIFWEwIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFIToU6oprCPn+NK/GrUmMHMHWE2dMB8GA1UdIwQY
MBaAFIsFRIXuYsbxk5YTy6IGae70UE95MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXdWRWhlNWl4dkdUbGhQTG9nWnA3dlJRVDNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83NzljMDktZjQ5YS00YjM4LWE3Nzgt
NmJjMzkwOTk1Y2FiLzEvaE9oVHFpbXNJLWY0MHI4YXRTWXdjd2RZVFowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83NzljMDktZjQ5YS00YjM4LWE3NzgtNmJjMzkwOTk1Y2Fi
LzEvaXdWRWhlNWl4dkdUbGhQTG9nWnA3dlJRVDNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQDjarQAwQA
uUNwAwQBuUNyAwQBwaTiMBQEAgACMA4DBQAqAKOgAwUAKgMkYDANBgkqhkiG9w0B
AQsFAAOCAQEAPDHS4hv9JcBLpDII67daQGLX8uOp1kR3H7jjaoNQona0DPxH5RCa
11/QIOvdYAlcirIpfXcx78ODMvxo9IohYC6PzcNEF6wmRbK8hfQOJWc74BbFIeeT
DVCklODKsbuTin5lU6KrBSNsnUm6DmQZzu1i4ZW68TgJVpfJNBhkX1DcjsrCrZb/
GBtRfcCt9Y0SVG6CH/Nld/XWEC7fAQZFMy9TO1FVaX/llGyvnxIclOQKILcyAu0R
2WR8NHPTFKO6jZq9zBwrTou74vi1AZpWVHcgQdUSt2+hgFNSTTaM5bw9mZceltDS
QV0CQZC0UkmcYfOaJ8s9IMARYWQtEWMCyw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 16:34:45 2025 by rpki-client