Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6V3NZ7McikdVTg86H8_GBMd057c.roa
File: 6V3NZ7McikdVTg86H8_GBMd057c.roa (raw, json)
Hash identifier: y2IyEQV0rZPzBaWrC17uqC4MZcoB1tf+FuSHPVqD7go=
Subject key identifier: E9:5D:CD:67:B3:1C:8A:47:55:4E:0F:3A:1F:CF:C6:04:C7:74:E7:B7
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01956C6A4A21DB4FA73FE06B00D50124E494
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6V3NZ7McikdVTg86H8_GBMd057c.roa
Signing time: Thu 06 Mar 2025 17:04:19 +0000
ROA not before: Thu 06 Mar 2025 17:04:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/23 maxlen: 24
14.102.231.0/24 maxlen: 24
45.151.140.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.97.0/24 maxlen: 24
85.208.10.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
194.36.32.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Mar 2025 14:50:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6c:6a:4a:21:db:4f:a7:3f:e0:6b:00:d5:01:24:e4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Mar 6 17:04:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e95dcd67b31c8a47554e0f3a1fcfc604c774e7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:af:a1:28:13:7a:0f:4c:b8:86:85:4e:e4:b7:
0b:f4:85:8c:0c:7e:64:3a:b8:f8:7d:c8:27:18:65:
13:72:00:f2:f7:8c:c0:92:b1:45:d7:ce:21:d1:6d:
36:22:f6:9f:79:3b:e3:8e:30:97:50:ed:4c:14:4d:
05:9c:23:ce:ed:57:2d:13:8e:00:7d:ee:10:31:14:
e3:da:f0:79:a0:ba:36:6e:d3:21:2f:20:e5:ce:6e:
1c:0f:dc:d6:c3:94:02:e3:ca:dd:e1:1d:7f:23:b8:
a5:62:db:cf:9e:d1:43:2a:2f:e9:32:b4:75:90:ec:
86:59:14:1f:c7:c3:fd:c6:06:bf:b2:6c:fb:d9:8a:
ce:d6:6d:35:4c:ad:14:5a:96:c9:00:fb:f7:36:ae:
48:10:fa:c5:e3:ed:bd:c4:51:3b:d4:ff:bc:d0:ce:
fe:51:9f:0b:bc:46:3d:14:69:ce:63:a4:a3:ba:d9:
74:42:d7:8b:da:b1:59:44:8d:ec:a9:46:a3:95:49:
d0:dc:3e:b4:c2:7a:a6:03:0e:2f:c6:83:8f:86:5e:
82:5b:20:f2:f3:f6:a5:7f:ab:61:bf:44:42:b9:26:
5e:b0:63:8d:6f:bf:7b:1e:60:36:2f:87:d6:2d:27:
6d:98:3d:57:4a:8c:70:8c:f8:f1:c7:53:f9:b7:f9:
29:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5D:CD:67:B3:1C:8A:47:55:4E:0F:3A:1F:CF:C6:04:C7:74:E7:B7
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6V3NZ7McikdVTg86H8_GBMd057c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
14.102.231.0/24
45.151.140.0/24
77.111.96.0/22
85.208.10.0/24
94.229.212.0/24
94.229.223.0/24
194.36.32.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:bd:49:fa:11:7a:1b:e3:a7:a2:dc:9f:bb:d9:e8:db:68:54:
32:f9:d0:02:6b:d5:d4:d0:0b:12:0e:f3:08:0c:8b:29:ab:db:
66:43:f8:75:8c:96:52:22:14:3a:89:1b:51:41:94:9b:95:d1:
e6:b3:fd:09:d2:59:4b:62:86:74:82:e4:36:22:ef:cd:f3:6a:
97:76:01:09:6f:8a:19:6a:99:51:a6:0c:28:a3:df:1a:da:2e:
e6:02:89:e0:f5:b6:21:71:da:85:42:d0:6d:9e:d3:f8:48:ed:
a6:5c:a0:67:26:b9:45:db:24:91:64:d2:40:92:b9:99:21:fc:
00:76:72:1a:1d:e3:93:eb:6d:0e:c6:c2:9e:7f:9b:db:88:13:
34:44:50:f2:66:fb:1e:61:8d:b5:c0:06:a2:81:99:45:85:22:
0d:17:37:fb:5f:0b:af:2b:24:ba:9b:49:9c:01:00:87:7f:f0:
7a:f1:90:2e:19:fd:ca:b8:d2:62:01:2d:7c:c8:16:98:36:73:
75:6f:17:e0:f6:67:e2:f2:7b:ba:ad:0b:75:36:dd:91:d8:ca:
79:60:87:a5:c4:b2:77:9a:b0:f5:a9:64:37:86:d6:1c:f5:3c:
65:69:9a:3e:a3:ac:a2:82:e2:a3:1e:bc:8f:43:77:3b:c9:d8:
27:d2:8f:82
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZVsakoh20+nP+BrANUBJOSUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjUwMzA2MTcwNDE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTVkY2Q2N2IzMWM4YTQ3NTU0ZTBmM2ExZmNmYzYwNGM3NzRlN2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq+hKBN6D0y4hoVO5LcL9IWMDH5k
Orj4fcgnGGUTcgDy94zAkrFF184h0W02IvafeTvjjjCXUO1MFE0FnCPO7VctE44A
fe4QMRTj2vB5oLo2btMhLyDlzm4cD9zWw5QC48rd4R1/I7ilYtvPntFDKi/pMrR1
kOyGWRQfx8P9xga/smz72YrO1m01TK0UWpbJAPv3Nq5IEPrF4+29xFE71P+80M7+
UZ8LvEY9FGnOY6Sjutl0QteL2rFZRI3sqUajlUnQ3D60wnqmAw4vxoOPhl6CWyDy
8/alf6thv0RCuSZesGONb797HmA2L4fWLSdtmD1XSoxwjPjxx1P5t/kpxwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFOldzWezHIpHVU4POh/PxgTHdOe3MB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvNlYzTlo3TWNpa2RWVGc4Nkg4X0dCTWQwNTdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBDmbiAwQA
DmbnAwQALZeMAwQCTW9gAwQAVdAKAwQAXuXUAwQAXuXfAwQBwiQgMA0GCSqGSIb3
DQEBCwUAA4IBAQCmvUn6EXob46ei3J+72ejbaFQy+dACa9XU0AsSDvMIDIspq9tm
Q/h1jJZSIhQ6iRtRQZSbldHms/0J0llLYoZ0guQ2Iu/N82qXdgEJb4oZaplRpgwo
o98a2i7mAong9bYhcdqFQtBtntP4SO2mXKBnJrlF2ySRZNJAkrmZIfwAdnIaHeOT
620OxsKef5vbiBM0RFDyZvseYY21wAaigZlFhSINFzf7XwuvKyS6m0mcAQCHf/B6
8ZAuGf3KuNJiAS18yBaYNnN1bxfg9mfi8nu6rQt1Nt2R2Mp5YIelxLJ3mrD1qWQ3
htYc9TxlaZo+o6yiguKjHryPQ3c7ydgn0o+C
-----END CERTIFICATE-----
Generated at Sat Jun 14 17:43:36 2025 by rpki-client