Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/jQz3uQsDHb5Fk6rV8v_T6q7tcDk.roa
File: jQz3uQsDHb5Fk6rV8v_T6q7tcDk.roa (raw, json)
Hash identifier: +T32D0F+ONI1C9R1EewPiDOwSeOx2c90Jbi3GdVVmNw=
Subject key identifier: 8D:0C:F7:B9:0B:03:1D:BE:45:93:AA:D5:F2:FF:D3:EA:AE:ED:70:39
Certificate issuer: /CN=5534e9bb0ee4d30c31e76afa691adc9279b3f356
Certificate serial: 01942369FC7D06B057150EE1F3ECE884430C
Authority key identifier: 55:34:E9:BB:0E:E4:D3:0C:31:E7:6A:FA:69:1A:DC:92:79:B3:F3:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/jQz3uQsDHb5Fk6rV8v_T6q7tcDk.roa
Signing time: Wed 01 Jan 2025 19:48:55 +0000
ROA not before: Wed 01 Jan 2025 19:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20878
IP address blocks: 176.74.0.0/21 maxlen: 21
176.74.1.0/24 maxlen: 24
176.74.3.0/24 maxlen: 24
176.74.7.0/24 maxlen: 24
185.66.32.0/22 maxlen: 22
185.66.33.0/24 maxlen: 24
185.66.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 15:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:fc:7d:06:b0:57:15:0e:e1:f3:ec:e8:84:43:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5534e9bb0ee4d30c31e76afa691adc9279b3f356
Validity
Not Before: Jan 1 19:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d0cf7b90b031dbe4593aad5f2ffd3eaaeed7039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b4:73:43:4b:d6:f0:87:b8:41:cc:2c:19:ef:
79:69:f4:9b:5f:0e:07:69:9a:e6:02:ff:3c:6a:23:
ba:95:a6:93:73:77:a9:d6:a8:d1:ab:d5:8f:3c:0d:
d0:16:9b:a7:74:b5:34:fa:3c:9a:b9:be:24:ef:68:
6d:2d:f2:e0:bb:db:58:85:ab:7a:9e:09:17:ca:04:
48:18:4f:36:96:da:0d:0f:c4:c6:8d:9a:55:64:3d:
58:6f:71:d5:e7:e1:87:35:f7:01:87:8e:3f:78:fe:
df:52:0d:86:74:89:f4:9b:22:1c:08:fc:e5:5e:e7:
65:9a:31:13:56:08:00:24:4f:71:d1:cd:ee:20:2f:
11:16:78:c6:0a:73:95:63:54:17:8d:fd:ba:36:a7:
fd:5a:f1:d3:ec:28:93:ab:7b:19:e0:8b:3e:26:25:
ec:b1:db:9b:a3:87:d2:ed:16:86:a7:f8:08:8c:82:
45:96:08:04:f8:7d:21:3a:8d:76:87:ac:9c:6b:14:
c5:c1:9c:c6:40:e8:52:81:c6:7c:1d:1e:16:63:9a:
1e:ec:8a:9a:98:50:13:f6:8b:8e:3d:5a:10:cc:e7:
ba:22:92:2b:40:27:68:ce:c4:8f:f4:b0:aa:d3:24:
ca:a0:24:74:de:c1:72:fe:98:dd:aa:1a:9a:bd:79:
84:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0C:F7:B9:0B:03:1D:BE:45:93:AA:D5:F2:FF:D3:EA:AE:ED:70:39
X509v3 Authority Key Identifier:
keyid:55:34:E9:BB:0E:E4:D3:0C:31:E7:6A:FA:69:1A:DC:92:79:B3:F3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/jQz3uQsDHb5Fk6rV8v_T6q7tcDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.74.0.0/21
185.66.32.0/22
Signature Algorithm: sha256WithRSAEncryption
38:a5:8e:98:9f:16:da:46:30:41:a1:d4:28:8e:13:c6:37:8f:
f8:53:16:24:0a:e8:f8:ba:8a:3e:55:69:9e:88:9e:7e:72:11:
a7:ec:7c:e0:62:7c:8e:34:bc:97:be:5c:b4:81:61:75:70:02:
be:8c:29:17:90:cd:b0:ce:fb:5c:7b:cf:bd:08:91:53:42:ac:
86:79:23:39:6b:98:92:fb:43:3c:36:3e:74:1c:53:44:72:e1:
47:9d:58:e5:e9:fd:7f:7e:b6:b1:d6:51:e1:65:2a:42:a0:be:
27:0d:c3:d8:95:76:e5:aa:c9:a9:0b:f3:7a:4d:49:7b:a3:39:
50:b3:f1:8e:7d:8b:ad:e6:eb:86:12:8d:72:f1:eb:8f:17:9d:
fc:c1:00:36:df:46:8e:52:18:79:ba:0c:b0:fc:d8:ba:bf:63:
68:38:23:a8:03:28:63:48:4f:51:8b:e6:33:ad:36:a8:3c:ba:
d0:06:3c:d8:09:dd:0d:f7:08:63:f3:52:ef:8a:0c:ea:f5:f1:
36:ec:5f:36:fe:19:9c:15:a3:59:6a:38:0c:5f:45:96:da:b6:
22:61:92:fe:5a:c9:43:93:fe:a7:64:14:11:32:b0:a5:ee:09:
70:da:d7:17:ef:de:42:ca:27:0c:a2:5a:7c:3a:43:d2:b7:86:
c8:30:29:a6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQjafx9BrBXFQ7h8+zohEMMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MzRlOWJiMGVlNGQzMGMzMWU3NmFmYTY5MWFkYzkyNzli
M2YzNTYwHhcNMjUwMTAxMTk0ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDBjZjdiOTBiMDMxZGJlNDU5M2FhZDVmMmZmZDNlYWFlZWQ3MDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrRzQ0vW8Ie4QcwsGe95afSbXw4H
aZrmAv88aiO6laaTc3ep1qjRq9WPPA3QFpundLU0+jyaub4k72htLfLgu9tYhat6
ngkXygRIGE82ltoND8TGjZpVZD1Yb3HV5+GHNfcBh44/eP7fUg2GdIn0myIcCPzl
XudlmjETVggAJE9x0c3uIC8RFnjGCnOVY1QXjf26Nqf9WvHT7CiTq3sZ4Is+JiXs
sdubo4fS7RaGp/gIjIJFlggE+H0hOo12h6ycaxTFwZzGQOhSgcZ8HR4WY5oe7Iqa
mFAT9ouOPVoQzOe6IpIrQCdozsSP9LCq0yTKoCR03sFy/pjdqhqavXmEiQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFI0M97kLAx2+RZOq1fL/0+qu7XA5MB8GA1UdIwQY
MBaAFFU06bsO5NMMMedq+mka3JJ5s/NWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlRUcHV3N2swd3d4NTJyNmFScmNrbm16ODFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mNGJhNjMtY2Q5YS00MzExLWI0MTYt
NjRmMjMxZGQ0MDQyLzEvalF6M3VRc0RIYjVGazZyVjh2X1Q2cTd0Y0RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mNGJhNjMtY2Q5YS00MzExLWI0MTYtNjRmMjMxZGQ0MDQy
LzEvVlRUcHV3N2swd3d4NTJyNmFScmNrbm16ODFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDsEoAAwQC
uUIgMA0GCSqGSIb3DQEBCwUAA4IBAQA4pY6YnxbaRjBBodQojhPGN4/4UxYkCuj4
uoo+VWmeiJ5+chGn7HzgYnyONLyXvly0gWF1cAK+jCkXkM2wzvtce8+9CJFTQqyG
eSM5a5iS+0M8Nj50HFNEcuFHnVjl6f1/frax1lHhZSpCoL4nDcPYlXblqsmpC/N6
TUl7ozlQs/GOfYut5uuGEo1y8euPF538wQA230aOUhh5ugyw/Ni6v2NoOCOoAyhj
SE9Ri+YzrTaoPLrQBjzYCd0N9whj81Lvigzq9fE27F82/hmcFaNZajgMX0WW2rYi
YZL+WslDk/6nZBQRMrCl7glw2tcX795CyicMolp8OkPSt4bIMCmm
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:18:47 2025 by rpki-client