Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/qhRzbFovhgydWhGy58SmWC1i_dw.roa
File: qhRzbFovhgydWhGy58SmWC1i_dw.roa (raw, json)
Hash identifier: KOm8SfuWoY2AatmiJmxflrZ9w4aHXxZiIbanCk8tFHA=
Subject key identifier: AA:14:73:6C:5A:2F:86:0C:9D:5A:11:B2:E7:C4:A6:58:2D:62:FD:DC
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 019713CC71FBD963035E6BF0573AC2FE13E7
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/qhRzbFovhgydWhGy58SmWC1i_dw.roa
Signing time: Tue 27 May 2025 22:10:54 +0000
ROA not before: Tue 27 May 2025 22:10:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211619
IP address blocks: 45.95.168.0/24 maxlen: 24
45.95.169.0/24 maxlen: 24
45.95.170.0/24 maxlen: 24
45.95.171.0/24 maxlen: 24
150.40.96.0/19 maxlen: 24
203.31.217.0/24 maxlen: 24
2a0e:bfc0::/32 maxlen: 32
2a0e:bfc1::/32 maxlen: 32
2a0e:bfc2::/32 maxlen: 32
2a0e:bfc3::/32 maxlen: 32
2a0e:bfc4::/32 maxlen: 32
2a0e:bfc5::/32 maxlen: 32
2a0e:bfc6::/32 maxlen: 32
2a0e:bfc7::/40 maxlen: 40
2a0e:bfc7:100::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 02 Jun 2025 09:36:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:13:cc:71:fb:d9:63:03:5e:6b:f0:57:3a:c2:fe:13:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: May 27 22:10:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa14736c5a2f860c9d5a11b2e7c4a6582d62fddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:37:09:18:93:0b:d2:b6:74:99:e1:30:e2:
1c:c6:91:7f:95:89:2e:ec:ab:06:9b:c8:30:b1:c8:
29:f9:fb:d6:4e:03:33:86:6d:16:1a:19:84:78:6c:
b7:9d:5c:79:4f:2b:bb:a9:47:5f:2c:5c:37:9c:46:
f4:8d:a3:31:fe:e3:85:a8:d4:ba:ea:99:e7:3e:34:
97:5c:9b:20:6d:4b:46:b2:c7:4a:f2:1e:6b:ee:21:
43:e8:cc:3a:d3:e8:4b:c3:01:b9:a7:23:37:d5:df:
ed:71:54:e9:4b:b6:5c:d0:d3:b2:bd:9e:ac:ce:a5:
99:77:96:94:5d:86:d2:61:fd:65:78:a5:41:81:a9:
fd:ac:11:4d:8c:e0:32:ba:2f:8b:f4:44:01:4a:70:
aa:c8:18:ef:b1:1f:1d:f9:a7:ae:63:a8:a7:6a:59:
06:ea:09:8f:3b:02:4e:08:94:14:78:e4:58:c2:58:
48:db:ee:8f:45:f4:43:bc:54:ac:db:ba:c5:b5:70:
ef:dd:e8:65:62:1a:8c:0f:32:45:43:df:1d:1d:01:
c2:a3:21:7b:6e:14:54:8e:24:52:92:87:29:24:26:
de:86:3e:e9:4c:fb:36:db:36:6d:06:21:9c:dd:9c:
cf:41:25:b5:74:b1:89:88:99:45:fe:77:c0:75:33:
1e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:14:73:6C:5A:2F:86:0C:9D:5A:11:B2:E7:C4:A6:58:2D:62:FD:DC
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/qhRzbFovhgydWhGy58SmWC1i_dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.168.0/22
150.40.96.0/19
203.31.217.0/24
IPv6:
2a0e:bfc0::-2a0e:bfc7:1ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
49:2e:74:19:e7:25:bc:21:35:64:47:f8:ab:8b:3e:8e:9e:67:
d3:df:af:5f:40:b4:eb:1f:a1:43:62:90:c8:95:6c:57:0b:bb:
3c:c4:17:48:66:29:ed:f9:18:19:8a:31:6d:af:c0:97:57:f8:
da:49:b3:b0:a3:e8:64:53:8a:f6:ee:71:6a:f5:b6:0c:bc:6c:
0f:24:d4:44:7a:a5:b9:29:7a:43:fa:93:a9:82:cd:d1:0b:1d:
6e:ed:15:43:44:f6:57:0d:38:3a:47:a8:f3:8d:49:99:64:c5:
cb:89:3c:a4:59:82:20:94:1f:c7:f7:7a:38:55:f8:2c:0e:d4:
ee:06:5f:88:98:59:62:0f:d9:c4:8d:cc:26:64:b5:28:1e:80:
83:5d:07:63:77:0b:9f:fe:91:9f:d6:72:df:de:c1:ed:79:f2:
f3:bd:91:32:dd:fc:0a:cb:c7:7d:8e:20:fa:e6:b2:5b:7e:b1:
27:05:43:33:bb:60:7e:4a:bc:17:03:0f:a2:74:d4:e7:8d:e2:
64:5b:d2:83:06:3b:d8:f7:62:f5:7c:33:a4:01:6c:27:dc:6b:
27:8c:90:b9:e1:ba:14:a2:83:2b:c6:b8:2f:7e:82:60:c1:2d:
c3:6f:5f:69:04:32:be:b9:92:9a:f4:98:9e:d3:3a:dc:86:be:
64:11:5b:87
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgISAZcTzHH72WMDXmvwVzrC/hPnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYTk2MmMxZmU4ZTJlMTJhMzU1NzZmZDYyOTg3YTBjYmJh
NDYzZDQwHhcNMjUwNTI3MjIxMDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTE0NzM2YzVhMmY4NjBjOWQ1YTExYjJlN2M0YTY1ODJkNjJmZGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH43CRiTC9K2dJnhMOIcxpF/lYku
7KsGm8gwscgp+fvWTgMzhm0WGhmEeGy3nVx5Tyu7qUdfLFw3nEb0jaMx/uOFqNS6
6pnnPjSXXJsgbUtGssdK8h5r7iFD6Mw60+hLwwG5pyM31d/tcVTpS7Zc0NOyvZ6s
zqWZd5aUXYbSYf1leKVBgan9rBFNjOAyui+L9EQBSnCqyBjvsR8d+aeuY6inalkG
6gmPOwJOCJQUeORYwlhI2+6PRfRDvFSs27rFtXDv3ehlYhqMDzJFQ98dHQHCoyF7
bhRUjiRSkocpJCbehj7pTPs22zZtBiGc3ZzPQSW1dLGJiJlF/nfAdTMeBQIDAQAB
o4ICLjCCAiowHQYDVR0OBBYEFKoUc2xaL4YMnVoRsufEplgtYv3cMB8GA1UdIwQY
MBaAFAKpYsH+ji4So1V2/WKYegy7pGPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYt
N2QxMzQ5ODBjNWJlLzEvcWhSemJGb3ZoZ3lkV2hHeTU4U21XQzFpX2R3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYtN2QxMzQ5ODBjNWJl
LzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAYBAIAATASAwQCLV+oAwQF
lihgAwQAyx/ZMBcEAgACMBEwDwMFBioOv8ADBgEqDr/HADANBgkqhkiG9w0BAQsF
AAOCAQEASS50GeclvCE1ZEf4q4s+jp5n09+vX0C06x+hQ2KQyJVsVwu7PMQXSGYp
7fkYGYoxba/Al1f42kmzsKPoZFOK9u5xavW2DLxsDyTURHqluSl6Q/qTqYLN0Qsd
bu0VQ0T2Vw04Okeo841JmWTFy4k8pFmCIJQfx/d6OFX4LA7U7gZfiJhZYg/ZxI3M
JmS1KB6Ag10HY3cLn/6Rn9Zy397B7Xny872RMt38CsvHfY4g+uayW36xJwVDM7tg
fkq8FwMPonTU543iZFvSgwY72Pdi9XwzpAFsJ9xrJ4yQueG6FKKDK8a4L36CYMEt
w29faQQyvrmSmvSYntM63Ia+ZBFbhw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 01:07:22 2025 by rpki-client