Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ORqT22Sf_a0WVynLQB8bdg16q7I.roa
File: ORqT22Sf_a0WVynLQB8bdg16q7I.roa (raw, json)
Hash identifier: mjLyetU9Rhr6jGEga3pwaf+VltMJ732+KBUkqQN6uj8=
Subject key identifier: 39:1A:93:DB:64:9F:FD:AD:16:57:29:CB:40:1F:1B:76:0D:7A:AB:B2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282469B942F175D579852A509A3B496A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ORqT22Sf_a0WVynLQB8bdg16q7I.roa
Signing time: Thu 02 Jan 2025 17:51:02 +0000
ROA not before: Thu 02 Jan 2025 17:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 5.252.132.0/22 maxlen: 24
85.217.166.0/24 maxlen: 24
85.217.167.0/24 maxlen: 24
85.217.180.0/24 maxlen: 24
85.217.181.0/24 maxlen: 24
85.217.182.0/24 maxlen: 24
85.217.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 09:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:69:b9:42:f1:75:d5:79:85:2a:50:9a:3b:49:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=391a93db649ffdad165729cb401f1b760d7aabb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:7c:ad:2a:a6:94:00:fc:08:13:50:25:af:
9c:90:c8:cf:a5:3a:c6:e6:14:e2:d4:a6:c1:a2:2f:
80:82:a3:39:da:e8:fe:8a:6e:8c:a5:45:06:f4:7e:
ff:75:af:ce:43:bb:76:1b:70:65:90:eb:9d:e6:fc:
a1:56:21:9e:0d:33:51:b9:0d:2a:b6:7f:cb:a0:a1:
10:cc:fd:fe:fc:40:d0:f3:ea:84:fa:27:98:3c:2f:
38:86:78:69:f9:bd:b2:04:3b:4f:8c:b0:a8:7f:da:
f9:7c:61:ad:f0:c6:25:04:bf:b2:78:a9:a0:82:18:
35:a5:95:bf:ad:36:81:26:bb:e3:91:54:10:be:c9:
4b:79:fb:7e:dd:9d:0a:e1:6b:d7:68:d4:61:31:fb:
8a:1a:60:d1:c1:c2:61:9f:14:8e:67:3a:ce:75:56:
f6:a4:c4:5e:d2:ab:c9:72:22:2a:7e:18:c7:8f:e7:
21:03:03:15:a7:d4:b0:15:ae:4c:ee:e3:1b:ef:3c:
35:19:70:ad:81:9f:78:8b:14:53:3e:eb:fe:84:3e:
47:74:33:43:b9:3e:5a:2a:f0:a2:5f:50:46:23:88:
a0:8b:68:d9:90:9d:65:5b:f8:4d:92:c3:36:72:68:
f1:85:bf:37:67:96:fa:c9:c4:0d:95:5d:9d:9d:5b:
28:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1A:93:DB:64:9F:FD:AD:16:57:29:CB:40:1F:1B:76:0D:7A:AB:B2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ORqT22Sf_a0WVynLQB8bdg16q7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.132.0/22
85.217.166.0/23
85.217.180.0/22
Signature Algorithm: sha256WithRSAEncryption
76:dc:cd:9f:24:65:91:27:a6:f8:91:3e:8b:91:cc:df:c7:f8:
33:9e:ae:41:b5:fb:52:8c:16:e2:22:42:b7:37:26:a1:cf:2f:
59:66:1f:bb:6e:44:5e:82:91:ac:3b:76:32:e7:d6:f9:79:74:
9b:09:02:3a:49:cc:92:a9:c7:84:0c:86:db:e2:75:bd:a4:a5:
84:35:09:0c:ad:be:b9:85:33:0a:cb:8f:e9:fc:45:de:0b:c4:
8d:77:88:8d:6f:a5:3c:30:7a:fd:dd:b3:ca:d0:d2:81:17:ef:
a5:7a:80:44:dd:9a:bf:45:40:fe:88:33:bd:76:d4:f0:08:0a:
69:fc:46:ff:2f:17:28:9f:4d:ed:f7:01:af:c5:48:e9:af:6e:
15:06:ab:2b:fb:41:16:2d:aa:27:84:49:48:78:30:ce:02:5c:
f0:6d:ba:d3:3c:d9:c9:0e:cd:fa:47:50:5e:e9:dd:0d:07:ba:
14:be:b1:10:da:06:70:0d:06:57:0c:5b:de:82:9a:af:bf:43:
a2:37:19:6e:0b:11:b1:ac:27:2b:ea:1a:c8:bb:9f:ab:4b:4c:
a2:a0:05:4b:5f:28:07:e0:80:7f:95:ae:e0:b7:2f:95:c7:cb:
ed:79:8f:45:ac:d0:6c:40:de:f9:b1:f6:4a:ef:88:e7:c6:9b:
5b:b4:dc:0e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQoJGm5QvF11XmFKlCaO0lqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTFhOTNkYjY0OWZmZGFkMTY1NzI5Y2I0MDFmMWI3NjBkN2FhYmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+d8rSqmlAD8CBNQJa+ckMjPpTrG
5hTi1KbBoi+AgqM52uj+im6MpUUG9H7/da/OQ7t2G3BlkOud5vyhViGeDTNRuQ0q
tn/LoKEQzP3+/EDQ8+qE+ieYPC84hnhp+b2yBDtPjLCof9r5fGGt8MYlBL+yeKmg
ghg1pZW/rTaBJrvjkVQQvslLeft+3Z0K4WvXaNRhMfuKGmDRwcJhnxSOZzrOdVb2
pMRe0qvJciIqfhjHj+chAwMVp9SwFa5M7uMb7zw1GXCtgZ94ixRTPuv+hD5HdDND
uT5aKvCiX1BGI4igi2jZkJ1lW/hNksM2cmjxhb83Z5b6ycQNlV2dnVsohwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDkak9tkn/2tFlcpy0AfG3YNequyMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvT1JxVDIyU2ZfYTBXVnluTFFCOGJkZzE2cTdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCBfyEAwQB
VdmmAwQCVdm0MA0GCSqGSIb3DQEBCwUAA4IBAQB23M2fJGWRJ6b4kT6Lkczfx/gz
nq5BtftSjBbiIkK3Nyahzy9ZZh+7bkRegpGsO3Yy59b5eXSbCQI6ScySqceEDIbb
4nW9pKWENQkMrb65hTMKy4/p/EXeC8SNd4iNb6U8MHr93bPK0NKBF++leoBE3Zq/
RUD+iDO9dtTwCApp/Eb/Lxcon03t9wGvxUjpr24VBqsr+0EWLaonhElIeDDOAlzw
bbrTPNnJDs36R1Be6d0NB7oUvrEQ2gZwDQZXDFvegpqvv0OiNxluCxGxrCcr6hrI
u5+rS0yioAVLXygH4IB/la7gty+Vx8vteY9FrNBsQN75sfZK74jnxptbtNwO
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:21:31 2025 by rpki-client