Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cva1LGZ2taj6nQ-X_eeh2-ryPsc.roa
File: cva1LGZ2taj6nQ-X_eeh2-ryPsc.roa (raw, json)
Hash identifier: 62a1C5qAYNxXCde9Yk5x3rER5j57ElH7eKziCuzs90o=
Subject key identifier: 72:F6:B5:2C:66:76:B5:A8:FA:9D:0F:97:FD:E7:A1:DB:EA:F2:3E:C7
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196B344C681CD15CFE3632BD673775A3AB7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cva1LGZ2taj6nQ-X_eeh2-ryPsc.roa
Signing time: Fri 09 May 2025 04:19:10 +0000
ROA not before: Fri 09 May 2025 04:19:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22439
IP address blocks: 94.249.174.0/24 maxlen: 24
94.249.175.0/24 maxlen: 24
94.249.176.0/24 maxlen: 24
94.249.177.0/24 maxlen: 24
94.249.178.0/24 maxlen: 24
94.249.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jun 2025 04:10:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:44:c6:81:cd:15:cf:e3:63:2b:d6:73:77:5a:3a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 9 04:19:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72f6b52c6676b5a8fa9d0f97fde7a1dbeaf23ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cf:39:d1:2e:76:ef:36:e1:48:c9:d6:20:95:
cc:fc:46:8b:41:62:62:c1:ce:0d:e2:e4:cc:e2:4c:
8c:0f:f9:f0:ff:f5:bf:c4:ba:42:d9:e6:0a:08:d4:
9a:0c:ca:3a:4c:72:25:40:8c:4d:0e:28:20:7e:d5:
0a:ce:ae:7c:32:ce:be:cc:2d:a0:77:70:07:a9:ab:
1e:b9:69:a2:ad:c0:7c:1a:c0:26:39:0e:35:aa:79:
e2:50:ac:f6:82:a5:66:0b:f6:5f:03:e4:b6:43:50:
f6:a6:c7:b9:de:11:2f:b0:3c:47:3a:fe:4c:76:b3:
ff:ab:24:f7:4b:f6:60:ff:fa:2c:c0:eb:0c:4f:ef:
c9:c4:99:09:07:1a:4d:28:ad:ba:e4:75:63:89:00:
b8:b6:6a:1e:0d:9b:34:90:52:49:a0:ec:8c:e6:5f:
4c:74:45:1b:3a:b4:39:a3:bd:62:b2:97:73:d7:64:
53:12:0e:95:66:6a:53:35:8a:83:f4:4d:03:01:b5:
60:a8:af:b6:8b:36:94:8d:df:55:16:bb:f3:2c:5c:
40:a3:f5:37:86:c1:5a:ae:95:b1:5a:2f:a6:1c:86:
f2:86:86:59:0a:7f:00:ec:82:e3:8e:4a:3e:f5:a5:
22:0c:11:cf:1f:b0:20:c6:46:a4:cb:c6:c5:a2:ce:
16:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F6:B5:2C:66:76:B5:A8:FA:9D:0F:97:FD:E7:A1:DB:EA:F2:3E:C7
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cva1LGZ2taj6nQ-X_eeh2-ryPsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.174.0-94.249.179.255
Signature Algorithm: sha256WithRSAEncryption
54:6c:75:4b:b6:0d:34:a2:fa:76:2c:16:84:d9:3e:f0:5f:27:
73:64:2c:c7:74:44:7d:3b:71:6b:50:a9:1f:af:97:4b:88:13:
99:4e:d5:cd:1c:7a:42:b0:29:8c:79:07:a3:a9:ba:11:10:c7:
31:f2:12:63:a4:24:ea:64:9d:e1:03:09:af:75:4c:79:b8:a8:
e6:64:f1:36:a7:3d:f1:9f:87:28:1a:ae:46:f5:18:4a:41:b0:
d6:5a:15:43:85:69:b5:cc:fe:6a:cd:d8:30:79:c3:fc:91:9f:
aa:69:69:8b:30:72:4f:df:73:22:21:ce:a8:39:29:57:09:04:
98:7f:b9:be:62:37:d7:5b:c3:b2:dc:7e:13:34:21:73:06:fa:
7c:dc:8c:cc:5e:cd:0b:82:28:b8:ec:f6:2a:c3:5d:ee:ef:b6:
e2:cb:30:de:27:a4:04:f7:fb:f4:70:15:8f:f0:ee:aa:4a:06:
de:76:30:29:df:6c:e1:ab:e2:18:89:14:ec:28:db:0a:40:50:
05:d2:9b:1b:6f:92:82:7b:4c:f0:cb:d8:db:22:da:be:de:ea:
26:32:e7:a2:a0:37:c3:a0:b3:ba:b1:a3:cc:4b:67:ac:9f:e0:
cf:11:60:77:ef:5c:86:ec:a4:a9:04:ff:99:2f:e6:29:aa:6b:
16:01:89:59
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZazRMaBzRXP42Mr1nN3Wjq3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNTA5MDQxOTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmY2YjUyYzY2NzZiNWE4ZmE5ZDBmOTdmZGU3YTFkYmVhZjIzZWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc850S527zbhSMnWIJXM/EaLQWJi
wc4N4uTM4kyMD/nw//W/xLpC2eYKCNSaDMo6THIlQIxNDiggftUKzq58Ms6+zC2g
d3AHqaseuWmircB8GsAmOQ41qnniUKz2gqVmC/ZfA+S2Q1D2pse53hEvsDxHOv5M
drP/qyT3S/Zg//oswOsMT+/JxJkJBxpNKK265HVjiQC4tmoeDZs0kFJJoOyM5l9M
dEUbOrQ5o71ispdz12RTEg6VZmpTNYqD9E0DAbVgqK+2izaUjd9VFrvzLFxAo/U3
hsFarpWxWi+mHIbyhoZZCn8A7ILjjko+9aUiDBHPH7Agxkaky8bFos4W0QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFHL2tSxmdrWo+p0Pl/3nodvq8j7HMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvY3ZhMUxHWjJ0YWo2blEtWF9lZWgyLXJ5UHNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFe+a4D
BAJe+bAwDQYJKoZIhvcNAQELBQADggEBAFRsdUu2DTSi+nYsFoTZPvBfJ3NkLMd0
RH07cWtQqR+vl0uIE5lO1c0cekKwKYx5B6OpuhEQxzHyEmOkJOpkneEDCa91THm4
qOZk8TanPfGfhygarkb1GEpBsNZaFUOFabXM/mrN2DB5w/yRn6ppaYswck/fcyIh
zqg5KVcJBJh/ub5iN9dbw7LcfhM0IXMG+nzcjMxezQuCKLjs9irDXe7vtuLLMN4n
pAT3+/RwFY/w7qpKBt52MCnfbOGr4hiJFOwo2wpAUAXSmxtvkoJ7TPDL2Nsi2r7e
6iYy56KgN8Ogs7qxo8xLZ6yf4M8RYHfvXIbspKkE/5kv5imqaxYBiVk=
-----END CERTIFICATE-----
Generated at Sun Jun 15 06:55:58 2025 by rpki-client