Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/X9PvxUa5wA0lGlKGEGFsQ2a8lpc.roa
File: X9PvxUa5wA0lGlKGEGFsQ2a8lpc.roa (raw, json)
Hash identifier: QpJveVt9BEasrUUeRIfgnc0n46mfheyt1OH+zLPU3hY=
Subject key identifier: 5F:D3:EF:C5:46:B9:C0:0D:25:1A:52:86:10:61:6C:43:66:BC:96:97
Certificate issuer: /CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Certificate serial: 0193073606BDA9707294A013A1B1B4635AC0
Authority key identifier: A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/X9PvxUa5wA0lGlKGEGFsQ2a8lpc.roa
Signing time: Thu 07 Nov 2024 15:20:01 +0000
ROA not before: Thu 07 Nov 2024 15:20:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47202
IP address blocks: 89.31.224.0/21 maxlen: 21
94.126.144.0/21 maxlen: 21
185.124.124.0/22 maxlen: 22
185.136.52.0/22 maxlen: 22
193.218.156.0/22 maxlen: 22
195.184.240.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 07 Nov 2024 16:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:07:36:06:bd:a9:70:72:94:a0:13:a1:b1:b4:63:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Validity
Not Before: Nov 7 15:20:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fd3efc546b9c00d251a528610616c4366bc9697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:23:7b:01:34:ad:e3:6f:b8:22:90:65:34:0a:
2e:d9:d4:01:67:26:1c:11:51:ea:d9:28:92:70:9e:
94:37:7c:80:0c:d9:86:3a:e3:7f:dd:db:a8:98:ca:
56:c9:a1:65:ee:e9:2d:1d:a5:ac:28:f6:7f:50:a0:
10:5b:50:9a:49:2e:47:8c:5b:f6:5f:99:09:b2:3a:
1c:c2:76:22:b1:ee:2c:4a:c3:28:79:4a:4c:44:3b:
aa:fd:09:c4:d3:f2:85:c1:e4:4d:6b:aa:9b:50:85:
70:f4:12:50:85:13:75:cc:c5:03:40:7c:c2:17:34:
8f:82:62:f2:96:a8:a1:6c:c1:1c:d7:56:9b:19:ab:
02:16:ee:4d:fc:53:8b:5d:68:ae:7f:be:48:7a:6e:
39:1a:fb:58:76:76:47:cc:d1:75:f8:f4:8b:91:06:
4a:d1:a7:df:0a:43:a1:b2:9b:ff:ca:51:e9:9a:c8:
fa:e4:29:1c:9a:b5:54:35:db:62:0e:c0:41:73:a6:
b2:8a:52:af:25:83:41:e9:70:72:ad:86:47:70:14:
40:bb:2c:34:fc:9e:5c:b4:58:4e:d9:4a:eb:73:fa:
0d:3d:43:ce:30:f9:79:73:8b:1b:75:38:0b:1b:f5:
bc:0a:76:44:18:4d:2c:8c:fa:2c:fc:d5:4f:59:f8:
5e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D3:EF:C5:46:B9:C0:0D:25:1A:52:86:10:61:6C:43:66:BC:96:97
X509v3 Authority Key Identifier:
keyid:A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/X9PvxUa5wA0lGlKGEGFsQ2a8lpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.224.0/21
94.126.144.0/21
185.124.124.0/22
185.136.52.0/22
193.218.156.0/22
195.184.240.0/22
Signature Algorithm: sha256WithRSAEncryption
08:af:87:af:21:62:e7:58:65:22:0e:a1:c6:d0:9e:6e:48:18:
7c:de:09:bf:e8:85:01:41:bf:e6:ca:15:55:9b:4e:5e:df:b1:
9b:ed:7c:0a:9a:35:36:b3:54:b2:0c:dc:5d:4a:97:95:da:93:
c4:44:3c:09:cd:ef:59:cf:ac:c7:99:f6:98:09:a7:80:1e:b2:
bc:f0:4a:b4:df:1b:05:6a:a0:07:57:04:6b:6c:93:b2:0d:c4:
1b:69:68:36:c3:d0:d0:ed:f1:04:1c:37:3b:6c:8c:87:c9:01:
53:26:3c:1c:95:55:25:d1:1a:bd:e5:9d:1d:33:59:5b:2e:e0:
74:ac:14:02:94:ea:46:05:7d:89:5a:d1:94:ea:ec:f3:4c:d5:
a2:d1:71:4e:bf:6c:43:aa:99:c0:44:8d:8c:f2:c9:55:42:f3:
ef:b7:a2:be:a3:b6:29:0b:f6:c8:0c:12:28:f9:97:a0:4f:2a:
43:26:b0:c4:26:5c:f4:ad:63:67:db:c2:a2:77:9d:a9:6e:30:
6a:65:2c:5e:f6:23:85:d3:31:30:43:83:59:ef:5d:f9:1d:73:
b2:6f:b8:bc:d6:25:e0:f9:5e:56:07:e9:c6:3d:10:28:e7:ae:
f2:c7:99:6f:8d:72:48:99:1b:8f:16:b2:cb:b9:71:c5:da:79:
48:49:f9:0b
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZMHNga9qXBylKATobG0Y1rAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZjQ5MWYyMTBjNTdiZjQ2ZmI1MmQ0YWYyMmU3ZWNmNmY0
Y2RhODAwHhcNMjQxMTA3MTUyMDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmQzZWZjNTQ2YjljMDBkMjUxYTUyODYxMDYxNmM0MzY2YmM5Njk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyN7ATSt42+4IpBlNAou2dQBZyYc
EVHq2SiScJ6UN3yADNmGOuN/3duomMpWyaFl7uktHaWsKPZ/UKAQW1CaSS5HjFv2
X5kJsjocwnYise4sSsMoeUpMRDuq/QnE0/KFweRNa6qbUIVw9BJQhRN1zMUDQHzC
FzSPgmLylqihbMEc11abGasCFu5N/FOLXWiuf75Iem45GvtYdnZHzNF1+PSLkQZK
0affCkOhspv/ylHpmsj65CkcmrVUNdtiDsBBc6ayilKvJYNB6XByrYZHcBRAuyw0
/J5ctFhO2Urrc/oNPUPOMPl5c4sbdTgLG/W8CnZEGE0sjPos/NVPWfhemwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFF/T78VGucANJRpShhBhbENmvJaXMB8GA1UdIwQY
MBaAFKj0kfIQxXv0b7UtSvIufs9vTNqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVBTUjhoREZlX1J2dFMxSzhpNS16MjlNMm9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS84ZmJmNWMtZWY1MS00ZmQwLTlkM2Et
MzMwYjhhZDQyNGJkLzEvWDlQdnhVYTV3QTBsR2xLR0VHRnNRMmE4bHBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS84ZmJmNWMtZWY1MS00ZmQwLTlkM2EtMzMwYjhhZDQyNGJk
LzEvcVBTUjhoREZlX1J2dFMxSzhpNS16MjlNMm9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQDWR/gAwQD
Xn6QAwQCuXx8AwQCuYg0AwQCwdqcAwQCw7jwMA0GCSqGSIb3DQEBCwUAA4IBAQAI
r4evIWLnWGUiDqHG0J5uSBh83gm/6IUBQb/myhVVm05e37Gb7XwKmjU2s1SyDNxd
SpeV2pPERDwJze9Zz6zHmfaYCaeAHrK88Eq03xsFaqAHVwRrbJOyDcQbaWg2w9DQ
7fEEHDc7bIyHyQFTJjwclVUl0Rq95Z0dM1lbLuB0rBQClOpGBX2JWtGU6uzzTNWi
0XFOv2xDqpnARI2M8slVQvPvt6K+o7YpC/bIDBIo+ZegTypDJrDEJlz0rWNn28Ki
d52pbjBqZSxe9iOF0zEwQ4NZ7135HXOyb7i81iXg+V5WB+nGPRAo567yx5lvjXJI
mRuPFrLLuXHF2nlISfkL
-----END CERTIFICATE-----
Generated at Wed Jun 18 06:33:36 2025 by rpki-client