Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ByZhnHhIM6P3bN9_5PdbjkUHhRc.roa
File: ByZhnHhIM6P3bN9_5PdbjkUHhRc.roa (raw, json)
Hash identifier: WCl232I40VTRVvvFQ9aYeu9AXI+Qo0yq5YmfYS5aeSA=
Subject key identifier: 07:26:61:9C:78:48:33:A3:F7:6C:DF:7F:E4:F7:5B:8E:45:07:85:17
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01985EF14E0ADEA6E446D63549C027B99EA4
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ByZhnHhIM6P3bN9_5PdbjkUHhRc.roa
Signing time: Thu 31 Jul 2025 05:25:29 +0000
ROA not before: Thu 31 Jul 2025 05:25:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 92.71.2.0/23 maxlen: 24
92.71.4.0/23 maxlen: 24
92.71.26.0/23 maxlen: 24
92.71.28.0/22 maxlen: 24
92.71.36.0/23 maxlen: 24
92.71.48.0/21 maxlen: 24
92.71.56.0/22 maxlen: 24
92.71.62.0/23 maxlen: 24
135.196.4.0/24 maxlen: 24
135.196.24.0/23 maxlen: 24
135.196.28.0/23 maxlen: 24
135.196.88.0/23 maxlen: 24
135.196.102.0/23 maxlen: 24
135.196.108.0/22 maxlen: 24
135.196.132.0/23 maxlen: 24
135.196.144.0/22 maxlen: 24
135.196.156.0/23 maxlen: 24
135.196.164.0/23 maxlen: 24
135.196.172.0/23 maxlen: 24
135.196.176.0/23 maxlen: 24
194.231.151.0/24 maxlen: 24
194.231.156.0/24 maxlen: 24
213.201.154.0/23 maxlen: 24
213.201.166.0/23 maxlen: 24
213.201.174.0/23 maxlen: 24
213.201.182.0/23 maxlen: 24
213.201.186.0/23 maxlen: 24
213.201.190.0/23 maxlen: 24
213.201.194.0/23 maxlen: 24
213.201.196.0/23 maxlen: 24
213.201.208.0/23 maxlen: 24
213.201.214.0/23 maxlen: 24
213.201.218.0/23 maxlen: 24
213.201.222.0/23 maxlen: 24
213.201.226.0/23 maxlen: 24
213.201.228.0/23 maxlen: 24
213.201.234.0/23 maxlen: 24
213.201.238.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Aug 2025 07:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5e:f1:4e:0a:de:a6:e4:46:d6:35:49:c0:27:b9:9e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 31 05:25:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0726619c784833a3f76cdf7fe4f75b8e45078517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:e2:69:4b:c3:28:ee:db:bd:5b:e6:ad:d9:
2a:43:05:c4:71:07:1f:c0:c9:e1:a6:7e:f2:8a:b7:
2d:d5:69:74:b5:70:2b:89:eb:e8:44:ab:03:bc:92:
5e:38:a4:cc:3f:3d:15:4f:3a:d4:cf:76:59:df:b9:
b9:91:5c:5b:96:36:d9:39:d7:77:8b:e3:14:94:46:
14:15:e8:3b:a4:86:8e:e9:fc:20:10:d6:19:c8:5e:
0f:d5:f5:8a:85:6a:af:f2:da:87:55:1f:09:31:44:
c6:96:63:ec:d3:a8:30:ae:a3:60:18:73:ab:93:eb:
ab:44:5c:2d:cc:4c:d1:90:b8:c1:bc:6d:7e:cd:9c:
87:44:e0:6d:01:bb:aa:46:82:2a:e3:d4:e1:59:66:
d4:d9:bf:a9:21:d1:ec:bc:2a:97:35:78:f2:54:dc:
74:41:d6:44:21:ff:b3:b4:55:d6:4b:71:3d:30:f0:
4b:9f:df:f0:62:03:c6:3e:43:a0:7e:6f:b0:a6:b3:
3c:65:5f:7f:0f:95:80:b1:c4:5e:93:fd:28:bd:d4:
50:e8:ae:1f:c9:8c:34:6e:ed:c1:08:3f:21:0d:84:
35:d3:aa:1c:b5:16:21:e9:f1:19:10:6d:3a:d1:b0:
cd:44:a9:8e:2c:3d:7b:dd:07:12:4b:ee:41:71:cd:
b0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:26:61:9C:78:48:33:A3:F7:6C:DF:7F:E4:F7:5B:8E:45:07:85:17
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ByZhnHhIM6P3bN9_5PdbjkUHhRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.71.2.0-92.71.5.255
92.71.26.0-92.71.31.255
92.71.36.0/23
92.71.48.0-92.71.59.255
92.71.62.0/23
135.196.4.0/24
135.196.24.0/23
135.196.28.0/23
135.196.88.0/23
135.196.102.0/23
135.196.108.0/22
135.196.132.0/23
135.196.144.0/22
135.196.156.0/23
135.196.164.0/23
135.196.172.0/23
135.196.176.0/23
194.231.151.0/24
194.231.156.0/24
213.201.154.0/23
213.201.166.0/23
213.201.174.0/23
213.201.182.0/23
213.201.186.0/23
213.201.190.0/23
213.201.194.0-213.201.197.255
213.201.208.0/23
213.201.214.0/23
213.201.218.0/23
213.201.222.0/23
213.201.226.0-213.201.229.255
213.201.234.0/23
213.201.238.0/23
Signature Algorithm: sha256WithRSAEncryption
37:03:0a:50:95:ea:e1:d4:f3:98:28:16:03:28:d7:31:4b:ea:
38:b0:e9:7a:4d:2c:73:64:6e:00:6f:7b:41:17:25:50:3a:e9:
5f:95:b9:94:6a:df:83:99:6f:50:97:12:61:e6:48:57:40:04:
bb:6d:58:f1:e0:30:4f:a3:80:4c:49:95:e9:8d:cf:56:6b:e5:
61:76:27:6e:cf:a9:ef:c1:a6:eb:b2:e1:30:f3:72:7a:27:c7:
c7:69:53:6c:6c:26:47:58:f4:eb:8f:f6:f0:ae:f9:7a:b1:da:
ba:56:41:85:4d:c7:72:f2:47:eb:9d:83:42:13:98:cc:2e:78:
68:6d:f5:90:75:52:7d:48:88:2c:74:5f:c1:d8:11:01:fb:f7:
8b:e1:9d:f5:1a:a1:3d:6d:91:86:bc:29:65:7c:09:fa:14:e0:
70:55:de:17:18:4f:cf:d1:ba:7d:e2:cc:04:e4:71:55:40:21:
9b:21:a6:0e:27:20:b6:e2:a7:aa:f6:03:ba:f2:7c:70:b9:aa:
63:d8:df:ac:9b:77:b8:aa:5c:d4:5e:32:ad:4f:56:ae:24:81:
27:32:74:e1:fe:16:6e:86:b8:7c:6b:79:96:76:6d:85:97:90:
de:ac:a3:ee:31:fe:d7:09:18:32:8d:e2:b2:f4:96:c2:45:89:
7e:d6:7f:7a
-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgISAZhe8U4K3qbkRtY1ScAnuZ6kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjUwNzMxMDUyNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzI2NjE5Yzc4NDgzM2EzZjc2Y2RmN2ZlNGY3NWI4ZTQ1MDc4NTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBjiaUvDKO7bvVvmrdkqQwXEcQcf
wMnhpn7yirct1Wl0tXArievoRKsDvJJeOKTMPz0VTzrUz3ZZ37m5kVxbljbZOdd3
i+MUlEYUFeg7pIaO6fwgENYZyF4P1fWKhWqv8tqHVR8JMUTGlmPs06gwrqNgGHOr
k+urRFwtzEzRkLjBvG1+zZyHROBtAbuqRoIq49ThWWbU2b+pIdHsvCqXNXjyVNx0
QdZEIf+ztFXWS3E9MPBLn9/wYgPGPkOgfm+wprM8ZV9/D5WAscRek/0ovdRQ6K4f
yYw0bu3BCD8hDYQ106octRYh6fEZEG060bDNRKmOLD173QcSS+5Bcc2wSwIDAQAB
o4IC9zCCAvMwHQYDVR0OBBYEFAcmYZx4SDOj92zff+T3W45FB4UXMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvQnlaaG5IaElNNlAzYk45XzVQZGJqa1VIaFJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBCwYIKwYBBQUHAQcBAf8EgfswgfgwgfUEAgABMIHuMAwD
BAFcRwIDBAFcRwQwDAMEAVxHGgMEBVxHAAMEAVxHJDAMAwQEXEcwAwQCXEc4AwQB
XEc+AwQAh8QEAwQBh8QYAwQBh8QcAwQBh8RYAwQBh8RmAwQCh8RsAwQBh8SEAwQC
h8SQAwQBh8ScAwQBh8SkAwQBh8SsAwQBh8SwAwQAwueXAwQAwuecAwQB1cmaAwQB
1cmmAwQB1cmuAwQB1cm2AwQB1cm6AwQB1cm+MAwDBAHVycIDBAHVycQDBAHVydAD
BAHVydYDBAHVydoDBAHVyd4wDAMEAdXJ4gMEAdXJ5AMEAdXJ6gMEAdXJ7jANBgkq
hkiG9w0BAQsFAAOCAQEANwMKUJXq4dTzmCgWAyjXMUvqOLDpek0sc2RuAG97QRcl
UDrpX5W5lGrfg5lvUJcSYeZIV0AEu21Y8eAwT6OATEmV6Y3PVmvlYXYnbs+p78Gm
67LhMPNyeifHx2lTbGwmR1j064/28K75erHaulZBhU3HcvJH652DQhOYzC54aG31
kHVSfUiILHRfwdgRAfv3i+Gd9RqhPW2RhrwpZXwJ+hTgcFXeFxhPz9G6feLMBORx
VUAhmyGmDicgtuKnqvYDuvJ8cLmqY9jfrJt3uKpc1F4yrU9WriSBJzJ04f4Wboa4
fGt5lnZthZeQ3qyj7jH+1wkYMo3isvSWwkWJftZ/eg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:10:09 2025 by rpki-client