Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/vPHfOpl3HCMf7nTt5OMKhZJw0_s.roa
File: vPHfOpl3HCMf7nTt5OMKhZJw0_s.roa (raw, json)
Hash identifier: 1e9CW0nNXJC8M/WDJTvRKSJpKCoInW4Dzd5s50I72qU=
Subject key identifier: BC:F1:DF:3A:99:77:1C:23:1F:EE:74:ED:E4:E3:0A:85:92:70:D3:FB
Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial: 01960A9257EEDE438BA2AAD0FA5B409F2C96
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/vPHfOpl3HCMf7nTt5OMKhZJw0_s.roa
Signing time: Sun 06 Apr 2025 10:08:05 +0000
ROA not before: Sun 06 Apr 2025 10:08:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212552
IP address blocks: 146.19.130.0/24 maxlen: 24
185.110.191.0/24 maxlen: 24
185.221.237.0/24 maxlen: 24
185.231.59.0/24 maxlen: 24
193.163.201.0/24 maxlen: 24
2a14:7981::/32 maxlen: 32
2a14:7981:467::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 09 Apr 2025 09:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:92:57:ee:de:43:8b:a2:aa:d0:fa:5b:40:9f:2c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
Validity
Not Before: Apr 6 10:08:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcf1df3a99771c231fee74ede4e30a859270d3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:77:7e:d3:24:5a:60:68:0e:c6:65:af:0b:f2:
54:fb:c4:6e:05:aa:9b:e7:83:17:67:42:0c:8f:ca:
40:6e:9d:b8:b1:71:0f:c0:f9:c5:b3:f4:f3:18:9d:
e2:37:e0:21:49:cf:0a:ab:23:be:07:ba:01:d3:7c:
15:e3:4b:2f:48:e0:5b:b0:84:b7:1c:5a:a6:96:8e:
45:76:d2:b5:81:16:60:aa:97:c0:c5:d7:05:35:e1:
82:a4:91:77:a7:b6:f4:b0:79:f7:fe:d4:8f:b8:18:
17:9c:a9:53:9a:3e:3c:ad:c2:f0:cf:4d:a2:11:ed:
8c:9b:48:d0:e7:91:aa:b0:d7:1e:01:a7:2e:13:e9:
0a:8a:44:13:86:e7:58:91:5d:3e:99:01:b3:fb:f4:
2f:55:7a:24:31:e1:ab:5a:25:46:95:1f:bc:53:92:
de:16:8d:bc:73:9a:e7:5e:b3:d7:50:86:3e:a8:1f:
65:1b:6e:0b:27:71:10:06:fb:7a:21:67:7f:2f:60:
53:fa:d9:3c:d7:5c:05:b8:81:c5:f8:f2:ed:97:a6:
10:47:4d:22:9f:91:f3:12:93:01:3d:78:f2:ad:d4:
00:3e:d9:3b:67:b2:2a:71:d5:83:a9:b7:71:00:d0:
9c:53:57:95:32:5b:f9:0f:5e:71:81:0a:85:cc:a5:
2f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F1:DF:3A:99:77:1C:23:1F:EE:74:ED:E4:E3:0A:85:92:70:D3:FB
X509v3 Authority Key Identifier:
keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/vPHfOpl3HCMf7nTt5OMKhZJw0_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.130.0/24
185.110.191.0/24
185.221.237.0/24
185.231.59.0/24
193.163.201.0/24
IPv6:
2a14:7981::/32
Signature Algorithm: sha256WithRSAEncryption
6e:28:37:a9:60:e1:65:44:a8:10:ac:0f:74:4b:82:14:d3:fb:
00:64:03:94:4a:00:0e:16:e1:ef:9a:02:c7:c7:c4:0c:c5:05:
e3:36:ad:85:fe:0c:6f:60:52:c0:dc:77:e8:fa:96:1e:6a:c3:
4b:a1:71:f1:e6:47:85:86:20:02:15:40:2c:99:1c:8b:12:da:
cf:e6:5a:a7:1b:3d:5d:71:3c:1d:4d:7b:6a:8a:1c:08:99:e0:
c1:21:cf:67:c9:2a:31:25:ff:1d:51:c2:0a:72:07:6a:18:4e:
1c:ac:c9:c3:f7:db:77:35:e2:a0:20:34:c6:a0:47:e4:15:34:
f9:d8:5f:1c:92:70:14:86:f7:8e:de:aa:d6:3a:d4:e2:f2:a6:
6a:fc:e8:1a:e4:c6:88:5d:5f:76:f3:7b:df:02:5b:f3:5e:0f:
b4:04:0f:3a:10:7a:a5:ba:70:b4:c1:44:70:db:59:ad:5c:14:
84:2b:b8:f0:5f:39:f6:74:d8:07:2e:1d:fc:52:b7:21:63:77:
f7:9e:25:27:89:c3:93:5b:af:8e:a3:6c:8a:05:0f:39:53:56:
c3:06:ce:68:63:84:cf:5f:60:54:83:ff:cf:f3:5d:f9:f9:84:
1a:50:4e:58:a9:7f:0d:ab:24:e9:41:5c:dc:92:89:cd:db:42:
05:bf:32:24
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZYKklfu3kOLoqrQ+ltAnyyWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MzYxNDYxMTliMDQ0NTM5MDgyZTMyNmNjYTkwMzIwMGI4
ZDRiMWEwHhcNMjUwNDA2MTAwODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2YxZGYzYTk5NzcxYzIzMWZlZTc0ZWRlNGUzMGE4NTkyNzBkM2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXd+0yRaYGgOxmWvC/JU+8RuBaqb
54MXZ0IMj8pAbp24sXEPwPnFs/TzGJ3iN+AhSc8KqyO+B7oB03wV40svSOBbsIS3
HFqmlo5FdtK1gRZgqpfAxdcFNeGCpJF3p7b0sHn3/tSPuBgXnKlTmj48rcLwz02i
Ee2Mm0jQ55GqsNceAacuE+kKikQThudYkV0+mQGz+/QvVXokMeGrWiVGlR+8U5Le
Fo28c5rnXrPXUIY+qB9lG24LJ3EQBvt6IWd/L2BT+tk811wFuIHF+PLtl6YQR00i
n5HzEpMBPXjyrdQAPtk7Z7IqcdWDqbdxANCcU1eVMlv5D15xgQqFzKUv/QIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFLzx3zqZdxwjH+507eTjCoWScNP7MB8GA1UdIwQY
MBaAFIU2FGEZsERTkILjJsypAyALjUsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFRZVVlSbXdSRk9RZ3VNbXpLa0RJQXVOU3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDVmOTMtYWM1YS00MWUzLTgwYzMt
MGM2NzIxN2NjOTZiLzEvdlBIZk9wbDNIQ01mN25UdDVPTUtoWkp3MF9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni81ZDVmOTMtYWM1YS00MWUzLTgwYzMtMGM2NzIxN2NjOTZi
LzEvaFRZVVlSbXdSRk9RZ3VNbXpLa0RJQXVOU3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAkhOCAwQA
uW6/AwQAud3tAwQAuec7AwQAwaPJMA0EAgACMAcDBQAqFHmBMA0GCSqGSIb3DQEB
CwUAA4IBAQBuKDepYOFlRKgQrA90S4IU0/sAZAOUSgAOFuHvmgLHx8QMxQXjNq2F
/gxvYFLA3Hfo+pYeasNLoXHx5keFhiACFUAsmRyLEtrP5lqnGz1dcTwdTXtqihwI
meDBIc9nySoxJf8dUcIKcgdqGE4crMnD99t3NeKgIDTGoEfkFTT52F8cknAUhveO
3qrWOtTi8qZq/Oga5MaIXV9283vfAlvzXg+0BA86EHqlunC0wURw21mtXBSEK7jw
Xzn2dNgHLh38UrchY3f3niUnicOTW6+Oo2yKBQ85U1bDBs5oY4TPX2BUg//P8135
+YQaUE5YqX8NqyTpQVzckonN20IFvzIk
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:42:10 2025 by rpki-client