Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/M_qoRp8lt_gOy1-REcl8yl3aQn0.roa
File: M_qoRp8lt_gOy1-REcl8yl3aQn0.roa (raw, json)
Hash identifier: YdzxwQ/l+i2OR5wDpRsTCLTvsiOdK1kPI1PYK+aI0IE=
Subject key identifier: 33:FA:A8:46:9F:25:B7:F8:0E:CB:5F:91:11:C9:7C:CA:5D:DA:42:7D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0196CD5261E5F3E65E6133F1435C4FE1508D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/M_qoRp8lt_gOy1-REcl8yl3aQn0.roa
Signing time: Wed 14 May 2025 05:44:10 +0000
ROA not before: Wed 14 May 2025 05:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.104.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.151.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.217.0/24 maxlen: 24
84.32.223.0/24 maxlen: 24
84.32.230.0/24 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.66.0/23 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.127.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Jun 2025 19:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:52:61:e5:f3:e6:5e:61:33:f1:43:5c:4f:e1:50:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 14 05:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33faa8469f25b7f80ecb5f9111c97cca5dda427d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:97:b3:8c:b8:16:dd:a7:ee:ce:c3:d0:89:2c:
9a:bb:35:9c:f3:cf:7e:3a:7a:e6:54:f1:31:09:13:
9c:0f:36:3c:9e:0e:9f:99:6f:c7:44:bb:1c:d7:b4:
88:4c:06:04:fe:7d:96:8a:83:1f:3a:2d:aa:16:5d:
02:af:bc:1e:c5:10:52:8e:be:ab:af:23:c8:a7:ce:
ba:a6:2f:c6:e9:bf:92:6a:7d:aa:57:e8:cd:e5:cb:
90:fb:87:2e:08:24:f5:b0:4e:52:04:a8:b5:b3:ee:
8d:ef:99:6c:db:6d:9f:b7:14:c3:08:a5:09:06:c5:
4e:4f:69:5e:e3:47:6c:00:18:69:4e:1c:ce:f3:52:
37:cc:cd:34:bb:65:f4:8f:5b:31:a7:74:9d:08:33:
f5:a0:b0:1f:3d:3d:fd:6e:d5:9c:a4:60:25:6f:76:
a8:c2:af:e0:78:5e:bc:15:47:d5:73:c1:91:d6:60:
dd:a6:f5:d2:7b:84:dd:0b:f0:5a:6f:be:6b:af:9c:
4e:35:d9:74:38:34:d3:ce:69:32:f0:5e:7e:c3:66:
86:c5:89:0b:ea:43:7b:7b:a9:27:26:29:25:9a:2a:
95:5f:37:db:2a:f7:23:b0:4d:ae:5e:34:e0:62:5b:
8a:61:54:4d:a7:6e:6e:48:9e:3c:2f:59:09:8e:da:
b5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FA:A8:46:9F:25:B7:F8:0E:CB:5F:91:11:C9:7C:CA:5D:DA:42:7D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/M_qoRp8lt_gOy1-REcl8yl3aQn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0-84.32.8.255
84.32.20.0/22
84.32.46.0/23
84.32.64.0/24
84.32.104.0/24
84.32.148.0/22
84.32.174.0/23
84.32.214.0/23
84.32.217.0/24
84.32.223.0/24
84.32.230.0/24
84.32.244.0/22
88.216.22.0/23
88.216.44.0/23
88.216.66.0/23
88.216.93.0/24
88.216.127.0/24
88.216.130.0/23
88.216.134.0/23
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
39:fa:3c:df:6d:89:fa:ea:00:39:03:83:c0:bf:db:df:61:e4:
c7:03:3c:62:48:8e:33:60:36:09:8c:6b:78:4d:96:7d:0d:0f:
1d:3e:9e:ce:cc:60:a5:da:bb:e7:d1:33:0c:83:b6:e3:7e:c4:
3a:88:8e:a2:61:4b:14:d5:47:9a:0e:66:f6:e0:34:13:a6:6f:
e7:58:4d:52:84:70:77:98:96:8f:30:7c:36:0f:20:a1:9e:ff:
12:de:70:4d:db:e6:7a:97:96:79:dd:81:9a:26:1e:51:0d:9f:
9f:ba:58:69:59:67:41:6b:7f:96:41:e0:2e:e8:8a:a3:a4:50:
7a:fa:78:88:50:e5:6f:de:8a:e6:bb:de:e5:84:14:f5:8c:fd:
10:11:2e:ba:75:69:10:b3:ff:bf:0b:0e:5c:58:9e:f3:38:61:
c2:dc:5a:6d:f1:23:ae:51:33:e7:f8:77:3c:0f:39:70:4c:1c:
6d:6c:e1:55:6f:35:94:29:7b:3f:4a:eb:30:73:6e:c1:9a:00:
fe:c9:7b:b4:bb:09:63:51:bc:28:ee:f1:62:ee:fb:e0:df:b1:
27:cb:4e:bd:e4:b7:6e:30:b1:ed:bb:45:62:7c:f8:bb:3f:7a:
9d:fe:84:05:ac:6d:8e:45:1b:08:11:78:ce:05:16:5a:7c:15:
93:53:fe:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:59:11 2025 by rpki-client