Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/9_s6Brtouh8rv8e9LX1kMW1wC0U.roa
File: 9_s6Brtouh8rv8e9LX1kMW1wC0U.roa (raw, json)
Hash identifier: YTsIkvw0w+KZNkGC+T0gK7NA0rTCIyr6esuWPKdpEMQ=
Subject key identifier: F7:FB:3A:06:BB:68:BA:1F:2B:BF:C7:BD:2D:7D:64:31:6D:70:0B:45
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 01963F5B9CC9249C411F8951761720750AC2
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/9_s6Brtouh8rv8e9LX1kMW1wC0U.roa
Signing time: Wed 16 Apr 2025 16:08:10 +0000
ROA not before: Wed 16 Apr 2025 16:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 194.238.80.0/22 maxlen: 24
194.238.84.0/22 maxlen: 24
194.238.88.0/22 maxlen: 24
213.18.192.0/22 maxlen: 24
217.179.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:5b:9c:c9:24:9c:41:1f:89:51:76:17:20:75:0a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Apr 16 16:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7fb3a06bb68ba1f2bbfc7bd2d7d64316d700b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:41:8a:e3:80:31:d8:19:d8:50:b8:21:b5:
90:6d:c3:fd:d7:3a:92:0c:09:7f:cf:b9:9f:4b:a0:
36:16:dd:67:0c:fe:2b:94:29:01:66:0e:8d:2d:42:
a8:77:96:09:ce:92:f6:9e:4e:18:3b:d2:1f:cb:11:
52:0e:20:cc:c4:19:f7:29:00:26:dc:d8:75:ab:f5:
7b:b1:87:79:f3:7e:34:c2:06:c5:fd:bb:fd:cf:23:
e3:b5:67:d7:58:ca:e6:29:36:eb:e1:a5:34:5c:5d:
2c:82:a8:63:e7:6c:ba:2d:f5:fe:b5:02:5e:43:c7:
57:ea:b3:74:59:8f:93:57:51:bb:36:8c:99:8b:cd:
9b:da:3a:bf:80:0f:fd:ea:10:02:c3:2b:a0:02:da:
59:07:8e:8f:a9:05:63:fe:f3:90:04:9d:6e:9b:a4:
44:af:ea:bc:27:b9:03:cf:39:09:9b:a2:65:e1:21:
e9:bf:bb:01:e7:ae:51:a1:f3:d4:5e:5d:34:73:72:
83:14:83:ee:ba:71:7f:f3:dc:5c:24:98:d5:b4:3e:
4f:71:aa:25:64:38:fa:dd:07:bc:6d:54:13:da:9e:
0e:b1:7f:55:12:59:28:f6:9a:dc:b5:12:31:d5:4f:
94:7f:14:29:f7:b2:41:f5:18:70:4f:3b:0c:d0:e0:
eb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FB:3A:06:BB:68:BA:1F:2B:BF:C7:BD:2D:7D:64:31:6D:70:0B:45
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/9_s6Brtouh8rv8e9LX1kMW1wC0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.238.80.0-194.238.91.255
213.18.192.0/22
217.179.80.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:5e:d1:51:57:b6:fd:f4:35:6a:f3:12:a2:56:9e:85:52:94:
dc:d8:6a:6a:86:a0:e4:af:74:32:58:10:d1:68:8c:9c:29:ed:
04:8f:5b:e1:7a:de:15:28:ca:0f:25:e8:2d:f4:e5:18:66:f4:
20:c4:74:38:8a:17:b5:65:4d:0d:61:9c:da:40:20:52:86:4b:
fe:e5:12:8f:ed:59:5a:e6:58:53:46:a2:b9:7f:74:31:98:91:
85:7d:22:96:f2:58:5b:c7:dd:4c:6b:5f:87:34:3b:55:7a:0f:
a5:08:f3:36:9e:19:61:d6:17:a4:e3:d8:d5:7d:8b:0f:cc:a5:
be:df:e2:f5:19:d6:89:34:f6:c2:ac:29:c9:ca:6f:99:fe:49:
73:fd:d9:00:49:d4:87:e8:67:0b:70:35:46:88:6f:54:e2:07:
a4:aa:c0:dd:1c:39:45:98:39:1d:d7:de:f0:59:b6:94:39:55:
25:55:e7:47:0b:8e:c1:33:61:19:2e:0a:ff:b1:27:55:ea:00:
0e:21:d7:83:10:eb:3f:bf:b3:88:82:ff:7d:99:5e:13:7e:39:
b0:51:a0:23:23:d7:14:b6:89:a5:47:9d:61:8c:27:27:3c:42:
2b:b0:f0:f3:ed:e9:23:93:00:68:0e:28:ee:c0:05:d4:eb:58:
6a:5c:cd:5a
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZY/W5zJJJxBH4lRdhcgdQrCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy
ZGE3NGQwHhcNMjUwNDE2MTYwODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2ZiM2EwNmJiNjhiYTFmMmJiZmM3YmQyZDdkNjQzMTZkNzAwYjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVlBiuOAMdgZ2FC4IbWQbcP91zqS
DAl/z7mfS6A2Ft1nDP4rlCkBZg6NLUKod5YJzpL2nk4YO9IfyxFSDiDMxBn3KQAm
3Nh1q/V7sYd58340wgbF/bv9zyPjtWfXWMrmKTbr4aU0XF0sgqhj52y6LfX+tQJe
Q8dX6rN0WY+TV1G7NoyZi82b2jq/gA/96hACwyugAtpZB46PqQVj/vOQBJ1um6RE
r+q8J7kDzzkJm6Jl4SHpv7sB565RofPUXl00c3KDFIPuunF/89xcJJjVtD5Pcaol
ZDj63Qe8bVQT2p4OsX9VElko9prctRIx1U+UfxQp97JB9RhwTzsM0ODrxQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFPf7Oga7aLofK7/HvS19ZDFtcAtFMB8GA1UdIwQY
MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt
YzE5OTQyNzM3ZTZkLzEvOV9zNkJydG91aDhydjhlOUxYMWtNVzF3QzBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk
LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBATC7lAD
BALC7lgDBALVEsADBALZs1AwDQYJKoZIhvcNAQELBQADggEBAF9e0VFXtv30NWrz
EqJWnoVSlNzYamqGoOSvdDJYENFojJwp7QSPW+F63hUoyg8l6C305Rhm9CDEdDiK
F7VlTQ1hnNpAIFKGS/7lEo/tWVrmWFNGorl/dDGYkYV9IpbyWFvH3UxrX4c0O1V6
D6UI8zaeGWHWF6Tj2NV9iw/Mpb7f4vUZ1ok09sKsKcnKb5n+SXP92QBJ1IfoZwtw
NUaIb1TiB6SqwN0cOUWYOR3X3vBZtpQ5VSVV50cLjsEzYRkuCv+xJ1XqAA4h14MQ
6z+/s4iC/32ZXhN+ObBRoCMj1xS2iaVHnWGMJyc8Qiuw8PPt6SOTAGgOKO7ABdTr
WGpczVo=
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:01:51 2025 by rpki-client