Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5g5t7DXdiZMDFoZfcGBc2QWXaB8.roa
File: 5g5t7DXdiZMDFoZfcGBc2QWXaB8.roa (raw, json)
Hash identifier: q4KGl2E3hUuqMCbBCkLbdKe2K/curuNE+4HS94yPDGg=
Subject key identifier: E6:0E:6D:EC:35:DD:89:93:03:16:86:5F:70:60:5C:D9:05:97:68:1F
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0195041017D787093DF41A8133B27BA39422
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5g5t7DXdiZMDFoZfcGBc2QWXaB8.roa
Signing time: Fri 14 Feb 2025 10:45:18 +0000
ROA not before: Fri 14 Feb 2025 10:45:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 128.0.118.0/24 maxlen: 32
185.205.68.0/24 maxlen: 32
194.113.172.0/24 maxlen: 32
Validation: Failed, certificate revoked on Fri 14 Feb 2025 11:39:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:04:10:17:d7:87:09:3d:f4:1a:81:33:b2:7b:a3:94:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Feb 14 10:45:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e60e6dec35dd89930316865f70605cd90597681f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:6d:db:07:eb:56:12:ba:d9:5a:0b:21:8c:
ca:01:05:d3:6f:5c:1a:56:0e:55:a0:10:7b:6b:58:
e8:d3:01:40:e4:16:05:d9:53:1f:af:a0:6f:91:a1:
c9:69:da:92:94:9b:28:87:5f:25:b8:1c:e2:72:a3:
2c:e4:1a:30:ca:64:48:04:4a:e1:63:8b:60:15:b5:
35:96:5f:6a:67:47:39:03:c3:9b:c3:8d:3f:86:e0:
0b:4f:ca:14:cb:81:7e:b1:9a:61:49:35:e2:9d:7b:
c9:41:65:be:cd:34:24:ba:2b:a1:9e:e1:f9:b7:8c:
08:8f:b7:cc:4e:eb:3e:63:91:d3:b5:ce:43:7a:14:
26:32:11:da:f8:91:1c:8d:4b:4a:98:86:db:b6:2a:
49:da:83:60:7f:dc:b0:10:e3:88:b1:18:c0:96:d0:
5d:71:0d:70:de:2c:31:e6:a4:02:f9:41:31:39:d0:
da:e9:e5:e9:df:ae:73:0f:79:bb:c2:72:14:46:ae:
c0:28:88:51:56:da:fa:c4:e7:0c:ae:f5:f8:89:20:
de:b3:0c:69:0c:02:5e:2e:d0:d7:3b:47:c6:f1:82:
1f:bc:94:bc:c7:0a:c8:10:59:a4:19:7e:a1:ce:3a:
64:ae:83:42:e6:aa:11:46:53:46:2f:65:b7:b9:62:
99:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0E:6D:EC:35:DD:89:93:03:16:86:5F:70:60:5C:D9:05:97:68:1F
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5g5t7DXdiZMDFoZfcGBc2QWXaB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.118.0/24
185.205.68.0/24
194.113.172.0/24
Signature Algorithm: sha256WithRSAEncryption
37:74:7c:7d:f5:00:7a:7c:9a:f3:ea:aa:51:1f:01:c1:a3:36:
db:f5:60:b9:5c:4a:63:9a:80:5f:88:73:9e:d8:6e:8d:e5:ba:
35:16:80:29:4c:82:49:42:28:f5:62:11:59:f8:0c:cf:f9:e4:
87:cc:54:c1:d6:8b:29:da:d0:6b:dd:0c:28:6f:d8:a3:a5:d4:
99:c9:ab:f2:23:00:db:6d:4d:78:5d:ed:cd:3f:9f:c4:a7:cd:
47:80:a2:e0:f4:c1:61:b7:b5:03:75:eb:4c:37:e1:c9:4f:a8:
72:83:0e:37:c7:ac:f7:c8:42:d4:aa:af:92:e2:2d:fb:30:db:
a6:17:6c:06:e2:31:40:f9:d1:49:d4:5c:34:e9:a8:61:ae:92:
e3:59:4f:df:41:99:79:1a:ea:54:0b:11:a3:fb:3e:e1:4e:ea:
3e:b7:1c:49:0f:c9:ac:de:bd:47:84:d3:de:ef:87:3e:68:3e:
0b:4d:9f:7b:55:54:af:79:f3:89:a0:fb:a6:76:06:ed:f0:c1:
32:f7:5e:74:c8:8c:ee:e2:e7:12:97:35:9e:12:2c:2e:b5:0a:
4a:90:92:c5:2a:65:bc:f2:35:18:bf:0f:e9:a6:2f:c7:f0:f8:
03:ab:2f:46:72:8c:84:22:ec:e6:3a:1f:83:15:da:0a:fb:a5:
a5:07:91:14
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZUEEBfXhwk99BqBM7J7o5QiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjUwMjE0MTA0NTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjBlNmRlYzM1ZGQ4OTkzMDMxNjg2NWY3MDYwNWNkOTA1OTc2ODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKlt2wfrVhK62VoLIYzKAQXTb1wa
Vg5VoBB7a1jo0wFA5BYF2VMfr6BvkaHJadqSlJsoh18luBzicqMs5BowymRIBErh
Y4tgFbU1ll9qZ0c5A8Obw40/huALT8oUy4F+sZphSTXinXvJQWW+zTQkuiuhnuH5
t4wIj7fMTus+Y5HTtc5DehQmMhHa+JEcjUtKmIbbtipJ2oNgf9ywEOOIsRjAltBd
cQ1w3iwx5qQC+UExOdDa6eXp365zD3m7wnIURq7AKIhRVtr6xOcMrvX4iSDeswxp
DAJeLtDXO0fG8YIfvJS8xwrIEFmkGX6hzjpkroNC5qoRRlNGL2W3uWKZbwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOYObew13YmTAxaGX3BgXNkFl2gfMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvNWc1dDdEWGRpWk1ERm9aZmNHQmMyUVdYYUI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAgAB2AwQA
uc1EAwQAwnGsMA0GCSqGSIb3DQEBCwUAA4IBAQA3dHx99QB6fJrz6qpRHwHBozbb
9WC5XEpjmoBfiHOe2G6N5bo1FoApTIJJQij1YhFZ+AzP+eSHzFTB1osp2tBr3Qwo
b9ijpdSZyavyIwDbbU14Xe3NP5/Ep81HgKLg9MFht7UDdetMN+HJT6hygw43x6z3
yELUqq+S4i37MNumF2wG4jFA+dFJ1Fw06ahhrpLjWU/fQZl5GupUCxGj+z7hTuo+
txxJD8ms3r1HhNPe74c+aD4LTZ97VVSvefOJoPumdgbt8MEy9150yIzu4ucSlzWe
EiwutQpKkJLFKmW88jUYvw/ppi/H8PgDqy9GcoyEIuzmOh+DFdoK+6WlB5EU
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:50:45 2025 by rpki-client