Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/1fzwqnVQ-uC8DRGBFckL0TFuaJE.roa
File: 1fzwqnVQ-uC8DRGBFckL0TFuaJE.roa (raw, json)
Hash identifier: MKALA2cT9jrH9wjgPOVEy66zvPZj2oubltjFS5St/wY=
Subject key identifier: D5:FC:F0:AA:75:50:FA:E0:BC:0D:11:81:15:C9:0B:D1:31:6E:68:91
Certificate issuer: /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Certificate serial: 0194F49AF1E2AA909750D449E04E9FA97B98
Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/1fzwqnVQ-uC8DRGBFckL0TFuaJE.roa
Signing time: Tue 11 Feb 2025 10:43:02 +0000
ROA not before: Tue 11 Feb 2025 10:43:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31293
IP address blocks: 185.118.241.0/24 maxlen: 24
185.118.242.0/24 maxlen: 24
185.118.243.0/24 maxlen: 24
194.150.116.0/22 maxlen: 22
194.150.116.0/24 maxlen: 24
194.150.117.0/24 maxlen: 24
194.150.118.0/24 maxlen: 24
194.150.119.0/24 maxlen: 24
2a06:9680::/29 maxlen: 48
2a06:9680:1::/48 maxlen: 48
2a06:9680:2::/48 maxlen: 48
2a06:9680:3::/48 maxlen: 48
2a06:9680:4::/48 maxlen: 48
2a06:9680:5::/48 maxlen: 48
2a06:9680:6::/48 maxlen: 48
2a06:9680:7::/48 maxlen: 48
2a06:9680:8::/48 maxlen: 48
2a06:9680:9::/48 maxlen: 48
2a06:9680:a::/48 maxlen: 48
2a06:9680:b::/48 maxlen: 48
2a06:9680:c::/48 maxlen: 48
2a06:9680:d::/48 maxlen: 48
2a06:9680:e::/48 maxlen: 48
2a06:9680:f::/48 maxlen: 48
2a06:9680:10::/48 maxlen: 48
2a06:9680:11::/48 maxlen: 48
2a06:9680:12::/48 maxlen: 48
2a06:9680:13::/48 maxlen: 48
2a06:9680:14::/48 maxlen: 48
2a06:9680:15::/48 maxlen: 48
2a06:9680:16::/48 maxlen: 48
2a06:9680:17::/48 maxlen: 48
2a06:9680:18::/48 maxlen: 48
2a06:9680:19::/48 maxlen: 48
2a06:9680:1a::/48 maxlen: 48
2a06:9680:1b::/48 maxlen: 48
2a06:9680:1c::/48 maxlen: 48
2a06:9680:1d::/48 maxlen: 48
2a06:9680:1e::/48 maxlen: 48
2a06:9680:1f::/48 maxlen: 48
2a06:9680:20::/48 maxlen: 48
2a06:9680:21::/48 maxlen: 48
2a06:9680:22::/48 maxlen: 48
2a06:9680:23::/48 maxlen: 48
2a06:9680:24::/48 maxlen: 48
2a06:9680:25::/48 maxlen: 48
2a06:9680:26::/48 maxlen: 48
2a06:9680:27::/48 maxlen: 48
2a06:9680:28::/48 maxlen: 48
2a06:9680:29::/48 maxlen: 48
2a06:9680:2a::/48 maxlen: 48
2a06:9680:2b::/48 maxlen: 48
2a06:9680:2c::/48 maxlen: 48
2a06:9680:2d::/48 maxlen: 48
2a06:9680:2e::/48 maxlen: 48
2a06:9680:2f::/48 maxlen: 48
2a06:9680:30::/48 maxlen: 48
2a06:9680:31::/48 maxlen: 48
2a06:9680:32::/48 maxlen: 48
2a06:9680:33::/48 maxlen: 48
2a06:9680:34::/48 maxlen: 48
2a06:9680:35::/48 maxlen: 48
2a06:9680:36::/48 maxlen: 48
2a06:9680:37::/48 maxlen: 48
2a06:9680:38::/48 maxlen: 48
2a06:9680:39::/48 maxlen: 48
2a06:9680:3a::/48 maxlen: 48
2a06:9680:3b::/48 maxlen: 48
2a06:9680:3c::/48 maxlen: 48
2a06:9680:3d::/48 maxlen: 48
2a06:9680:3e::/48 maxlen: 48
2a06:9680:3f::/48 maxlen: 48
2a06:9680:40::/48 maxlen: 48
2a06:9680:41::/48 maxlen: 48
2a06:9680:42::/48 maxlen: 48
2a06:9680:43::/48 maxlen: 48
2a06:9682::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 12 Feb 2025 10:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f4:9a:f1:e2:aa:90:97:50:d4:49:e0:4e:9f:a9:7b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Validity
Not Before: Feb 11 10:43:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5fcf0aa7550fae0bc0d118115c90bd1316e6891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dd:0f:00:df:47:7b:ff:56:d0:a7:23:77:2f:
7e:2e:58:93:1f:e6:8a:89:36:38:15:6e:5e:59:21:
9c:b1:ac:86:ef:ba:85:7b:c6:c5:f4:e2:36:4e:86:
cb:10:2b:2f:05:0e:f9:15:ca:d3:0f:f1:b2:2b:7e:
94:64:04:e8:9d:75:eb:d5:99:a5:a4:8d:29:90:9b:
fd:1f:ad:58:32:ec:f4:d3:2f:a9:63:16:86:a9:9c:
ab:43:6a:a0:de:f0:34:c3:e0:1a:a9:6e:ab:ed:3b:
5f:10:06:f0:91:fb:e0:63:4d:5d:eb:62:4c:e2:66:
29:b3:d4:16:8d:65:b0:66:ce:9b:5b:64:32:18:78:
0f:db:4a:d6:62:70:19:ac:1e:03:b9:df:75:32:9b:
f1:5a:ed:48:f0:a6:d8:ca:be:e9:59:3e:73:95:45:
48:13:41:7f:e3:b2:0f:b9:bd:83:c2:6d:7e:d9:fc:
07:69:92:01:ef:3e:d6:56:9f:13:c3:e2:7e:0e:56:
6d:c0:f5:86:ca:6e:dd:1a:41:06:ef:72:81:b9:e6:
db:f8:c3:7d:35:13:29:43:e7:55:f9:13:32:96:40:
05:04:e9:df:a2:68:57:10:bd:4f:69:88:c5:4c:c7:
71:56:99:07:38:f0:0d:b1:2f:0d:bc:be:8f:69:1b:
bc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FC:F0:AA:75:50:FA:E0:BC:0D:11:81:15:C9:0B:D1:31:6E:68:91
X509v3 Authority Key Identifier:
keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/1fzwqnVQ-uC8DRGBFckL0TFuaJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.241.0-185.118.243.255
194.150.116.0/22
IPv6:
2a06:9680::/29
Signature Algorithm: sha256WithRSAEncryption
89:ee:2e:cf:84:73:7b:f4:1e:60:3d:bb:75:f8:77:3c:17:36:
9b:9f:47:4e:9f:c6:eb:aa:60:95:59:56:92:17:e6:a4:7e:ef:
fc:2a:11:f0:c0:e4:74:6d:78:fc:c1:d4:5c:b2:bd:8c:bd:91:
1f:78:f7:43:8a:7c:84:1b:b2:ed:c8:42:81:b0:80:96:f9:73:
7f:79:fc:64:8b:ff:1d:3d:91:84:03:05:97:38:50:1f:fd:85:
7c:83:6a:b7:a9:2d:ea:b8:fd:bf:55:b8:2b:84:de:d3:e2:92:
7a:d9:de:5a:ae:60:7a:fa:95:2e:4a:62:13:b4:1a:03:b1:26:
0a:89:a5:1e:30:8a:3e:7f:95:dc:8c:cc:76:5a:42:ce:20:36:
d1:e2:b4:64:04:f4:b0:63:90:17:db:41:8d:d4:5b:0a:dc:16:
7e:76:07:4b:e3:0a:5e:98:76:af:23:9c:fb:c6:3f:35:ac:82:
90:1e:06:db:d2:9a:3f:54:90:bd:59:4a:2f:79:de:01:d8:b7:
b8:90:da:88:a6:67:6b:6f:cc:82:22:9e:75:fe:2d:a5:7c:74:
cf:15:df:b3:e2:68:26:37:32:8f:6f:d0:53:65:fa:86:a6:80:
80:9d:0b:78:1d:20:fd:ed:46:23:14:34:36:41:e8:95:44:a3:
50:ec:ad:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:27:30 2025 by rpki-client