Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/H1KkCQqGSGmEjGlD21spbstKNL0.roa
File: H1KkCQqGSGmEjGlD21spbstKNL0.roa (raw, json)
Hash identifier: 2+zLzGUzRvNbW/R971JdDafLkh0d+WFbLOUv0SFes+M=
Subject key identifier: 1F:52:A4:09:0A:86:48:69:84:8C:69:43:DB:5B:29:6E:CB:4A:34:BD
Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial: 0195896AF93E8E4188ECF76052D6EA36AA60
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/H1KkCQqGSGmEjGlD21spbstKNL0.roa
Signing time: Wed 12 Mar 2025 08:14:03 +0000
ROA not before: Wed 12 Mar 2025 08:14:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42689
IP address blocks: 86.109.88.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Mar 2025 10:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:6a:f9:3e:8e:41:88:ec:f7:60:52:d6:ea:36:aa:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Validity
Not Before: Mar 12 08:14:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f52a4090a864869848c6943db5b296ecb4a34bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c1:ae:f9:90:ed:b4:f7:6b:31:cb:89:e4:a7:
a2:5c:5e:4b:b0:86:a7:c4:b7:d6:7b:77:2b:df:32:
fe:94:07:d9:36:e1:01:12:75:fd:95:d5:e3:02:90:
48:34:54:dc:24:ae:b7:18:37:72:c2:2c:9b:f2:91:
06:60:38:cf:6e:41:e0:f7:c5:9a:92:42:47:2e:c3:
10:9e:79:95:8b:09:8a:14:62:5d:bc:33:af:fe:81:
04:da:54:d1:74:a9:a3:5c:cc:0a:3b:bd:e1:d7:af:
e2:2d:e9:85:a4:4b:f6:2e:3e:07:be:9d:54:c8:a0:
11:1a:72:06:0a:9d:b4:63:14:fe:1a:f1:37:76:c3:
ca:53:70:a5:e7:9d:44:5c:2d:9d:b1:20:16:02:78:
f7:03:f4:8b:1f:ae:bb:80:c2:76:22:be:de:44:d8:
97:68:d8:e9:fd:e9:5d:ae:52:32:ee:d1:23:d9:b5:
49:d3:7d:6c:b1:a8:fd:47:8e:fc:5d:51:e3:c5:89:
aa:dd:df:dc:ce:ee:f4:b9:95:8e:26:12:25:82:fb:
76:90:4b:7c:84:b5:2e:ac:66:7d:21:bf:c7:4b:20:
06:88:57:6f:a4:e0:59:88:ec:cf:cd:7e:0d:db:f8:
5c:65:2d:79:86:2c:e4:bb:5d:f8:b5:06:aa:8a:10:
09:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:52:A4:09:0A:86:48:69:84:8C:69:43:DB:5B:29:6E:CB:4A:34:BD
X509v3 Authority Key Identifier:
keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/H1KkCQqGSGmEjGlD21spbstKNL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.109.88.0/23
Signature Algorithm: sha256WithRSAEncryption
58:22:4a:58:5d:57:4a:11:51:f4:b7:e7:31:eb:e7:32:18:b0:
82:54:99:e3:2d:1b:fb:bf:8a:9d:81:f7:9e:98:f6:58:d6:59:
91:bb:53:ac:c0:59:c0:32:e8:fc:d7:3b:fe:f4:81:56:90:b0:
2c:c6:95:3e:11:63:f2:84:08:57:57:61:39:3e:f6:00:b5:55:
b0:74:f1:e0:32:24:79:9c:9d:21:30:67:f1:1d:34:ff:4a:19:
a8:5b:74:fb:cb:df:1b:1b:2f:15:7e:b9:65:88:3c:5b:61:81:
a5:7d:97:fe:f5:68:ef:7d:7b:f9:ab:4f:f7:ec:f0:ab:64:65:
f2:16:48:39:a5:66:92:64:62:6b:fb:ce:ad:9b:04:6a:57:55:
6c:6a:b6:aa:ab:a9:d1:ba:69:67:54:77:8e:ad:63:a9:57:89:
88:59:4b:28:e5:0d:a5:72:3b:3b:d5:3a:73:7c:a2:75:32:e2:
06:65:79:71:17:e9:93:98:a9:f7:79:a3:27:16:36:1e:bd:1c:
04:5c:14:f6:4b:2b:ae:73:d9:64:52:f7:8a:39:ed:b5:4e:e5:
f6:1b:0b:8c:6b:5e:88:4d:44:0e:d0:1f:7f:9d:13:bd:5f:31:
2c:4e:db:4b:6c:55:a2:c3:f8:c4:af:41:23:89:f0:cd:07:0e:
99:6c:33:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWJavk+jkGI7PdgUtbqNqpgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkN2I5ZGZmYWFlMzNlYzJjZjE5YjVhZDRlNDljMWU5ZWIx
ZDlkNjQwHhcNMjUwMzEyMDgxNDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjUyYTQwOTBhODY0ODY5ODQ4YzY5NDNkYjViMjk2ZWNiNGEzNGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8Gu+ZDttPdrMcuJ5KeiXF5LsIan
xLfWe3cr3zL+lAfZNuEBEnX9ldXjApBINFTcJK63GDdywiyb8pEGYDjPbkHg98Wa
kkJHLsMQnnmViwmKFGJdvDOv/oEE2lTRdKmjXMwKO73h16/iLemFpEv2Lj4Hvp1U
yKARGnIGCp20YxT+GvE3dsPKU3Cl551EXC2dsSAWAnj3A/SLH667gMJ2Ir7eRNiX
aNjp/eldrlIy7tEj2bVJ031ssaj9R478XVHjxYmq3d/czu70uZWOJhIlgvt2kEt8
hLUurGZ9Ib/HSyAGiFdvpOBZiOzPzX4N2/hcZS15hizku134tQaqihAJiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB9SpAkKhkhphIxpQ9tbKW7LSjS9MB8GA1UdIwQY
MBaAFD17nf+q4z7Czxm1rU5JwenrHZ1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80OTE5NWItMjkwOS00NmUwLWFiY2Ut
NDIyNTIzYzRlNjhiLzEvSDFLa0NRcUdTR21FakdsRDIxc3Bic3RLTkwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80OTE5NWItMjkwOS00NmUwLWFiY2UtNDIyNTIzYzRlNjhi
LzEvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVm1YMA0G
CSqGSIb3DQEBCwUAA4IBAQBYIkpYXVdKEVH0t+cx6+cyGLCCVJnjLRv7v4qdgfee
mPZY1lmRu1OswFnAMuj81zv+9IFWkLAsxpU+EWPyhAhXV2E5PvYAtVWwdPHgMiR5
nJ0hMGfxHTT/ShmoW3T7y98bGy8VfrlliDxbYYGlfZf+9WjvfXv5q0/37PCrZGXy
Fkg5pWaSZGJr+86tmwRqV1Vsaraqq6nRumlnVHeOrWOpV4mIWUso5Q2lcjs71Tpz
fKJ1MuIGZXlxF+mTmKn3eaMnFjYevRwEXBT2Syuuc9lkUveKOe21TuX2GwuMa16I
TUQO0B9/nRO9XzEsTttLbFWiw/jEr0EjifDNBw6ZbDNZ
-----END CERTIFICATE-----
Generated at Thu May 1 22:59:48 2025 by rpki-client