Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mo9OvlBLkcHw5j7L2QXn9jWAwZA.roa
File: mo9OvlBLkcHw5j7L2QXn9jWAwZA.roa (raw, json)
Hash identifier: UhyVYl1tPQym4+PPYqEspInfxxtBZjySz33U4SUjqjE=
Subject key identifier: 9A:8F:4E:BE:50:4B:91:C1:F0:E6:3E:CB:D9:05:E7:F6:35:80:C1:90
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01963AC4127590F90272AB1DB55F74FDE592
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mo9OvlBLkcHw5j7L2QXn9jWAwZA.roa
Signing time: Tue 15 Apr 2025 18:44:10 +0000
ROA not before: Tue 15 Apr 2025 18:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.59.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.104.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.208.0/23 maxlen: 23
84.32.214.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.34.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.66.0/23 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.127.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 13:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:c4:12:75:90:f9:02:72:ab:1d:b5:5f:74:fd:e5:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 15 18:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a8f4ebe504b91c1f0e63ecbd905e7f63580c190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:2b:eb:54:6f:02:25:5f:be:63:b0:81:f3:
c4:79:cd:ac:ad:27:9e:df:18:3b:45:4d:bf:be:e1:
d6:70:45:98:37:7b:49:46:fe:15:c4:3b:c2:13:14:
33:42:54:94:87:b2:26:92:58:7c:16:47:23:c6:16:
58:64:6f:a9:2a:21:9e:d2:43:5a:d8:f9:a6:ab:8c:
1e:f2:ee:ce:42:89:60:a9:48:92:ab:da:03:a8:f5:
3c:a6:bd:6b:75:a2:39:f4:51:f8:e6:1a:c0:ac:4d:
af:eb:5f:ff:0c:26:80:cb:1f:4e:f4:96:39:43:0b:
ac:c8:9f:99:18:88:95:1e:a0:27:b8:14:fa:1a:ef:
3d:32:88:6a:fc:fd:bb:a7:21:52:71:5d:7f:56:da:
de:6e:8d:43:bf:e0:67:96:99:2f:4e:47:ce:f8:26:
a2:1d:a6:4c:20:01:b4:33:fd:b0:41:f4:3c:f1:c2:
30:dd:ff:20:0b:bd:1c:42:51:bf:c9:e8:e7:ec:f5:
04:85:55:08:8a:6f:c8:57:41:a0:14:50:ed:f9:06:
8e:6b:71:94:7e:12:a9:a0:a9:e4:cc:8a:7b:d9:94:
b3:f3:85:9c:61:61:c4:c9:5f:2d:0a:5a:48:75:4a:
f0:37:dd:00:90:2b:71:13:d8:d8:d3:99:40:ec:6f:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8F:4E:BE:50:4B:91:C1:F0:E6:3E:CB:D9:05:E7:F6:35:80:C1:90
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mo9OvlBLkcHw5j7L2QXn9jWAwZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0-84.32.8.255
84.32.20.0/22
84.32.46.0/23
84.32.59.0/24
84.32.64.0/24
84.32.104.0/24
84.32.148.0/22
84.32.174.0/23
84.32.208.0/23
84.32.214.0/23
84.32.244.0/22
88.216.22.0/23
88.216.34.0/24
88.216.44.0/23
88.216.66.0/23
88.216.93.0/24
88.216.127.0/24
88.216.130.0/23
88.216.134.0/23
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:0f:f8:64:c1:a4:a8:cc:2e:dd:37:b7:84:10:c4:16:f9:8b:
a3:33:f5:b1:26:08:42:1a:1f:3d:a8:7b:8b:c9:98:22:a6:da:
60:02:70:cf:72:ba:63:5b:d1:6e:ef:7e:31:f8:b8:57:42:fb:
f3:92:cf:c0:bd:8b:6a:f1:c0:03:bd:63:0d:3b:b6:60:61:ac:
b5:71:7f:af:54:4f:cc:3b:23:eb:29:96:2a:30:92:dd:22:65:
05:5c:b9:eb:50:5f:4c:53:6e:89:75:97:57:8a:a4:25:1a:01:
96:31:a9:67:98:57:12:ae:cc:d5:1b:32:6b:a8:2b:36:11:29:
11:d3:18:05:7a:61:01:17:44:f7:85:9e:04:1e:0f:73:39:4b:
50:60:fc:f4:21:02:ff:b2:1e:2b:a5:36:7d:62:23:53:7b:4e:
8f:73:47:44:98:93:69:09:3c:ad:fe:b3:3c:83:d7:89:bf:36:
5f:23:54:9f:6f:ee:15:af:d4:1b:b8:a1:b7:39:8c:05:22:0d:
a0:68:d7:3b:83:a1:a9:dc:f0:13:78:b9:00:3d:32:50:59:84:
6f:d4:e0:50:2a:45:8d:3f:c7:48:7c:eb:23:e2:a7:be:01:64:
a5:b7:e2:05:a6:58:44:7c:68:a0:d3:dc:27:73:d6:47:5e:a4:
f3:dd:03:05
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgISAZY6xBJ1kPkCcqsdtV90/eWSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjUwNDE1MTg0NDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YThmNGViZTUwNGI5MWMxZjBlNjNlY2JkOTA1ZTdmNjM1ODBjMTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6Ir61RvAiVfvmOwgfPEec2srSee
3xg7RU2/vuHWcEWYN3tJRv4VxDvCExQzQlSUh7Imklh8FkcjxhZYZG+pKiGe0kNa
2Pmmq4we8u7OQolgqUiSq9oDqPU8pr1rdaI59FH45hrArE2v61//DCaAyx9O9JY5
QwusyJ+ZGIiVHqAnuBT6Gu89Mohq/P27pyFScV1/Vtrebo1Dv+BnlpkvTkfO+Cai
HaZMIAG0M/2wQfQ88cIw3f8gC70cQlG/yejn7PUEhVUIim/IV0GgFFDt+QaOa3GU
fhKpoKnkzIp72ZSz84WcYWHEyV8tClpIdUrwN90AkCtxE9jY05lA7G9trwIDAQAB
o4ICiDCCAoQwHQYDVR0OBBYEFJqPTr5QS5HB8OY+y9kF5/Y1gMGQMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvbW85T3ZsQkxrY0h3NWo3TDJRWG45aldBd1pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijCBhwQCAAEwgYAwDAME
AFQgBwMEAFQgCAMEAlQgFAMEAVQgLgMEAFQgOwMEAFQgQAMEAFQgaAMEAlQglAME
AVQgrgMEAVQg0AMEAVQg1gMEAlQg9AMEAVjYFgMEAFjYIgMEAVjYLAMEAVjYQgME
AFjYXQMEAFjYfwMEAVjYggMEAVjYhgMEAFjY3zANBgkqhkiG9w0BAQsFAAOCAQEA
jQ/4ZMGkqMwu3Te3hBDEFvmLozP1sSYIQhofPah7i8mYIqbaYAJwz3K6Y1vRbu9+
Mfi4V0L785LPwL2LavHAA71jDTu2YGGstXF/r1RPzDsj6ymWKjCS3SJlBVy561Bf
TFNuiXWXV4qkJRoBljGpZ5hXEq7M1Rsya6grNhEpEdMYBXphARdE94WeBB4PczlL
UGD89CEC/7IeK6U2fWIjU3tOj3NHRJiTaQk8rf6zPIPXib82XyNUn2/uFa/UG7ih
tzmMBSINoGjXO4OhqdzwE3i5AD0yUFmEb9TgUCpFjT/HSHzrI+KnvgFkpbfiBaZY
RHxooNPcJ3PWR16k890DBQ==
-----END CERTIFICATE-----
Generated at Tue May 13 09:02:20 2025 by rpki-client