Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/qfSwu8LVqZ70Px9fZJf-MAvSvTc.roa
File: qfSwu8LVqZ70Px9fZJf-MAvSvTc.roa (raw, json)
Hash identifier: Oxgl8dqU8Wj2IGZx7RE850lHRJaTve1lvHI5hsCmL9k=
Subject key identifier: A9:F4:B0:BB:C2:D5:A9:9E:F4:3F:1F:5F:64:97:FE:30:0B:D2:BD:37
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019662348238028E234DDBCB41F323202230
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/qfSwu8LVqZ70Px9fZJf-MAvSvTc.roa
Signing time: Wed 23 Apr 2025 10:32:10 +0000
ROA not before: Wed 23 Apr 2025 10:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198160
IP address blocks: 89.36.32.0/24 maxlen: 24
89.36.33.0/24 maxlen: 24
185.121.133.0/24 maxlen: 24
185.144.71.0/24 maxlen: 24
2a0c:2501::/32 maxlen: 32
2a14:6780::/29 maxlen: 48
2a14:6780::/32 maxlen: 32
2a14:6781::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 29 Apr 2025 12:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:62:34:82:38:02:8e:23:4d:db:cb:41:f3:23:20:22:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Apr 23 10:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9f4b0bbc2d5a99ef43f1f5f6497fe300bd2bd37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:54:f8:5e:88:84:de:cc:3a:91:aa:43:fd:2f:
86:b1:63:cc:05:f3:7c:1f:d3:5b:c5:2a:0c:0e:97:
69:ca:98:7f:33:65:ea:b2:2e:bb:65:c2:57:d9:70:
2c:eb:4a:7e:98:f4:64:15:c7:46:25:07:1a:db:a3:
cd:d3:3d:15:42:61:80:de:f5:df:f4:0c:31:ec:95:
4c:6d:89:8b:75:8b:ed:54:10:74:d9:f3:7d:5d:c3:
f9:8d:29:6d:70:85:8c:d6:64:70:8a:a3:cd:ec:43:
e9:72:77:6b:31:fa:76:f3:77:38:18:ba:86:9d:c2:
60:b4:cf:d1:dc:45:43:ed:f9:8f:0c:f3:a9:3a:3f:
fe:39:d3:62:8b:72:a8:dc:0d:0e:51:b2:5e:7e:7b:
f1:f4:01:0b:b9:62:b2:c6:f9:ed:18:e3:df:8f:df:
da:04:28:c1:10:85:09:09:52:17:0d:71:26:76:12:
e3:54:c5:a8:1a:b1:fa:17:f8:70:7c:de:e1:65:50:
c7:9c:ad:e7:8f:2d:2d:a4:ad:da:3b:60:38:c9:ff:
bf:10:29:f0:46:7c:23:2c:8c:3e:6c:0a:30:39:72:
bb:fd:4f:47:14:7e:b9:04:ae:fe:6f:5e:a9:12:81:
53:30:e8:b6:1c:70:bd:36:c0:8a:ca:b8:4a:60:33:
be:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F4:B0:BB:C2:D5:A9:9E:F4:3F:1F:5F:64:97:FE:30:0B:D2:BD:37
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/qfSwu8LVqZ70Px9fZJf-MAvSvTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.32.0/23
185.121.133.0/24
185.144.71.0/24
IPv6:
2a0c:2501::/32
2a14:6780::/29
Signature Algorithm: sha256WithRSAEncryption
50:41:5e:11:39:d2:08:d6:e6:1d:a1:7d:9b:c0:1e:11:b0:b2:
8b:95:35:6e:19:d3:ff:38:8a:70:0a:10:fd:2b:8e:e3:01:7d:
25:da:62:41:b6:37:64:60:d7:83:b6:d7:77:2a:07:3c:80:82:
33:2d:37:38:c9:97:e1:a4:aa:16:db:6e:ea:f5:46:a5:0c:77:
51:d8:78:b3:f8:54:8c:0e:45:97:b7:83:4a:68:76:44:16:8b:
9f:c9:a2:2d:61:5a:c9:0e:2a:40:19:6e:12:4e:d9:b8:68:23:
1e:11:05:2e:c3:7c:b9:dd:7c:4d:4f:ac:65:cc:56:d0:c9:dd:
0c:49:d2:57:6d:18:2e:8e:e9:77:9e:1d:fb:a1:bf:53:04:cf:
46:28:22:cb:fc:72:1f:c2:e1:30:d9:08:e8:70:cc:98:a1:38:
44:27:b0:d1:10:59:36:ef:ec:39:8a:5f:b7:8d:d0:91:9a:91:
51:f4:dd:57:3a:c8:02:92:58:79:1a:8d:b7:9b:66:e4:6d:9f:
52:d4:ed:87:25:a2:0e:3e:ac:3b:d8:8d:65:ca:02:a4:1f:de:
e1:1a:fb:59:3f:f4:0d:4a:a2:b3:ce:b2:4b:e5:1f:2f:59:0c:
d2:ec:0c:a6:88:7c:28:32:71:75:46:c9:ae:b9:61:10:8c:a7:
c7:b2:b9:d7
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZZiNII4Ao4jTdvLQfMjICIwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx
YmM3N2YwHhcNMjUwNDIzMTAzMjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWY0YjBiYmMyZDVhOTllZjQzZjFmNWY2NDk3ZmUzMDBiZDJiZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FT4XoiE3sw6kapD/S+GsWPMBfN8
H9NbxSoMDpdpyph/M2Xqsi67ZcJX2XAs60p+mPRkFcdGJQca26PN0z0VQmGA3vXf
9Awx7JVMbYmLdYvtVBB02fN9XcP5jSltcIWM1mRwiqPN7EPpcndrMfp283c4GLqG
ncJgtM/R3EVD7fmPDPOpOj/+OdNii3Ko3A0OUbJefnvx9AELuWKyxvntGOPfj9/a
BCjBEIUJCVIXDXEmdhLjVMWoGrH6F/hwfN7hZVDHnK3njy0tpK3aO2A4yf+/ECnw
RnwjLIw+bAowOXK7/U9HFH65BK7+b16pEoFTMOi2HHC9NsCKyrhKYDO+LQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFKn0sLvC1ame9D8fX2SX/jAL0r03MB8GA1UdIwQY
MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt
YWE2ZWQ0ZGFmYjNiLzEvcWZTd3U4TFZxWjcwUHg5ZlpKZi1NQXZTdlRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi
LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQBWSQgAwQA
uXmFAwQAuZBHMBQEAgACMA4DBQAqDCUBAwUDKhRngDANBgkqhkiG9w0BAQsFAAOC
AQEAUEFeETnSCNbmHaF9m8AeEbCyi5U1bhnT/ziKcAoQ/SuO4wF9JdpiQbY3ZGDX
g7bXdyoHPICCMy03OMmX4aSqFttu6vVGpQx3Udh4s/hUjA5Fl7eDSmh2RBaLn8mi
LWFayQ4qQBluEk7ZuGgjHhEFLsN8ud18TU+sZcxW0MndDEnSV20YLo7pd54d+6G/
UwTPRigiy/xyH8LhMNkI6HDMmKE4RCew0RBZNu/sOYpft43QkZqRUfTdVzrIApJY
eRqNt5tm5G2fUtTthyWiDj6sO9iNZcoCpB/e4Rr7WT/0DUqis86yS+UfL1kM0uwM
poh8KDJxdUbJrrlhEIynx7K51w==
-----END CERTIFICATE-----
Generated at Tue May 13 03:04:51 2025 by rpki-client