Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/njrPr4qKO6DgRZi_m-vXA3uMawU.roa
File: njrPr4qKO6DgRZi_m-vXA3uMawU.roa (raw, json)
Hash identifier: GSXtrY3GNaopRSvr+W/WkQgrkgiwVl6Ssl0S1kvhHJU=
Subject key identifier: 9E:3A:CF:AF:8A:8A:3B:A0:E0:45:98:BF:9B:EB:D7:03:7B:8C:6B:05
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019686A4D2408260D4831065F5B13E89FDEF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/njrPr4qKO6DgRZi_m-vXA3uMawU.roa
Signing time: Wed 30 Apr 2025 12:21:10 +0000
ROA not before: Wed 30 Apr 2025 12:21:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 109.176.14.0/24 maxlen: 24
213.210.52.0/24 maxlen: 24
213.210.53.0/24 maxlen: 24
213.218.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 18:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:a4:d2:40:82:60:d4:83:10:65:f5:b1:3e:89:fd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 30 12:21:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e3acfaf8a8a3ba0e04598bf9bebd7037b8c6b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:0c:9c:f7:6b:78:e1:0f:c5:14:66:e7:62:
f9:81:9a:e5:78:47:7b:18:3e:82:ec:3b:fd:8a:17:
ce:05:86:05:d3:fe:5c:d5:94:78:aa:a1:88:02:5a:
a7:d0:a7:c4:c7:43:5e:47:d2:48:23:eb:01:da:18:
13:dc:51:61:f3:0b:5a:1f:5b:ea:76:a3:d4:d9:00:
2e:c5:d4:f6:06:d5:85:56:08:77:d4:94:8a:e9:ac:
5a:af:bf:3e:28:84:40:a7:12:3a:56:56:dd:e8:0b:
e5:77:84:69:4e:95:b5:67:46:9c:fa:41:66:9d:8d:
94:8a:f3:d7:d3:1f:e6:76:a5:69:79:14:09:65:06:
21:d2:26:35:42:ee:5b:15:2b:4e:dd:fa:ea:19:69:
43:13:ac:ef:76:07:47:1b:ec:68:73:7e:70:52:58:
30:a9:17:18:5b:6c:19:8a:d8:41:d6:ad:b4:da:9a:
d9:cb:cb:05:f2:62:e1:d2:c4:fe:bc:7e:a6:bf:10:
05:c1:2a:bd:01:11:a9:8d:5f:b1:b5:53:18:d3:32:
d0:54:ea:b5:e4:c4:c7:a4:bb:29:c0:56:3b:76:b1:
57:f2:07:92:34:20:95:01:52:84:46:b8:77:c4:3e:
bb:78:b6:1a:ad:bb:77:0e:3d:05:7b:d0:f3:52:7b:
ec:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3A:CF:AF:8A:8A:3B:A0:E0:45:98:BF:9B:EB:D7:03:7B:8C:6B:05
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/njrPr4qKO6DgRZi_m-vXA3uMawU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.14.0/24
213.210.52.0/23
213.218.239.0/24
Signature Algorithm: sha256WithRSAEncryption
80:4e:3c:ca:7e:11:7e:89:f8:b7:98:be:6a:3d:8f:31:18:6f:
69:10:97:8c:a6:ea:28:c7:d2:7c:3e:77:ff:73:0d:a7:5a:9e:
d7:87:eb:10:af:a1:51:f9:32:70:3b:13:f4:50:6a:9f:d6:f6:
28:d9:6b:de:cd:28:4c:c1:c9:25:c0:33:ca:b9:d4:e7:90:0e:
2e:1d:aa:6d:06:51:16:76:bd:50:ab:82:4a:25:32:fe:37:85:
f4:4d:99:c6:fe:dc:26:cc:34:a6:38:7b:01:b3:09:08:fd:80:
a5:52:6e:5f:0d:d3:48:4c:ed:02:2f:fc:f1:9b:02:60:8a:74:
54:9a:74:6e:d6:2f:bd:28:dd:86:b1:e6:b7:66:3a:98:c0:9c:
64:c0:ce:b7:5b:46:a9:04:79:85:7b:8e:e7:9e:a6:04:f0:2a:
72:79:fa:a0:a6:c0:b4:86:25:fc:05:f2:fa:4a:00:63:ac:dd:
15:0b:ac:98:e6:8c:0f:ce:d8:df:9b:51:dc:e6:99:b7:fb:91:
88:e3:0a:8d:a1:5b:dc:ea:7f:78:c5:55:93:7d:32:f9:df:fe:
ff:9a:fd:9b:d7:45:69:c0:97:94:c6:f9:89:ff:b1:7d:fb:6b:
fb:ef:dd:7d:c5:5d:08:80:20:2a:c2:89:0c:ad:a5:58:e1:3a:
60:15:0c:31
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZaGpNJAgmDUgxBl9bE+if3vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwNDMwMTIyMTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTNhY2ZhZjhhOGEzYmEwZTA0NTk4YmY5YmViZDcwMzdiOGM2YjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT0MnPdreOEPxRRm52L5gZrleEd7
GD6C7Dv9ihfOBYYF0/5c1ZR4qqGIAlqn0KfEx0NeR9JII+sB2hgT3FFh8wtaH1vq
dqPU2QAuxdT2BtWFVgh31JSK6axar78+KIRApxI6Vlbd6Avld4RpTpW1Z0ac+kFm
nY2UivPX0x/mdqVpeRQJZQYh0iY1Qu5bFStO3frqGWlDE6zvdgdHG+xoc35wUlgw
qRcYW2wZithB1q202prZy8sF8mLh0sT+vH6mvxAFwSq9ARGpjV+xtVMY0zLQVOq1
5MTHpLspwFY7drFX8geSNCCVAVKERrh3xD67eLYarbt3Dj0Fe9DzUnvsxwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJ46z6+Kijug4EWYv5vr1wN7jGsFMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvbmpyUHI0cUtPNkRnUlppX20tdlhBM3VNYXdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbbAOAwQB
1dI0AwQA1drvMA0GCSqGSIb3DQEBCwUAA4IBAQCATjzKfhF+ifi3mL5qPY8xGG9p
EJeMpuoox9J8Pnf/cw2nWp7Xh+sQr6FR+TJwOxP0UGqf1vYo2WvezShMwcklwDPK
udTnkA4uHaptBlEWdr1Qq4JKJTL+N4X0TZnG/twmzDSmOHsBswkI/YClUm5fDdNI
TO0CL/zxmwJginRUmnRu1i+9KN2Gsea3ZjqYwJxkwM63W0apBHmFe47nnqYE8Cpy
efqgpsC0hiX8BfL6SgBjrN0VC6yY5owPztjfm1Hc5pm3+5GI4wqNoVvc6n94xVWT
fTL53/7/mv2b10VpwJeUxvmJ/7F9+2v77919xV0IgCAqwokMraVY4TpgFQwx
-----END CERTIFICATE-----
Generated at Sat May 17 02:33:33 2025 by rpki-client