Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/SZUAhKvoGNdH4XU-_B1YKHrBRss.roa
File: SZUAhKvoGNdH4XU-_B1YKHrBRss.roa (raw, json)
Hash identifier: fyVyNUfWBEVlomwblsPpCYZyrhPJDdONPxX3PSzBLvI=
Subject key identifier: 49:95:00:84:AB:E8:18:D7:47:E1:75:3E:FC:1D:58:28:7A:C1:46:CB
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 0196533788020B63A8A5B1DFF46A3B028585
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/SZUAhKvoGNdH4XU-_B1YKHrBRss.roa
Signing time: Sun 20 Apr 2025 12:41:10 +0000
ROA not before: Sun 20 Apr 2025 12:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50810
IP address blocks: 37.98.64.0/19 maxlen: 22
37.98.104.0/21 maxlen: 22
37.98.112.0/20 maxlen: 23
93.119.208.0/20 maxlen: 24
178.131.0.0/18 maxlen: 24
178.131.4.0/24 maxlen: 24
178.131.64.0/19 maxlen: 22
178.131.96.0/20 maxlen: 22
178.131.112.0/21 maxlen: 22
178.131.128.0/18 maxlen: 24
188.211.0.0/20 maxlen: 24
188.211.15.0/24 maxlen: 24
188.212.240.0/21 maxlen: 24
188.213.192.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 20 Apr 2025 13:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:37:88:02:0b:63:a8:a5:b1:df:f4:6a:3b:02:85:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Apr 20 12:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49950084abe818d747e1753efc1d58287ac146cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:86:47:27:dd:68:67:fb:63:12:7d:cc:db:97:
04:33:70:61:1b:cb:1b:cc:69:54:80:15:e6:7c:5f:
81:9a:89:4c:b2:45:3b:db:71:ef:19:ac:6c:3d:4e:
83:15:d4:4f:61:28:89:46:0f:04:73:12:3d:eb:bf:
a1:01:8f:32:8d:a7:3d:ff:30:31:ec:07:da:66:fd:
a7:13:c9:68:3e:49:2d:3b:36:2c:01:f1:af:35:61:
1c:33:6b:4c:b2:f3:05:78:e4:62:ea:52:f1:9a:c9:
67:e8:7b:b0:fd:c1:cc:ab:f1:e3:60:df:ae:0a:db:
3e:3e:eb:ba:fb:50:d8:eb:a6:2a:aa:d7:b7:1c:0d:
29:c0:a8:51:a6:45:03:0f:09:ad:b3:6e:41:7a:50:
04:95:55:5a:f6:42:3d:2e:cd:9c:63:97:c4:f9:40:
67:09:cb:bb:28:e8:52:54:b4:4d:eb:0f:a6:65:82:
13:4d:31:41:1e:ae:03:d7:04:30:b9:f5:f7:8f:dd:
6e:e2:8a:a8:2b:b9:05:cb:6e:28:e2:5d:7f:ef:cb:
63:cb:20:95:bb:a5:6d:86:f0:db:1f:fa:40:0a:ca:
4e:19:82:df:9f:fd:27:da:4d:6d:e8:4d:8b:6b:b8:
d0:8f:32:92:dd:9e:8e:6a:b3:ef:5f:13:68:3f:b9:
97:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:95:00:84:AB:E8:18:D7:47:E1:75:3E:FC:1D:58:28:7A:C1:46:CB
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/SZUAhKvoGNdH4XU-_B1YKHrBRss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.64.0/19
37.98.104.0-37.98.127.255
93.119.208.0/20
178.131.0.0-178.131.119.255
178.131.128.0/18
188.211.0.0/20
188.212.240.0/21
188.213.192.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:d5:4a:09:41:d9:b9:30:ea:06:f1:53:74:96:34:53:38:60:
ec:11:09:a7:eb:8c:bb:9e:8b:f8:51:33:51:a9:eb:8f:e4:61:
d7:f5:a0:89:b0:f7:c9:75:91:7e:1c:13:85:26:43:3f:f0:9c:
48:6d:d7:82:02:ba:ed:8c:9f:de:29:d6:fe:4d:cf:30:98:2f:
28:48:99:d8:8e:4f:52:11:6f:4e:fe:43:26:49:56:d2:b3:4d:
a0:19:7a:e2:c2:cb:19:3b:4e:85:93:a7:21:c9:d7:95:f1:44:
70:2d:e6:09:4f:60:d2:3f:31:aa:e3:d4:c9:94:c3:c9:e5:35:
41:90:02:44:12:1a:c7:f8:5b:a3:4a:f1:a5:82:d0:3f:2b:9e:
11:40:0f:34:c5:4b:15:d7:61:a7:53:45:3e:77:7f:e7:b8:11:
45:a0:2a:4f:15:0a:34:4c:0b:af:58:69:ca:12:51:56:e0:e8:
af:c0:3b:3b:6c:2d:23:51:1f:c7:5f:8a:02:77:4f:7d:70:b3:
96:a3:4f:ef:92:72:8b:b5:ca:87:56:33:38:61:75:1d:c0:5a:
77:44:6b:0a:11:4f:25:94:01:bf:13:9d:d4:92:91:99:dd:84:
31:d4:96:55:36:b3:72:ce:36:32:d0:49:b5:d4:54:a2:ed:93:
72:70:7e:97
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAZZTN4gCC2OopbHf9Go7AoWFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NDdhYTkxYjA2ZDhjNmI4NzI4NGYzZjQ1YTIxZGMyODFm
N2JhNTUwHhcNMjUwNDIwMTI0MTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTk1MDA4NGFiZTgxOGQ3NDdlMTc1M2VmYzFkNTgyODdhYzE0NmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoZHJ91oZ/tjEn3M25cEM3BhG8sb
zGlUgBXmfF+BmolMskU723HvGaxsPU6DFdRPYSiJRg8EcxI967+hAY8yjac9/zAx
7AfaZv2nE8loPkktOzYsAfGvNWEcM2tMsvMFeORi6lLxmsln6Huw/cHMq/HjYN+u
Cts+Puu6+1DY66Yqqte3HA0pwKhRpkUDDwmts25BelAElVVa9kI9Ls2cY5fE+UBn
Ccu7KOhSVLRN6w+mZYITTTFBHq4D1wQwufX3j91u4oqoK7kFy24o4l1/78tjyyCV
u6VthvDbH/pACspOGYLfn/0n2k1t6E2La7jQjzKS3Z6OarPvXxNoP7mXHwIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFEmVAISr6BjXR+F1PvwdWCh6wUbLMB8GA1UdIwQY
MBaAFIhHqpGwbYxrhyhPP0WiHcKB97pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYt
Y2VhNzVkMGNkNjcxLzEvU1pVQWhLdm9HTmRINFhVLV9CMVlLSHJCUnNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mZGYyOTYtNzVlNS00NjM1LTk1NDYtY2VhNzVkMGNkNjcx
LzEvaUVlcWtiQnRqR3VIS0U4X1JhSWR3b0gzdWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzBFBAIAATA/AwQFJWJAMAwD
BAMlYmgDBAclYgADBARdd9AwCwMDALKDAwQDsoNwAwQGsoOAAwQEvNMAAwQDvNTw
AwQCvNXAMA0GCSqGSIb3DQEBCwUAA4IBAQBM1UoJQdm5MOoG8VN0ljRTOGDsEQmn
64y7nov4UTNRqeuP5GHX9aCJsPfJdZF+HBOFJkM/8JxIbdeCArrtjJ/eKdb+Tc8w
mC8oSJnYjk9SEW9O/kMmSVbSs02gGXriwssZO06Fk6chydeV8URwLeYJT2DSPzGq
49TJlMPJ5TVBkAJEEhrH+FujSvGlgtA/K54RQA80xUsV12GnU0U+d3/nuBFFoCpP
FQo0TAuvWGnKElFW4OivwDs7bC0jUR/HX4oCd099cLOWo0/vknKLtcqHVjM4YXUd
wFp3RGsKEU8llAG/E53UkpGZ3YQx1JZVNrNyzjYy0Em11FSi7ZNycH6X
-----END CERTIFICATE-----
Generated at Wed May 14 04:35:07 2025 by rpki-client