Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/ZQYBfLxV8vPDfnvw8XXmAFRstc0.roa
File: ZQYBfLxV8vPDfnvw8XXmAFRstc0.roa (raw, json)
Hash identifier: Ww+rZxISDrXkhwfR16jdTt8hCgrLuXUN2/XBy8eSt1s=
Subject key identifier: 65:06:01:7C:BC:55:F2:F3:C3:7E:7B:F0:F1:75:E6:00:54:6C:B5:CD
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0198B9B5ECA2DA05605CE536F08468622D56
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/ZQYBfLxV8vPDfnvw8XXmAFRstc0.roa
Signing time: Sun 17 Aug 2025 20:26:04 +0000
ROA not before: Sun 17 Aug 2025 20:26:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 46.243.7.0/24 maxlen: 24
91.200.12.0/24 maxlen: 24
92.62.119.0/24 maxlen: 24
94.232.248.0/24 maxlen: 24
95.81.114.0/24 maxlen: 24
95.81.115.0/24 maxlen: 24
95.81.123.0/24 maxlen: 24
95.81.124.0/24 maxlen: 24
109.69.60.0/24 maxlen: 24
2a06:ddc0::/29 maxlen: 29
2a0c:f642::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 23 Aug 2025 17:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b9:b5:ec:a2:da:05:60:5c:e5:36:f0:84:68:62:2d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Aug 17 20:26:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6506017cbc55f2f3c37e7bf0f175e600546cb5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:e9:57:bc:28:7e:c2:57:e9:b7:a3:c9:f4:
77:ca:6a:0d:89:4b:b3:23:f7:64:62:87:8a:7a:f7:
2f:40:f5:8e:5f:1d:5a:85:a6:18:77:83:6b:85:62:
ac:26:cc:4f:14:60:6f:53:d9:7b:28:6d:91:e8:b4:
a5:d7:1c:05:06:59:18:10:72:2a:c0:4e:94:ad:07:
4d:99:cf:07:67:b0:c1:46:c5:6a:72:dd:47:5a:9d:
bf:82:64:25:9e:86:37:a3:01:55:e7:05:ad:bf:eb:
41:0a:ae:be:29:25:1f:f4:b5:ba:6b:97:66:6c:1f:
59:d7:4c:a0:5f:ac:0f:77:a6:e1:b8:b4:d5:e5:b9:
03:98:af:d5:10:eb:2e:3b:e8:a5:4d:af:b1:b0:c5:
c4:9c:5a:6d:2b:19:8f:dc:de:95:71:b1:12:c9:a7:
65:bb:ef:9d:d2:f8:ae:16:cb:8d:71:84:24:39:11:
cc:8c:71:c5:4a:a5:df:c7:fd:7e:ed:3e:74:cc:e6:
07:d3:0c:64:e1:2c:c0:85:35:b0:4c:07:4e:09:e7:
06:98:e4:0d:2e:81:bd:6b:94:0a:e8:56:34:e8:f0:
c7:45:aa:cc:59:2f:2b:c5:da:26:f7:59:9b:28:f3:
35:80:be:75:c1:23:7d:2c:e5:91:75:30:df:fc:4c:
72:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:06:01:7C:BC:55:F2:F3:C3:7E:7B:F0:F1:75:E6:00:54:6C:B5:CD
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/ZQYBfLxV8vPDfnvw8XXmAFRstc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.7.0/24
91.200.12.0/24
92.62.119.0/24
94.232.248.0/24
95.81.114.0/23
95.81.123.0-95.81.124.255
109.69.60.0/24
IPv6:
2a06:ddc0::/29
2a0c:f642::/32
Signature Algorithm: sha256WithRSAEncryption
48:07:92:87:a3:40:ad:0e:3d:f2:22:4e:3f:69:e8:bb:24:79:
2f:7a:a4:53:d6:2d:43:cc:ba:a9:c2:ea:98:82:10:c9:83:45:
3a:47:5f:36:1d:a4:b2:52:e7:9e:62:76:a9:ec:81:16:0b:02:
7d:18:ac:c5:a7:5d:8d:d8:fa:6d:1c:92:ff:de:3c:8a:a9:84:
4d:e4:d1:d2:b2:39:c4:24:9e:d8:22:5a:8b:ef:be:c1:5e:67:
a8:1d:47:dc:97:4f:b6:5d:44:01:44:9c:3a:b1:06:5a:88:63:
5f:70:71:23:90:3c:3b:65:05:6d:c4:cd:45:40:29:1c:b2:2f:
32:3f:36:ab:71:8f:1c:1c:16:b9:46:66:cc:05:3b:06:c3:bb:
55:94:45:df:58:62:0d:06:fc:5d:00:f5:24:b1:96:f8:3a:9d:
71:fa:47:3d:21:7a:7b:60:cb:2f:f3:56:dc:05:d5:32:22:79:
0c:68:5a:fc:fc:2a:e3:f5:71:76:ef:e8:d5:76:02:6f:b5:81:
48:77:d9:3b:38:62:b6:50:68:39:55:6b:16:d4:79:ae:99:05:
d2:6b:a5:7b:fd:5d:03:42:63:c0:ab:58:a5:13:32:b6:59:ea:
dd:c7:36:c3:46:58:b5:94:b2:bf:87:7c:8c:c9:a6:37:af:5f:
09:18:e7:fa
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZi5teyi2gVgXOU28IRoYi1WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx
ZmE4MzkwHhcNMjUwODE3MjAyNjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTA2MDE3Y2JjNTVmMmYzYzM3ZTdiZjBmMTc1ZTYwMDU0NmNiNWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLPpV7wofsJX6bejyfR3ymoNiUuz
I/dkYoeKevcvQPWOXx1ahaYYd4NrhWKsJsxPFGBvU9l7KG2R6LSl1xwFBlkYEHIq
wE6UrQdNmc8HZ7DBRsVqct1HWp2/gmQlnoY3owFV5wWtv+tBCq6+KSUf9LW6a5dm
bB9Z10ygX6wPd6bhuLTV5bkDmK/VEOsuO+ilTa+xsMXEnFptKxmP3N6VcbESyadl
u++d0viuFsuNcYQkORHMjHHFSqXfx/1+7T50zOYH0wxk4SzAhTWwTAdOCecGmOQN
LoG9a5QK6FY06PDHRarMWS8rxdom91mbKPM1gL51wSN9LOWRdTDf/ExypQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFGUGAXy8VfLzw3578PF15gBUbLXNMB8GA1UdIwQY
MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt
MzA0OTVmNDAzNzg0LzEvWlFZQmZMeFY4dlBEZm52dzhYWG1BRlJzdGMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0
LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDA4BAIAATAyAwQALvMHAwQA
W8gMAwQAXD53AwQAXuj4AwQBX1FyMAwDBABfUXsDBABfUXwDBABtRTwwFAQCAAIw
DgMFAyoG3cADBQAqDPZCMA0GCSqGSIb3DQEBCwUAA4IBAQBIB5KHo0CtDj3yIk4/
aei7JHkveqRT1i1DzLqpwuqYghDJg0U6R182HaSyUueeYnap7IEWCwJ9GKzFp12N
2PptHJL/3jyKqYRN5NHSsjnEJJ7YIlqL777BXmeoHUfcl0+2XUQBRJw6sQZaiGNf
cHEjkDw7ZQVtxM1FQCkcsi8yPzarcY8cHBa5RmbMBTsGw7tVlEXfWGINBvxdAPUk
sZb4Op1x+kc9IXp7YMsv81bcBdUyInkMaFr8/Crj9XF27+jVdgJvtYFId9k7OGK2
UGg5VWsW1HmumQXSa6V7/V0DQmPAq1ilEzK2WerdxzbDRli1lLK/h3yMyaY3r18J
GOf6
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:31:10 2025 by rpki-client