Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/fr_Ifen637k0Q2rvCRjptuOyrjc.roa
File: fr_Ifen637k0Q2rvCRjptuOyrjc.roa (raw, json)
Hash identifier: OEvVA5m59N8wQEh12GNascIsIIW02acVGfnrqOdIbrI=
Subject key identifier: 7E:BF:C8:7D:E9:FA:DF:B9:34:43:6A:EF:09:18:E9:B6:E3:B2:AE:37
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0195D2D2E07214E963F8101A8315D15280EC
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/fr_Ifen637k0Q2rvCRjptuOyrjc.roa
Signing time: Wed 26 Mar 2025 14:19:50 +0000
ROA not before: Wed 26 Mar 2025 14:19:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201776
IP address blocks: 2.63.144.0/20 maxlen: 20
2.63.176.0/20 maxlen: 20
2.63.224.0/20 maxlen: 20
46.61.150.0/24 maxlen: 24
46.61.245.0/24 maxlen: 24
84.42.92.0/22 maxlen: 24
84.42.92.0/24 maxlen: 24
84.42.93.0/24 maxlen: 24
84.42.94.0/24 maxlen: 24
84.42.95.0/24 maxlen: 24
92.50.204.0/23 maxlen: 23
176.208.74.0/24 maxlen: 24
176.211.120.0/22 maxlen: 22
188.128.76.0/23 maxlen: 24
188.254.122.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 26 Mar 2025 14:25:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d2:d2:e0:72:14:e9:63:f8:10:1a:83:15:d1:52:80:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Mar 26 14:19:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ebfc87de9fadfb934436aef0918e9b6e3b2ae37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:07:ae:5d:ea:07:ab:dc:a7:2c:b3:cc:c3:d5:
36:47:cb:0c:c4:1d:86:f6:97:e3:ab:18:27:23:46:
a3:00:17:ab:6f:b6:a0:7e:2b:b9:aa:a2:1d:d6:e8:
16:9f:1d:6b:60:7b:fb:12:62:0b:7a:9a:3d:d4:3b:
b2:9a:4f:8f:43:62:a5:62:77:df:8e:7d:54:3e:df:
de:73:77:93:90:f5:d5:0d:cc:52:c3:b4:dd:9c:43:
2e:5b:02:25:64:28:35:98:4f:af:fa:35:9d:52:b2:
89:13:a7:37:f9:e5:ca:0e:22:23:13:cf:ae:63:10:
fa:19:d9:a6:32:ed:52:a0:7b:3f:37:06:30:e9:92:
57:71:9b:90:2d:33:93:2c:44:0d:00:70:6c:94:11:
32:a7:39:d9:44:6e:83:23:f1:8d:bd:28:c9:1a:65:
de:90:32:75:1e:f5:65:50:28:37:c6:49:47:4d:c3:
65:63:d2:b8:8f:ac:d8:ce:1f:ca:4a:ac:40:8f:0d:
53:fd:93:56:aa:43:10:9a:1b:b5:4a:29:4c:6e:2f:
99:aa:41:26:1f:25:b1:cb:80:5d:5a:ad:de:00:11:
17:42:4c:18:a5:ce:14:24:35:60:a6:54:da:57:cd:
15:5c:36:cc:99:b6:d7:14:04:ec:1c:3d:dc:d8:4e:
18:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BF:C8:7D:E9:FA:DF:B9:34:43:6A:EF:09:18:E9:B6:E3:B2:AE:37
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/fr_Ifen637k0Q2rvCRjptuOyrjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.63.144.0/20
2.63.176.0/20
2.63.224.0/20
46.61.150.0/24
46.61.245.0/24
84.42.92.0/22
92.50.204.0/23
176.208.74.0/24
176.211.120.0/22
188.128.76.0/23
188.254.122.0/23
Signature Algorithm: sha256WithRSAEncryption
61:01:b6:08:2a:ea:78:2a:03:b4:e2:74:75:d5:98:a7:d5:22:
f7:c8:21:22:3d:65:4f:ca:c1:d6:ec:76:79:71:4a:c9:17:64:
14:c7:92:a3:4c:c8:d4:6d:74:ea:50:20:af:bc:75:99:64:4a:
6b:90:ec:48:d8:b9:f8:2c:0a:46:03:66:13:41:a6:e1:ed:47:
e4:5b:77:b3:2d:f5:dc:63:64:78:3e:cd:bf:fe:05:ab:fc:08:
aa:d5:42:8d:a5:d7:51:2e:02:a8:23:ec:db:f0:59:18:63:f5:
ea:d9:44:64:b1:d2:0b:1b:0e:7b:3b:23:1a:a3:b9:28:09:2f:
9e:8d:89:2c:25:de:1f:ed:9c:63:8d:36:65:8e:69:2d:89:de:
a2:43:e2:6a:54:d5:88:c2:6a:11:fa:a5:45:c2:35:0b:08:d0:
4e:80:b9:d3:f4:06:90:66:50:32:9d:40:8d:29:30:66:93:19:
28:84:b5:79:b4:1f:db:d3:a7:43:df:3c:4d:08:5b:b7:62:a5:
e5:08:c0:9f:22:68:d7:cc:b6:f6:ed:98:38:6e:a8:25:30:ea:
bb:05:db:38:ec:f5:98:28:2f:5e:1b:42:d3:20:fd:0d:80:3a:
33:20:92:72:5d:56:ed:c8:eb:00:a8:1e:06:93:35:f2:1f:50:
bf:f7:5f:8b
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZXS0uByFOlj+BAagxXRUoDsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjUwMzI2MTQxOTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWJmYzg3ZGU5ZmFkZmI5MzQ0MzZhZWYwOTE4ZTliNmUzYjJhZTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AeuXeoHq9ynLLPMw9U2R8sMxB2G
9pfjqxgnI0ajABerb7agfiu5qqId1ugWnx1rYHv7EmILepo91Duymk+PQ2KlYnff
jn1UPt/ec3eTkPXVDcxSw7TdnEMuWwIlZCg1mE+v+jWdUrKJE6c3+eXKDiIjE8+u
YxD6GdmmMu1SoHs/NwYw6ZJXcZuQLTOTLEQNAHBslBEypznZRG6DI/GNvSjJGmXe
kDJ1HvVlUCg3xklHTcNlY9K4j6zYzh/KSqxAjw1T/ZNWqkMQmhu1SilMbi+ZqkEm
HyWxy4BdWq3eABEXQkwYpc4UJDVgplTaV80VXDbMmbbXFATsHD3c2E4YuwIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFH6/yH3p+t+5NENq7wkY6bbjsq43MB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvZnJfSWZlbjYzN2swUTJydkNSanB0dU95cmpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQEAj+QAwQE
Aj+wAwQEAj/gAwQALj2WAwQALj31AwQCVCpcAwQBXDLMAwQAsNBKAwQCsNN4AwQB
vIBMAwQBvP56MA0GCSqGSIb3DQEBCwUAA4IBAQBhAbYIKup4KgO04nR11Zin1SL3
yCEiPWVPysHW7HZ5cUrJF2QUx5KjTMjUbXTqUCCvvHWZZEprkOxI2Ln4LApGA2YT
Qabh7UfkW3ezLfXcY2R4Ps2//gWr/Aiq1UKNpddRLgKoI+zb8FkYY/Xq2URksdIL
Gw57OyMao7koCS+ejYksJd4f7ZxjjTZljmktid6iQ+JqVNWIwmoR+qVFwjULCNBO
gLnT9AaQZlAynUCNKTBmkxkohLV5tB/b06dD3zxNCFu3YqXlCMCfImjXzLb27Zg4
bqglMOq7Bds47PWYKC9eG0LTIP0NgDozIJJyXVbtyOsAqB4GkzXyH1C/91+L
-----END CERTIFICATE-----
Generated at Wed May 14 14:11:29 2025 by rpki-client