Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/EGpaHkSeLhg62EjtnXsOAK2sAbQ.roa
File: EGpaHkSeLhg62EjtnXsOAK2sAbQ.roa (raw, json)
Hash identifier: Qt2x0tfxbCf8Jx4rx8VsEFRHJLW7m9KA3LiNGtKW3m8=
Subject key identifier: 10:6A:5A:1E:44:9E:2E:18:3A:D8:48:ED:9D:7B:0E:00:AD:AC:01:B4
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 018CC793573A4E319B612D7F5B4DE2F2F67E
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/EGpaHkSeLhg62EjtnXsOAK2sAbQ.roa
Signing time: Tue 02 Jan 2024 00:29:31 +0000
ROA not before: Tue 02 Jan 2024 00:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61157
IP address blocks: 46.23.208.0/21 maxlen: 24
212.1.32.0/19 maxlen: 19
188.64.192.0/21 maxlen: 21
62.75.174.0/24 maxlen: 24
185.209.64.0/22 maxlen: 22
185.55.68.0/22 maxlen: 24
195.244.96.0/19 maxlen: 19
2a02:ad0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:57:3a:4e:31:9b:61:2d:7f:5b:4d:e2:f2:f6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=106a5a1e449e2e183ad848ed9d7b0e00adac01b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e7:11:9d:36:24:cc:f2:14:f9:70:c9:0a:cd:
88:7d:34:41:fc:8b:ae:37:e4:e7:6b:63:b3:44:61:
5b:44:d7:c2:85:e2:67:32:6f:9e:f4:65:5a:a4:b5:
3e:fd:12:69:55:01:0b:cf:5a:e6:32:1e:13:bc:c9:
5c:81:fa:dd:77:9d:39:11:c2:03:54:bb:b6:51:72:
c0:27:6d:97:67:dc:39:56:8d:df:e6:8f:a4:b2:5c:
c0:a9:19:13:67:18:50:33:a6:e6:2f:04:c3:7d:ac:
0e:84:6d:6d:92:53:e6:a7:b4:19:55:94:7e:da:15:
b0:f2:d4:87:cf:3c:61:02:a6:e7:7a:be:79:55:a1:
52:a7:59:c3:6c:4f:21:3c:43:73:96:21:4c:72:0b:
90:a4:e6:11:fc:27:be:c2:88:d2:b7:9e:f8:8d:78:
6d:cb:60:ab:19:24:f5:51:4a:b8:7f:91:cf:65:23:
ec:fa:98:8f:a1:59:2f:ff:49:a5:27:6f:e2:13:17:
ad:2d:31:c9:de:46:98:2b:d1:eb:8e:fa:62:3b:f1:
7c:8e:ba:af:71:80:b9:2c:4b:b6:cf:e4:e1:be:2a:
b9:58:25:e3:df:e8:56:d7:2d:60:90:39:04:4e:30:
33:39:d1:f2:13:94:b4:75:fd:e2:fd:3e:7f:06:93:
ef:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6A:5A:1E:44:9E:2E:18:3A:D8:48:ED:9D:7B:0E:00:AD:AC:01:B4
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/EGpaHkSeLhg62EjtnXsOAK2sAbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.208.0/21
62.75.174.0/24
185.55.68.0/22
185.209.64.0/22
188.64.192.0/21
195.244.96.0/19
212.1.32.0/19
IPv6:
2a02:ad0::/29
Signature Algorithm: sha256WithRSAEncryption
8d:89:9f:60:ec:97:ed:72:8c:42:67:ce:91:8c:39:1f:e5:c0:
c4:83:2d:38:9c:61:fd:dc:3c:a4:94:24:d2:d5:c1:ff:0a:65:
23:fd:da:24:66:0a:1b:b2:e4:53:90:46:b5:bc:1d:43:93:77:
3b:cb:e8:7a:80:33:9b:98:a5:96:a6:ef:70:f9:f5:cf:80:c3:
e4:a7:c1:a2:00:43:64:31:ab:6a:2b:18:9d:ff:bf:2a:c5:2a:
1c:f3:0e:3a:22:98:81:09:9e:55:7c:55:04:7b:21:8a:64:fe:
a9:7c:85:ed:66:75:60:fb:0f:1c:8e:e4:92:63:4a:e5:8f:1f:
53:85:4c:40:64:29:b9:bc:e1:15:1a:25:50:34:8d:93:4f:04:
2b:e2:85:c1:a1:94:8f:d1:83:6f:00:97:3e:b7:88:91:d1:5a:
92:c9:c6:29:aa:56:7c:30:98:f2:c7:68:50:90:34:e7:a5:b0:
25:76:02:7d:95:f6:56:9a:04:73:0f:68:60:ed:36:8c:bc:e3:
ff:95:40:62:4f:a2:45:89:3e:eb:b9:b5:8f:6d:30:ff:38:b4:
08:b6:70:d0:b0:39:e9:8f:dc:5b:ba:1d:62:7a:69:56:65:a2:
8d:e7:a2:3e:7c:02:fd:18:1a:f3:3a:d4:dd:a9:eb:3e:96:2d:
e9:0b:b0:cd
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAYzHk1c6TjGbYS1/W03i8vZ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk
MDk5ZGIwHhcNMjQwMTAyMDAyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDZhNWExZTQ0OWUyZTE4M2FkODQ4ZWQ5ZDdiMGUwMGFkYWMwMWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyucRnTYkzPIU+XDJCs2IfTRB/Iuu
N+Tna2OzRGFbRNfCheJnMm+e9GVapLU+/RJpVQELz1rmMh4TvMlcgfrdd505EcID
VLu2UXLAJ22XZ9w5Vo3f5o+kslzAqRkTZxhQM6bmLwTDfawOhG1tklPmp7QZVZR+
2hWw8tSHzzxhAqbner55VaFSp1nDbE8hPENzliFMcguQpOYR/Ce+wojSt574jXht
y2CrGST1UUq4f5HPZSPs+piPoVkv/0mlJ2/iExetLTHJ3kaYK9HrjvpiO/F8jrqv
cYC5LEu2z+Thviq5WCXj3+hW1y1gkDkETjAzOdHyE5S0df3i/T5/BpPvNwIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFBBqWh5Eni4YOthI7Z17DgCtrAG0MB8GA1UdIwQY
MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt
NGYwZThjZTExYTdkLzEvRUdwYUhrU2VMaGc2MkVqdG5Yc09BSzJzQWJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk
LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQDLhfQAwQA
PkuuAwQCuTdEAwQCudFAAwQDvEDAAwQFw/RgAwQF1AEgMA0EAgACMAcDBQMqAgrQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCNiZ9g7JftcoxCZ86RjDkf5cDEgy04nGH93Dyk
lCTS1cH/CmUj/dokZgobsuRTkEa1vB1Dk3c7y+h6gDObmKWWpu9w+fXPgMPkp8Gi
AENkMatqKxid/78qxSoc8w46IpiBCZ5VfFUEeyGKZP6pfIXtZnVg+w8cjuSSY0rl
jx9ThUxAZCm5vOEVGiVQNI2TTwQr4oXBoZSP0YNvAJc+t4iR0VqSycYpqlZ8MJjy
x2hQkDTnpbAldgJ9lfZWmgRzD2hg7TaMvOP/lUBiT6JFiT7rubWPbTD/OLQItnDQ
sDnpj9xbuh1iemlWZaKN56I+fAL9GBrzOtTdqes+li3pC7DN
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:55:18 2025 by rpki-client