Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/5LIt6cpKCVg1Qq4gJaoqmKw5DFQ.roa
File: 5LIt6cpKCVg1Qq4gJaoqmKw5DFQ.roa (raw, json)
Hash identifier: vh0ZN1T7sns519O9pLTwJitUWh8G3JORlRNPtAm2o7E=
Subject key identifier: E4:B2:2D:E9:CA:4A:09:58:35:42:AE:20:25:AA:2A:98:AC:39:0C:54
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 01942825CA5A6367E39E5AA6F5F85652A1B5
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/5LIt6cpKCVg1Qq4gJaoqmKw5DFQ.roa
Signing time: Thu 02 Jan 2025 17:52:32 +0000
ROA not before: Thu 02 Jan 2025 17:52:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208615
IP address blocks: 80.79.248.80/28 maxlen: 28
91.219.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jan 2025 07:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:ca:5a:63:67:e3:9e:5a:a6:f5:f8:56:52:a1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 2 17:52:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4b22de9ca4a09583542ae2025aa2a98ac390c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8c:02:fc:fa:a3:cb:ee:29:1e:92:71:7f:36:
54:87:bb:33:a9:7f:ed:da:d8:52:a9:22:95:75:3f:
2a:53:6c:b0:f8:82:97:69:63:7b:90:95:6b:61:c1:
41:a2:62:39:1e:80:3e:f5:9a:32:0d:89:af:a6:99:
fe:a2:e3:56:0f:91:41:20:15:b0:5d:3a:13:85:20:
b8:3b:69:f0:b1:29:02:8e:98:0f:17:5e:79:28:8a:
77:fc:7e:b7:b5:8e:1f:8d:05:ac:a7:1e:01:b4:b7:
34:91:06:3d:63:26:98:46:5a:82:5f:27:e4:e9:67:
c4:c9:2b:e3:c8:74:56:9f:f9:d7:a4:c3:13:14:2e:
84:18:9c:a2:d8:8f:2d:ea:8f:8c:73:3f:41:38:ee:
35:cb:d1:6d:dd:5e:8f:dc:30:1c:87:41:d3:3f:39:
be:b6:76:76:ed:45:80:0d:41:c6:4b:96:18:22:f5:
56:a9:15:aa:c6:5a:67:8e:8f:12:f7:c7:83:9f:8d:
37:d2:08:50:9b:77:2b:56:7d:25:3c:71:0b:3e:10:
20:0b:2a:56:3e:cd:0f:45:7a:d7:a2:c8:54:d3:7b:
07:be:8c:4d:ac:a3:dc:0a:27:4a:d3:99:9b:c3:ae:
e2:3c:e2:dd:f6:31:09:19:d2:c6:05:09:45:e3:6f:
27:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B2:2D:E9:CA:4A:09:58:35:42:AE:20:25:AA:2A:98:AC:39:0C:54
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/5LIt6cpKCVg1Qq4gJaoqmKw5DFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.248.80/28
91.219.181.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:c9:19:09:7f:01:91:a3:1a:e4:08:2d:bd:79:5b:02:7b:32:
7d:17:65:3f:81:6a:c9:ed:04:f0:4c:2c:8f:38:b2:07:5f:2a:
0f:ed:5e:d2:19:2d:33:98:96:79:39:08:cb:cc:06:c2:dd:3c:
c7:1c:73:81:73:de:de:17:19:65:84:0b:f3:5c:3b:eb:cb:fb:
7a:26:42:4e:86:d0:ed:31:02:74:86:3d:98:6e:13:94:db:4f:
a3:cb:5c:52:8e:70:b2:7f:f9:6c:82:0d:ea:62:06:fd:ad:aa:
81:1e:0a:9e:9c:dc:cc:f7:65:98:cb:8a:c3:7e:fe:30:7b:b1:
e3:62:82:a2:5b:6d:d2:a3:b3:d0:37:cc:be:42:a5:10:d1:21:
fd:38:a3:6d:a9:b0:48:ba:39:cd:cb:b0:aa:29:5b:e1:63:91:
2d:ad:7c:25:64:22:b6:31:26:d0:17:67:0b:ad:50:d3:0e:b8:
dc:25:6e:19:7c:7b:7e:48:18:b4:87:9c:e8:1a:0e:9e:0f:db:
f1:30:15:32:f8:ba:d5:51:fd:2f:8f:77:76:1e:73:bb:71:84:
6b:a0:94:f3:34:24:1e:d5:68:79:04:85:90:af:1a:6d:30:43:
6d:5e:d8:57:9c:0b:db:e6:39:e9:75:00:a0:46:73:1c:c5:d2:
c5:a5:86:2e
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZQoJcpaY2fjnlqm9fhWUqG1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYmE0OGM3ZTJjOWUwNWVkYTU0NmQ4OTkxNDZiODlmNzk5
ZGY4NWQwHhcNMjUwMTAyMTc1MjMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGIyMmRlOWNhNGEwOTU4MzU0MmFlMjAyNWFhMmE5OGFjMzkwYzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYwC/Pqjy+4pHpJxfzZUh7szqX/t
2thSqSKVdT8qU2yw+IKXaWN7kJVrYcFBomI5HoA+9ZoyDYmvppn+ouNWD5FBIBWw
XToThSC4O2nwsSkCjpgPF155KIp3/H63tY4fjQWspx4BtLc0kQY9YyaYRlqCXyfk
6WfEySvjyHRWn/nXpMMTFC6EGJyi2I8t6o+Mcz9BOO41y9Ft3V6P3DAch0HTPzm+
tnZ27UWADUHGS5YYIvVWqRWqxlpnjo8S98eDn4030ghQm3crVn0lPHELPhAgCypW
Ps0PRXrXoshU03sHvoxNrKPcCidK05mbw67iPOLd9jEJGdLGBQlF428nWQIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFOSyLenKSglYNUKuICWqKpisOQxUMB8GA1UdIwQY
MBaAFL66SMfiyeBe2lRtiZFGuJ95nfhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYt
M2Q1MjIxODFhMmM0LzEvNUxJdDZjcEtDVmcxUXE0Z0phb3FtS3c1REZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYtM2Q1MjIxODFhMmM0
LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANAwUEUE/4UAME
AFvbtTANBgkqhkiG9w0BAQsFAAOCAQEAO8kZCX8BkaMa5AgtvXlbAnsyfRdlP4Fq
ye0E8EwsjziyB18qD+1e0hktM5iWeTkIy8wGwt08xxxzgXPe3hcZZYQL81w768v7
eiZCTobQ7TECdIY9mG4TlNtPo8tcUo5wsn/5bIIN6mIG/a2qgR4KnpzczPdlmMuK
w37+MHux42KColtt0qOz0DfMvkKlENEh/TijbamwSLo5zcuwqilb4WORLa18JWQi
tjEm0BdnC61Q0w643CVuGXx7fkgYtIec6BoOng/b8TAVMvi61VH9L493dh5zu3GE
a6CU8zQkHtVoeQSFkK8abTBDbV7YV5wL2+Y56XUAoEZzHMXSxaWGLg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:37:55 2025 by rpki-client