Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Xy-7at2tLCAkDuWP-Axvkg0Zl5U.roa
File: Xy-7at2tLCAkDuWP-Axvkg0Zl5U.roa (raw, json)
Hash identifier: VZfulpe6NnApWjuzU5WZWniRpHv8YNQbC4JLzKm8Xfg=
Subject key identifier: 5F:2F:BB:6A:DD:AD:2C:20:24:0E:E5:8F:F8:0C:6F:92:0D:19:97:95
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 019256DD2EDB79FDC1CCBD7D893D341B86D7
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Xy-7at2tLCAkDuWP-Axvkg0Zl5U.roa
Signing time: Fri 04 Oct 2024 09:29:48 +0000
ROA not before: Fri 04 Oct 2024 09:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203847
IP address blocks: 45.142.15.0/24 maxlen: 24
62.112.200.0/22 maxlen: 22
185.122.44.0/24 maxlen: 24
185.122.45.0/24 maxlen: 24
185.122.46.0/24 maxlen: 24
185.122.47.0/24 maxlen: 24
185.206.52.0/23 maxlen: 23
193.162.128.0/24 maxlen: 24
2a01:57e0:1::/48 maxlen: 48
2a01:57e0:200::/39 maxlen: 39
2a01:57e0:400::/39 maxlen: 39
Validation: Failed, certificate revoked on Tue 08 Oct 2024 07:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:56:dd:2e:db:79:fd:c1:cc:bd:7d:89:3d:34:1b:86:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Oct 4 09:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f2fbb6addad2c20240ee58ff80c6f920d199795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:86:37:00:cd:4a:68:f2:7e:c0:7f:cc:55:6b:
46:76:37:65:19:ee:52:43:f6:30:f5:3f:a4:57:81:
6e:97:e1:57:01:e7:24:c5:bc:03:ee:3a:d5:14:56:
de:be:5c:5f:f5:b2:59:a6:21:af:b8:e5:9d:f8:b1:
42:a6:24:78:d0:cc:b8:5a:f0:c9:5a:b4:5f:5e:48:
bc:59:5e:57:d6:d1:cc:fc:d9:3a:ef:46:e5:a1:93:
39:c8:99:43:ef:de:f5:64:95:ba:a3:54:c5:cc:bb:
c6:49:d4:f9:29:e1:e9:18:74:1c:f9:cd:36:17:6d:
0c:2d:b9:a5:bf:49:a7:bb:db:12:f4:14:8a:1b:99:
54:48:ad:41:14:29:12:cf:b2:c3:25:5d:80:e6:2a:
f6:10:d7:3d:86:bd:32:39:bc:cd:91:d3:1e:06:97:
06:79:d3:da:cc:2d:dd:62:17:55:ff:8e:9e:0d:b2:
51:e1:42:52:71:45:ea:73:15:68:fb:a9:17:03:01:
1f:d5:ff:53:26:f1:69:a5:e8:df:30:60:ff:ae:dd:
9f:ee:00:7e:ea:d1:3b:e5:37:ac:33:3c:c4:6d:92:
b8:f1:81:d0:6e:78:c3:5e:90:09:33:94:c5:58:bb:
14:33:53:26:ce:af:88:a2:34:b6:45:6b:65:de:9a:
cf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2F:BB:6A:DD:AD:2C:20:24:0E:E5:8F:F8:0C:6F:92:0D:19:97:95
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Xy-7at2tLCAkDuWP-Axvkg0Zl5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.15.0/24
62.112.200.0/22
185.122.44.0/22
185.206.52.0/23
193.162.128.0/24
IPv6:
2a01:57e0:1::/48
2a01:57e0:200::-2a01:57e0:5ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
bf:1e:44:76:ba:a0:d5:a8:83:f7:d7:49:c6:39:19:db:59:d7:
79:94:ee:83:de:40:ee:97:f4:09:77:21:d8:f9:a9:6f:6d:46:
0f:95:77:e2:b6:4f:15:5b:7d:fb:d2:72:d5:9a:c6:73:cb:86:
2c:0c:cc:34:8a:0a:2d:49:f1:34:1d:15:93:85:c5:eb:e6:8e:
84:70:26:22:58:f2:eb:ae:18:ef:ed:39:4a:5b:0e:c7:ce:65:
69:fa:b3:e5:be:42:47:6e:cd:b3:c9:2d:54:70:24:ee:4a:74:
e3:42:dd:b8:4b:99:4c:26:bf:ca:e7:36:19:9e:df:96:a5:69:
0a:99:47:77:7a:f6:77:e6:d8:99:00:04:7d:07:41:89:3f:a6:
61:76:a7:e4:92:04:88:44:9d:5f:68:a4:9f:0b:45:be:5b:05:
c9:10:14:b4:81:51:29:a1:aa:09:bb:a5:2e:58:5e:03:23:79:
72:70:93:cc:f6:0a:9e:6a:8d:bd:f6:d0:d5:12:77:a1:27:7e:
46:db:bc:56:15:02:97:1d:12:38:22:80:14:04:27:09:b1:3a:
61:3a:51:dc:c1:69:cd:8d:e7:44:20:ca:21:50:51:4e:ca:0a:
39:5d:7b:62:25:e4:ab:0d:6f:23:b5:ed:3f:52:ff:7a:f1:09:
76:41:67:f8
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgISAZJW3S7bef3BzL19iT00G4bXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx
YTE2MWUwHhcNMjQxMDA0MDkyOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjJmYmI2YWRkYWQyYzIwMjQwZWU1OGZmODBjNmY5MjBkMTk5Nzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/oY3AM1KaPJ+wH/MVWtGdjdlGe5S
Q/Yw9T+kV4Ful+FXAeckxbwD7jrVFFbevlxf9bJZpiGvuOWd+LFCpiR40My4WvDJ
WrRfXki8WV5X1tHM/Nk670bloZM5yJlD7971ZJW6o1TFzLvGSdT5KeHpGHQc+c02
F20MLbmlv0mnu9sS9BSKG5lUSK1BFCkSz7LDJV2A5ir2ENc9hr0yObzNkdMeBpcG
edPazC3dYhdV/46eDbJR4UJScUXqcxVo+6kXAwEf1f9TJvFppejfMGD/rt2f7gB+
6tE75TesMzzEbZK48YHQbnjDXpAJM5TFWLsUM1Mmzq+IojS2RWtl3prPrQIDAQAB
o4ICRDCCAkAwHQYDVR0OBBYEFF8vu2rdrSwgJA7lj/gMb5INGZeVMB8GA1UdIwQY
MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt
MTNiOTExMGNlMjBjLzEvWHktN2F0MnRMQ0FrRHVXUC1BeHZrZzBabDVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj
LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTAkBAIAATAeAwQALY4PAwQC
PnDIAwQCuXosAwQBuc40AwQAwaKAMCEEAgACMBsDBwAqAVfgAAEwEAMGASoBV+AC
AwYBKgFX4AQwDQYJKoZIhvcNAQELBQADggEBAL8eRHa6oNWog/fXScY5GdtZ13mU
7oPeQO6X9Al3Idj5qW9tRg+Vd+K2TxVbffvSctWaxnPLhiwMzDSKCi1J8TQdFZOF
xevmjoRwJiJY8uuuGO/tOUpbDsfOZWn6s+W+QkduzbPJLVRwJO5KdONC3bhLmUwm
v8rnNhme35alaQqZR3d69nfm2JkABH0HQYk/pmF2p+SSBIhEnV9opJ8LRb5bBckQ
FLSBUSmhqgm7pS5YXgMjeXJwk8z2Cp5qjb320NUSd6EnfkbbvFYVApcdEjgigBQE
JwmxOmE6UdzBac2N50QgyiFQUU7KCjlde2Il5KsNbyO17T9S/3rxCXZBZ/g=
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:14:58 2025 by rpki-client