Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/Co_JlWiUh4gdiKm-iGBYSfSM19U.roa
File: Co_JlWiUh4gdiKm-iGBYSfSM19U.roa (raw, json)
Hash identifier: YvQu3XjAP3/IVm7mH68bBrXo0sjj0pIMJp76aPNusiE=
Subject key identifier: 0A:8F:C9:95:68:94:87:88:1D:88:A9:BE:88:60:58:49:F4:8C:D7:D5
Certificate issuer: /CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Certificate serial: 019586BECE483BA0075EBA63147014EE5100
Authority key identifier: E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/Co_JlWiUh4gdiKm-iGBYSfSM19U.roa
Signing time: Tue 11 Mar 2025 19:46:46 +0000
ROA not before: Tue 11 Mar 2025 19:46:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213522
IP address blocks: 89.150.62.0/24 maxlen: 28
89.150.62.64/26 maxlen: 26
2a14:ec0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 12 Mar 2025 09:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:86:be:ce:48:3b:a0:07:5e:ba:63:14:70:14:ee:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Validity
Not Before: Mar 11 19:46:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a8fc995689487881d88a9be88605849f48cd7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:82:64:3a:42:00:e4:5d:ce:24:51:99:cc:
09:41:54:f8:bb:d5:7c:f1:5e:29:5a:2f:b6:f5:7d:
59:73:a1:2e:c1:48:dc:be:f5:69:ff:1e:10:5c:e8:
12:4e:3b:b2:fb:b1:c6:a1:82:c1:b3:df:b0:75:f7:
70:3f:41:a7:ed:ad:87:5b:d0:77:ab:e3:79:c3:0a:
e9:41:22:37:72:c0:33:7a:7d:25:26:9d:82:f3:a1:
e0:ae:98:bf:63:42:57:05:93:6d:51:d8:bf:84:72:
9b:84:5f:57:47:b0:ab:cc:71:36:60:12:25:d4:90:
b0:02:bd:d5:4f:07:b7:4b:7a:7e:5d:64:39:1b:dc:
1b:3e:09:dd:a7:49:ca:12:0f:15:ed:3a:7e:41:1f:
c3:63:5d:4b:21:a9:04:b5:6d:a2:8d:39:51:e9:7c:
4e:de:46:e1:92:bb:4e:ba:3e:dd:0b:9d:98:ec:6d:
e5:23:d6:94:f2:05:d5:d4:7b:32:7a:22:0d:43:0b:
c3:c7:52:b8:ce:be:63:db:ed:28:4d:74:5a:22:3a:
fc:aa:2a:b0:b4:ed:b0:0b:b3:e9:54:47:3c:e5:75:
6e:9d:8a:66:8f:93:e9:8d:c1:bf:0b:94:33:45:35:
3d:45:2b:b1:6c:6b:4a:d9:cb:f4:70:33:96:cf:8c:
52:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8F:C9:95:68:94:87:88:1D:88:A9:BE:88:60:58:49:F4:8C:D7:D5
X509v3 Authority Key Identifier:
keyid:E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/Co_JlWiUh4gdiKm-iGBYSfSM19U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.62.0/24
IPv6:
2a14:ec0::/29
Signature Algorithm: sha256WithRSAEncryption
48:5c:06:81:a7:a7:2b:e3:b4:79:7c:bf:16:4e:9c:ff:a5:68:
0d:a9:d8:00:44:cf:ce:5e:8e:b5:f5:82:f1:5b:93:d6:0a:e0:
b1:2e:4a:ce:ba:39:69:0f:4a:01:06:0e:e1:86:0e:3c:be:57:
6c:8b:1a:50:d6:0d:5d:ca:f8:31:a2:45:fb:40:02:1d:01:6a:
0a:32:9a:71:5f:b9:ee:e9:d9:cc:59:de:7b:52:d3:c5:9c:af:
12:e3:7b:2e:18:62:76:e3:b1:84:db:a0:cb:60:1b:cc:d7:6c:
22:e3:1a:2b:af:49:e3:48:d8:ab:c2:a0:2f:8b:98:fb:61:7c:
fa:0b:10:df:c5:f9:bb:1c:81:51:a8:b6:c2:18:fa:e8:f2:01:
77:ec:10:cc:45:ca:b4:0d:63:51:10:53:c0:62:0d:18:92:95:
ac:02:81:94:92:1c:26:ca:76:b2:7a:b7:83:80:f9:39:02:a8:
97:af:5f:b5:3e:ec:b8:45:0d:6c:bd:17:8a:c3:81:58:7b:48:
41:68:e2:8e:a8:66:c4:f7:84:88:f9:48:33:dd:41:80:d9:d5:
c9:27:3e:28:ed:c6:2a:14:dc:ac:6c:d7:f4:33:d0:27:94:9d:
df:dc:02:e5:73:58:1a:c7:76:90:67:77:36:0b:68:26:62:bb:
3c:32:eb:98
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZWGvs5IO6AHXrpjFHAU7lEAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyN2UxZGQwNzQ2NjI3ODAzNmJhNWNkOTQzZDdiMGUwMjFj
Zjg2MjgwHhcNMjUwMzExMTk0NjQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYThmYzk5NTY4OTQ4Nzg4MWQ4OGE5YmU4ODYwNTg0OWY0OGNkN2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCiCZDpCAORdziRRmcwJQVT4u9V8
8V4pWi+29X1Zc6EuwUjcvvVp/x4QXOgSTjuy+7HGoYLBs9+wdfdwP0Gn7a2HW9B3
q+N5wwrpQSI3csAzen0lJp2C86Hgrpi/Y0JXBZNtUdi/hHKbhF9XR7CrzHE2YBIl
1JCwAr3VTwe3S3p+XWQ5G9wbPgndp0nKEg8V7Tp+QR/DY11LIakEtW2ijTlR6XxO
3kbhkrtOuj7dC52Y7G3lI9aU8gXV1HsyeiINQwvDx1K4zr5j2+0oTXRaIjr8qiqw
tO2wC7PpVEc85XVunYpmj5PpjcG/C5QzRTU9RSuxbGtK2cv0cDOWz4xSNQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAqPyZVolIeIHYipvohgWEn0jNfVMB8GA1UdIwQY
MBaAFOJ+HdB0ZieANrpc2UPXsOAhz4YoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hZTBkOGItNDg1Ny00YmE3LWIzNDIt
NWVjMzM2YmY3NDNiLzEvQ29fSmxXaVVoNGdkaUttLWlHQllTZlNNMTlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9hZTBkOGItNDg1Ny00YmE3LWIzNDItNWVjMzM2YmY3NDNi
LzEvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAWZY+MA0E
AgACMAcDBQMqFA7AMA0GCSqGSIb3DQEBCwUAA4IBAQBIXAaBp6cr47R5fL8WTpz/
pWgNqdgARM/OXo619YLxW5PWCuCxLkrOujlpD0oBBg7hhg48vldsixpQ1g1dyvgx
okX7QAIdAWoKMppxX7nu6dnMWd57UtPFnK8S43suGGJ247GE26DLYBvM12wi4xor
r0njSNirwqAvi5j7YXz6CxDfxfm7HIFRqLbCGPro8gF37BDMRcq0DWNREFPAYg0Y
kpWsAoGUkhwmynayereDgPk5AqiXr1+1Puy4RQ1svReKw4FYe0hBaOKOqGbE94SI
+Ugz3UGA2dXJJz4o7cYqFNysbNf0M9AnlJ3f3ALlc1gax3aQZ3c2C2gmYrs8MuuY
-----END CERTIFICATE-----
Generated at Mon Apr 21 11:00:49 2025 by rpki-client