Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BTntlotHWSmh3sduy6EwM9-2ZM4.roa
File: BTntlotHWSmh3sduy6EwM9-2ZM4.roa (raw, json)
Hash identifier: r22N0/dmBwoE24JZJTeKmiCz8nfRYpev94S4k1W8JU0=
Subject key identifier: 05:39:ED:96:8B:47:59:29:A1:DE:C7:6E:CB:A1:30:33:DF:B6:64:CE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194D894054FAA6A28E8B42FEF13BE90B662
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BTntlotHWSmh3sduy6EwM9-2ZM4.roa
Signing time: Thu 06 Feb 2025 00:06:06 +0000
ROA not before: Thu 06 Feb 2025 00:06:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 5.253.64.0/24 maxlen: 24
45.12.253.0/24 maxlen: 24
87.120.68.0/23 maxlen: 24
87.121.60.0/24 maxlen: 24
93.123.74.0/23 maxlen: 24
93.123.119.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Feb 2025 00:07:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d8:94:05:4f:aa:6a:28:e8:b4:2f:ef:13:be:90:b6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 6 00:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0539ed968b475929a1dec76ecba13033dfb664ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:9c:7f:14:0a:49:84:60:c6:0a:da:11:8e:
2b:61:91:5e:24:26:ef:96:5d:35:d6:b4:95:2c:d6:
cd:3f:89:ca:c5:e1:13:43:b3:08:4f:9c:bc:e6:28:
78:e9:5c:19:20:e4:f2:49:df:3e:06:98:d3:95:8a:
13:e0:e1:30:1c:f2:13:99:c3:8d:b4:1a:c9:88:a4:
40:71:8c:92:87:b5:62:04:38:ef:d4:f4:9c:55:b9:
b1:ff:85:74:b2:7c:06:cf:f6:8c:52:ec:bc:01:f2:
e2:05:63:e0:7c:3f:8d:dd:f8:a2:ff:2f:81:d5:dc:
7b:f4:c3:2c:cb:86:a0:c7:ce:0f:c9:ff:ce:0b:54:
de:03:fb:c5:63:71:93:68:b9:91:16:d6:7b:b6:53:
b6:fa:17:03:02:73:ca:dc:8a:a7:fe:28:bd:ee:da:
6b:8a:af:87:3b:a3:ff:f2:ac:40:83:04:9d:b9:9c:
e6:5e:03:0a:7b:4b:7f:9e:4b:44:12:28:a2:38:b9:
9f:a6:47:0b:59:7b:b1:62:eb:33:24:ba:68:f5:4b:
83:48:81:1e:8e:84:21:3e:59:3d:e8:85:bb:74:b2:
dc:d1:68:8e:e5:a1:d2:46:79:20:98:7c:a2:08:7a:
5c:54:6e:94:40:83:d8:a2:e0:fc:e3:94:0c:c3:a8:
f6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:39:ED:96:8B:47:59:29:A1:DE:C7:6E:CB:A1:30:33:DF:B6:64:CE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BTntlotHWSmh3sduy6EwM9-2ZM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.64.0/24
45.12.253.0/24
87.120.68.0/23
87.121.60.0/24
93.123.74.0/23
93.123.119.0/24
147.78.102.0/24
178.215.227.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
03:df:ce:5c:8c:8e:cd:e1:24:0d:82:a9:59:7a:52:84:b0:91:
b1:5a:c4:5c:2b:08:60:c5:5e:9e:37:00:85:d0:12:0a:12:e4:
bf:17:29:7e:e0:d8:a9:f2:cb:a9:e4:7f:c8:87:3d:12:9b:b7:
c0:73:8a:c2:2c:69:10:6e:3e:e7:a3:d7:51:b5:f1:07:e2:e8:
f1:83:e1:5b:d6:e6:06:9b:ed:48:fa:bb:ab:78:7f:a5:82:95:
fe:62:3c:e7:66:17:c3:b1:01:f4:d4:e4:9e:a2:45:03:4e:09:
26:d6:a7:c5:98:43:ce:ac:2e:36:92:e4:36:bf:1a:b3:d9:77:
d5:88:d6:51:98:d1:bb:43:d7:99:9b:d3:1b:3c:12:47:17:80:
11:87:71:36:83:55:d4:ec:91:91:b6:89:85:f7:95:e2:31:3c:
b6:aa:3d:05:70:4f:df:3b:01:fa:de:3c:43:88:06:e5:24:be:
20:db:c1:ff:e1:9c:9d:53:c7:13:83:1d:93:65:ee:0d:51:e4:
e1:6c:71:3c:2f:45:b2:45:7d:4b:b6:18:28:56:15:8d:cf:cc:
12:1e:79:1a:0a:f0:b6:51:ff:6b:8e:48:20:55:b1:e5:a1:47:
59:c2:6f:45:97:03:18:2c:2e:7f:98:62:1f:1f:52:ab:f1:9c:
4b:8f:bd:0e
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZTYlAVPqmoo6LQv7xO+kLZiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMjA2MDAwNjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTM5ZWQ5NjhiNDc1OTI5YTFkZWM3NmVjYmExMzAzM2RmYjY2NGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFCcfxQKSYRgxgraEY4rYZFeJCbv
ll011rSVLNbNP4nKxeETQ7MIT5y85ih46VwZIOTySd8+BpjTlYoT4OEwHPITmcON
tBrJiKRAcYySh7ViBDjv1PScVbmx/4V0snwGz/aMUuy8AfLiBWPgfD+N3fii/y+B
1dx79MMsy4agx84Pyf/OC1TeA/vFY3GTaLmRFtZ7tlO2+hcDAnPK3Iqn/ii97tpr
iq+HO6P/8qxAgwSduZzmXgMKe0t/nktEEiiiOLmfpkcLWXuxYuszJLpo9UuDSIEe
joQhPlk96IW7dLLc0WiO5aHSRnkgmHyiCHpcVG6UQIPYouD845QMw6j2OwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFAU57ZaLR1kpod7HbsuhMDPftmTOMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvQlRudGxvdEhXU21oM3NkdXk2RXdNOS0yWk00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQABf1AAwQA
LQz9AwQBV3hEAwQAV3k8AwQBXXtKAwQAXXt3AwQAk05mAwQAstfjAwQBufygMA0G
CSqGSIb3DQEBCwUAA4IBAQAD385cjI7N4SQNgqlZelKEsJGxWsRcKwhgxV6eNwCF
0BIKEuS/Fyl+4Nip8sup5H/Ihz0Sm7fAc4rCLGkQbj7no9dRtfEH4ujxg+Fb1uYG
m+1I+rureH+lgpX+YjznZhfDsQH01OSeokUDTgkm1qfFmEPOrC42kuQ2vxqz2XfV
iNZRmNG7Q9eZm9MbPBJHF4ARh3E2g1XU7JGRtomF95XiMTy2qj0FcE/fOwH63jxD
iAblJL4g28H/4ZydU8cTgx2TZe4NUeThbHE8L0WyRX1LthgoVhWNz8wSHnkaCvC2
Uf9rjkggVbHloUdZwm9FlwMYLC5/mGIfH1Kr8ZxLj70O
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:35:09 2025 by rpki-client