Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eN5ZlpHhdgyoKRtE8id0U9fEZQ4.roa
File: eN5ZlpHhdgyoKRtE8id0U9fEZQ4.roa (raw, json)
Hash identifier: HpJFcNFYRdpdrHFd68jZPJK3tSsDewZbZbZTzM0GNsg=
Subject key identifier: 78:DE:59:96:91:E1:76:0C:A8:29:1B:44:F2:27:74:53:D7:C4:65:0E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824B5DAB336CEB0A8B0CB5A6C78C8F2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eN5ZlpHhdgyoKRtE8id0U9fEZQ4.roa
Signing time: Thu 02 Jan 2025 17:51:21 +0000
ROA not before: Thu 02 Jan 2025 17:51:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208287
IP address blocks: 45.90.89.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 15:29:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:b5:da:b3:36:ce:b0:a8:b0:cb:5a:6c:78:c8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78de599691e1760ca8291b44f2277453d7c4650e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b9:8b:24:04:32:84:80:c0:bb:0b:ae:85:66:
14:2c:fb:e5:6f:4d:0f:27:96:10:94:76:8d:cd:89:
e6:26:18:91:2e:1c:3b:96:73:e7:a2:3f:a6:aa:23:
fd:f0:0d:41:4a:ba:00:87:f3:f1:53:85:2f:a6:b0:
98:85:c8:7b:36:4d:13:3f:57:97:fc:ac:bd:10:3c:
87:69:e1:89:9b:88:77:b9:1a:7c:18:04:a7:70:f9:
d3:36:73:5c:99:1a:ff:d6:79:f9:9a:54:9a:00:d4:
7c:60:6f:b6:c3:25:43:40:74:b5:56:3e:a8:77:f9:
66:34:2b:38:e2:26:dc:2d:f3:04:2e:b7:35:5a:a8:
1d:bd:61:eb:cf:d0:a3:f7:42:f2:c7:5a:19:ab:28:
95:ff:4a:05:03:f3:2e:73:bf:c9:f4:23:7d:31:d9:
34:ea:c4:44:ed:a8:ef:6c:52:1f:c3:ee:c1:17:92:
e0:42:81:1b:75:38:29:f3:f4:c9:6a:2a:82:ea:d5:
a2:36:b7:e1:40:df:17:b8:43:63:88:ae:1f:a6:d0:
ab:ee:5f:40:a9:88:67:74:9f:85:9d:65:cd:93:ac:
25:4b:5d:b1:6a:c8:eb:ca:e5:5c:f7:07:1d:c5:38:
49:7c:f4:2f:d2:7b:b8:cf:1b:68:38:ce:70:17:be:
a7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DE:59:96:91:E1:76:0C:A8:29:1B:44:F2:27:74:53:D7:C4:65:0E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eN5ZlpHhdgyoKRtE8id0U9fEZQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.89.0/24
82.115.211.0/24
185.222.160.0/24
185.222.162.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:bd:5d:01:52:ce:78:31:38:8e:e2:38:7a:26:97:73:98:a9:
a3:f6:59:7c:79:07:e8:5c:a2:4b:37:2a:8e:8c:3e:5f:0f:fe:
fa:49:1b:b6:fd:1a:fd:02:d4:58:95:48:c1:ef:09:47:5e:70:
47:8b:86:b7:74:02:a7:5b:df:64:75:6b:09:59:6c:ec:59:1b:
cc:9d:0a:a3:81:b9:6c:9d:89:a5:93:f0:44:37:54:d9:1f:30:
97:82:e1:38:08:a7:f2:27:f0:1f:07:65:91:c5:43:36:8e:6c:
fd:ba:f3:69:5e:87:10:76:7a:17:01:7b:47:78:f6:05:5f:42:
c0:ea:bb:ef:95:e9:9b:a5:18:2c:2b:13:d7:d4:24:9e:96:f5:
7a:8c:5a:20:2e:e7:2c:4c:ee:1c:41:9c:53:2d:b4:31:f3:8e:
e4:4d:c1:f1:b6:74:a9:81:a6:b2:d9:d1:d0:3f:f8:df:ca:65:
60:b6:04:93:2c:27:d1:be:ed:2c:04:07:ef:d0:5d:d4:6c:1a:
36:78:79:3d:34:7a:05:99:48:5f:f1:b4:ef:e6:b5:5d:19:57:
13:c7:94:13:f7:60:bc:04:19:3a:42:0f:86:19:8d:91:86:95:
eb:3f:92:49:e6:95:97:be:d0:22:f9:8a:ec:19:62:81:60:c6:
e3:de:a5:fd
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQoJLXaszbOsKiwy1pseMjyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGRlNTk5NjkxZTE3NjBjYTgyOTFiNDRmMjI3NzQ1M2Q3YzQ2NTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7mLJAQyhIDAuwuuhWYULPvlb00P
J5YQlHaNzYnmJhiRLhw7lnPnoj+mqiP98A1BSroAh/PxU4UvprCYhch7Nk0TP1eX
/Ky9EDyHaeGJm4h3uRp8GASncPnTNnNcmRr/1nn5mlSaANR8YG+2wyVDQHS1Vj6o
d/lmNCs44ibcLfMELrc1WqgdvWHrz9Cj90Lyx1oZqyiV/0oFA/Muc7/J9CN9Mdk0
6sRE7ajvbFIfw+7BF5LgQoEbdTgp8/TJaiqC6tWiNrfhQN8XuENjiK4fptCr7l9A
qYhndJ+FnWXNk6wlS12xasjryuVc9wcdxThJfPQv0nu4zxtoOM5wF76n9QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHjeWZaR4XYMqCkbRPIndFPXxGUOMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvZU41WmxwSGhkZ3lvS1J0RThpZDBVOWZFWlE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALVpZAwQA
UnPTAwQAud6gAwQAud6iMA0GCSqGSIb3DQEBCwUAA4IBAQAMvV0BUs54MTiO4jh6
JpdzmKmj9ll8eQfoXKJLNyqOjD5fD/76SRu2/Rr9AtRYlUjB7wlHXnBHi4a3dAKn
W99kdWsJWWzsWRvMnQqjgblsnYmlk/BEN1TZHzCXguE4CKfyJ/AfB2WRxUM2jmz9
uvNpXocQdnoXAXtHePYFX0LA6rvvlembpRgsKxPX1CSelvV6jFogLucsTO4cQZxT
LbQx847kTcHxtnSpgaay2dHQP/jfymVgtgSTLCfRvu0sBAfv0F3UbBo2eHk9NHoF
mUhf8bTv5rVdGVcTx5QT92C8BBk6Qg+GGY2RhpXrP5JJ5pWXvtAi+YrsGWKBYMbj
3qX9
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:45:41 2025 by rpki-client