Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/co_qLNmwHylm2MVAbAkzgaky_4g.roa
File: co_qLNmwHylm2MVAbAkzgaky_4g.roa (raw, json)
Hash identifier: eEchKN7rzxyHuMNSUB9V56yV76rMqQvCyuHxHUEh9FY=
Subject key identifier: 72:8F:EA:2C:D9:B0:1F:29:66:D8:C5:40:6C:09:33:81:A9:32:FF:88
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 0193D4738BE82806BCCC9DA4A0128797DE27
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/co_qLNmwHylm2MVAbAkzgaky_4g.roa
Signing time: Tue 17 Dec 2024 11:49:22 +0000
ROA not before: Tue 17 Dec 2024 11:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39598
IP address blocks: 95.161.0.0/18 maxlen: 24
95.161.124.0/24 maxlen: 24
95.161.248.0/21 maxlen: 21
95.161.250.0/24 maxlen: 24
2a00:11d8::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d4:73:8b:e8:28:06:bc:cc:9d:a4:a0:12:87:97:de:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Dec 17 11:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=728fea2cd9b01f2966d8c5406c093381a932ff88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:42:b1:33:6c:b3:76:65:a6:b4:77:5a:65:5a:
2d:eb:e8:ae:e2:6f:fb:b8:ed:6b:5a:e4:98:8e:f1:
da:eb:9c:63:55:89:6e:b9:0f:64:ba:4f:97:f5:87:
e0:ae:5d:66:bb:df:9f:38:e7:9c:a6:41:96:ed:f3:
14:38:70:ba:4e:4e:2e:66:82:f1:d5:0e:67:f1:cb:
a9:11:91:c0:f8:c8:2f:ab:d2:1f:9a:8e:c6:69:8f:
8e:24:0d:78:cf:2d:63:95:fa:66:41:b9:03:c8:ae:
17:fa:1d:65:da:19:41:47:6a:f2:3c:5e:d6:4a:bb:
aa:3d:d0:31:21:6f:ce:7a:3c:88:f3:f8:7b:1a:1b:
e7:90:b7:b3:ac:46:0f:88:09:79:69:26:f2:26:02:
9c:6b:ea:e6:57:db:83:2b:82:d6:05:1f:2d:ad:11:
14:3b:3a:ee:f0:fa:b9:28:82:7f:a0:93:72:2b:50:
dd:4f:20:f8:c9:e0:d9:2e:a8:f5:77:cf:51:be:21:
71:69:d6:b3:c9:f9:40:f7:99:81:f7:9d:00:7a:69:
cc:d8:36:67:33:9a:96:29:68:66:3e:1e:3d:a1:66:
9f:99:79:9a:ff:dd:2c:13:56:bf:f5:e3:0b:56:1b:
ca:e2:86:12:f8:2b:d8:e9:c9:26:32:86:8d:85:4d:
15:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8F:EA:2C:D9:B0:1F:29:66:D8:C5:40:6C:09:33:81:A9:32:FF:88
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/co_qLNmwHylm2MVAbAkzgaky_4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.161.0.0/18
95.161.124.0/24
95.161.248.0/21
IPv6:
2a00:11d8::/32
Signature Algorithm: sha256WithRSAEncryption
15:3a:28:87:31:31:84:23:f8:01:be:d5:e5:2a:0c:6a:4c:f3:
bc:10:15:3c:75:b3:b3:77:f5:9d:8c:e7:03:e7:e2:3c:83:8a:
70:df:35:76:70:e5:45:ba:f5:fe:36:32:4f:09:69:42:75:30:
d7:68:f6:44:20:68:e5:5d:a4:5a:72:6a:bf:ed:30:6a:30:64:
fc:cd:2d:42:ec:96:c7:e1:2e:4d:42:f8:b5:6e:4a:b8:d2:e0:
4c:2d:38:93:1a:87:0b:98:36:b2:cf:58:28:ec:0c:b2:10:9f:
57:de:7f:f0:51:a5:a6:2b:06:e6:ee:64:28:f9:73:47:ed:74:
02:09:50:00:4d:ca:21:d1:5c:fc:57:d6:70:67:92:51:10:c9:
24:d4:72:cd:c2:63:6e:3a:46:e5:43:dd:a6:f4:c1:21:26:e1:
f7:2a:de:9d:dc:a1:16:f4:fa:4e:bc:af:7b:0d:56:9e:ed:6d:
25:10:3c:53:51:dd:e4:84:b1:f9:23:37:ec:ed:9c:0e:d8:a0:
a2:0b:20:99:6e:1a:71:3d:f6:32:03:be:ea:17:6f:06:cb:c6:
43:1b:90:2f:ff:56:de:af:c5:2e:bb:2f:02:de:29:d6:3d:85:
52:4e:cf:4f:3d:37:32:ce:e1:76:1b:41:4d:a7:c1:9a:12:1e:
62:99:9e:ad
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZPUc4voKAa8zJ2koBKHl94nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx
YTUxYjgwHhcNMjQxMjE3MTE0OTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjhmZWEyY2Q5YjAxZjI5NjZkOGM1NDA2YzA5MzM4MWE5MzJmZjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkKxM2yzdmWmtHdaZVot6+iu4m/7
uO1rWuSYjvHa65xjVYluuQ9kuk+X9Yfgrl1mu9+fOOecpkGW7fMUOHC6Tk4uZoLx
1Q5n8cupEZHA+Mgvq9Ifmo7GaY+OJA14zy1jlfpmQbkDyK4X+h1l2hlBR2ryPF7W
SruqPdAxIW/OejyI8/h7GhvnkLezrEYPiAl5aSbyJgKca+rmV9uDK4LWBR8trREU
Ozru8Pq5KIJ/oJNyK1DdTyD4yeDZLqj1d89RviFxadazyflA95mB950AemnM2DZn
M5qWKWhmPh49oWafmXma/90sE1a/9eMLVhvK4oYS+CvY6ckmMoaNhU0VLwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFHKP6izZsB8pZtjFQGwJM4GpMv+IMB8GA1UdIwQY
MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt
NzY3NDE2NTI1MTBkLzEvY29fcUxObXdIeWxtMk1WQWJBa3pnYWt5XzRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk
LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQGX6EAAwQA
X6F8AwQDX6H4MA0EAgACMAcDBQAqABHYMA0GCSqGSIb3DQEBCwUAA4IBAQAVOiiH
MTGEI/gBvtXlKgxqTPO8EBU8dbOzd/WdjOcD5+I8g4pw3zV2cOVFuvX+NjJPCWlC
dTDXaPZEIGjlXaRacmq/7TBqMGT8zS1C7JbH4S5NQvi1bkq40uBMLTiTGocLmDay
z1go7AyyEJ9X3n/wUaWmKwbm7mQo+XNH7XQCCVAATcoh0Vz8V9ZwZ5JREMkk1HLN
wmNuOkblQ92m9MEhJuH3Kt6d3KEW9PpOvK97DVae7W0lEDxTUd3khLH5Izfs7ZwO
2KCiCyCZbhpxPfYyA77qF28Gy8ZDG5Av/1ber8Uuuy8C3inWPYVSTs9PPTcyzuF2
G0FNp8GaEh5imZ6t
-----END CERTIFICATE-----
Generated at Sat Apr 19 08:26:27 2025 by rpki-client