Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/ETP_h9B5hEg0iZWp96_L9VBf-8g.roa
File: ETP_h9B5hEg0iZWp96_L9VBf-8g.roa (raw, json)
Hash identifier: ceiY7m0VZ4TaGs0KXdz/0Y9AD/Jb35GA/feTSh2WI8E=
Subject key identifier: 11:33:FF:87:D0:79:84:48:34:89:95:A9:F7:AF:CB:F5:50:5F:FB:C8
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 019421B256BAD700B3DF2BA79DD530501AF0
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/ETP_h9B5hEg0iZWp96_L9VBf-8g.roa
Signing time: Wed 01 Jan 2025 11:48:43 +0000
ROA not before: Wed 01 Jan 2025 11:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3223
IP address blocks: 91.221.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Jan 2025 04:23:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:56:ba:d7:00:b3:df:2b:a7:9d:d5:30:50:1a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jan 1 11:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1133ff87d0798448348995a9f7afcbf5505ffbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:10:60:39:58:3b:5f:eb:11:01:7f:a2:3f:69:
4e:7a:fb:7c:a0:a4:fb:97:8f:39:00:02:fb:5d:a4:
f7:46:93:2f:88:fa:c8:60:df:35:f4:38:59:be:70:
e4:35:b3:06:a7:6e:6a:9b:e2:6d:ed:7b:46:f3:6c:
96:db:7d:0b:3e:93:a7:0c:8e:6e:76:5c:3a:cc:e0:
ce:87:52:05:af:73:1f:0c:23:36:ab:85:fa:ca:91:
c6:25:02:df:ce:e9:1d:10:9d:bc:ef:fc:c0:7c:33:
92:cc:da:70:f5:4d:38:d7:f5:9e:9e:8a:c9:6e:9c:
59:62:8e:6f:4c:e7:e8:e2:0d:53:2a:5e:92:06:e9:
20:4a:76:e8:e7:28:2a:15:32:de:54:f3:c9:ee:bc:
66:77:91:46:14:c7:06:07:80:d2:d0:be:7e:63:5c:
68:41:83:9d:b3:6b:b5:61:11:7e:64:7a:d0:d2:66:
80:96:fd:97:73:63:7e:d6:f3:a0:89:9a:07:08:64:
2e:63:d4:d5:62:3f:76:c0:47:0c:45:65:b6:0e:06:
93:43:f9:88:25:f8:ac:e7:80:44:33:c9:f3:16:3a:
6c:29:88:29:c6:44:62:f0:81:c1:3f:7e:45:5c:22:
de:3e:8b:08:88:65:bf:1d:01:ed:ca:fc:87:44:30:
db:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:33:FF:87:D0:79:84:48:34:89:95:A9:F7:AF:CB:F5:50:5F:FB:C8
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/ETP_h9B5hEg0iZWp96_L9VBf-8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.116.0/24
Signature Algorithm: sha256WithRSAEncryption
10:1c:42:d7:0f:ba:b4:a6:32:04:66:42:1b:f5:43:53:ce:ee:
12:b5:d2:10:b0:0b:a0:87:e3:1d:5e:10:4a:48:19:9b:88:4f:
98:4c:65:25:49:be:a1:00:74:2c:23:46:d9:c4:d3:bd:62:4d:
c3:2a:f7:6a:d3:60:bb:48:1a:aa:38:8b:d5:61:18:45:6b:46:
75:dc:ea:b8:84:36:b7:3e:83:e8:c0:ac:72:08:26:73:76:44:
fe:ad:b4:3a:51:12:be:07:70:fc:4e:c2:68:b3:82:83:10:d9:
52:fa:cc:4d:d1:10:d5:4d:46:74:a8:67:e8:bf:2f:60:45:56:
39:40:0f:7e:8a:cc:f0:49:ee:04:72:c9:4a:33:70:cd:7e:8a:
9e:b0:c4:5c:27:a0:c8:c9:c9:09:c5:e2:65:d4:26:86:5d:d7:
b1:7b:d4:1d:a4:bd:50:8d:82:1f:99:be:aa:ae:45:e3:ea:63:
85:88:68:0c:db:f2:33:c8:1a:25:f2:aa:dd:98:44:c5:f6:5f:
a2:7e:a4:d6:99:3b:2b:9c:bf:83:c5:5a:d1:e8:d0:92:6c:fb:
95:35:9f:63:70:23:da:c5:33:4f:31:2d:d4:17:ad:38:89:3a:
31:ae:99:11:08:3a:e7:c8:73:09:93:af:3c:d3:d5:8a:67:d0:
65:80:a3:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsla61wCz3yunndUwUBrwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl
MmExY2EwHhcNMjUwMTAxMTE0ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTMzZmY4N2QwNzk4NDQ4MzQ4OTk1YTlmN2FmY2JmNTUwNWZmYmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixBgOVg7X+sRAX+iP2lOevt8oKT7
l485AAL7XaT3RpMviPrIYN819DhZvnDkNbMGp25qm+Jt7XtG82yW230LPpOnDI5u
dlw6zODOh1IFr3MfDCM2q4X6ypHGJQLfzukdEJ287/zAfDOSzNpw9U041/WenorJ
bpxZYo5vTOfo4g1TKl6SBukgSnbo5ygqFTLeVPPJ7rxmd5FGFMcGB4DS0L5+Y1xo
QYOds2u1YRF+ZHrQ0maAlv2Xc2N+1vOgiZoHCGQuY9TVYj92wEcMRWW2DgaTQ/mI
Jfis54BEM8nzFjpsKYgpxkRi8IHBP35FXCLePosIiGW/HQHtyvyHRDDb9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBEz/4fQeYRINImVqfevy/VQX/vIMB8GA1UdIwQY
MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt
YTZjYTQ1NGRiMmQ3LzEvRVRQX2g5QjVoRWcwaVpXcDk2X0w5VkJmLThnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3
LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW910MA0G
CSqGSIb3DQEBCwUAA4IBAQAQHELXD7q0pjIEZkIb9UNTzu4StdIQsAugh+MdXhBK
SBmbiE+YTGUlSb6hAHQsI0bZxNO9Yk3DKvdq02C7SBqqOIvVYRhFa0Z13Oq4hDa3
PoPowKxyCCZzdkT+rbQ6URK+B3D8TsJos4KDENlS+sxN0RDVTUZ0qGfovy9gRVY5
QA9+iszwSe4EcslKM3DNfoqesMRcJ6DIyckJxeJl1CaGXdexe9QdpL1QjYIfmb6q
rkXj6mOFiGgM2/IzyBol8qrdmETF9l+ifqTWmTsrnL+DxVrR6NCSbPuVNZ9jcCPa
xTNPMS3UF604iToxrpkRCDrnyHMJk68809WKZ9BlgKNl
-----END CERTIFICATE-----
Generated at Thu Apr 17 07:16:58 2025 by rpki-client