Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/7wlQMAvR6QN0SuFdj6ecYzQybGw.roa
File: 7wlQMAvR6QN0SuFdj6ecYzQybGw.roa (raw, json)
Hash identifier: GuouegIeUgnQs69/5TXCUIVPCNIlin5krFaxEcLRni8=
Subject key identifier: EF:09:50:30:0B:D1:E9:03:74:4A:E1:5D:8F:A7:9C:63:34:32:6C:6C
Certificate issuer: /CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Certificate serial: 018CC64AA708D6C13A92D71A5B7F0D0925BF
Authority key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/7wlQMAvR6QN0SuFdj6ecYzQybGw.roa
Signing time: Mon 01 Jan 2024 18:30:30 +0000
ROA not before: Mon 01 Jan 2024 18:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29611
IP address blocks: 45.157.84.0/22 maxlen: 24
217.68.240.0/20 maxlen: 24
185.2.216.0/22 maxlen: 24
185.43.184.0/22 maxlen: 24
185.73.184.0/22 maxlen: 24
217.69.32.0/20 maxlen: 24
2a0f:5280::/29 maxlen: 48
2a03:2d20::/32 maxlen: 48
2a00:c20::/32 maxlen: 32
2a04:95c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:a7:08:d6:c1:3a:92:d7:1a:5b:7f:0d:09:25:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Validity
Not Before: Jan 1 18:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef0950300bd1e903744ae15d8fa79c6334326c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5a:91:7c:7a:5e:ff:d6:cf:7f:33:72:b7:d3:
b3:66:84:98:6a:67:2c:b6:5c:4f:3d:cd:4c:00:9c:
9b:a8:96:32:50:f4:40:1a:21:b3:4f:4a:29:51:92:
54:bb:ff:95:9f:36:8f:6e:a5:e5:3f:ab:f2:8b:9e:
a2:3c:5d:b9:3c:8b:0c:3e:7c:84:73:c8:90:cb:43:
d5:62:73:a1:00:1b:11:69:24:f2:4c:0a:ef:cf:e9:
0a:fb:22:cb:4d:c0:9a:ef:2b:aa:ac:7a:a8:10:22:
48:c5:46:6f:6e:a6:80:46:06:02:d4:9e:bb:21:96:
30:dd:74:ec:c3:b1:bc:88:0f:62:02:af:d6:44:aa:
12:31:2e:7a:b3:c2:24:e0:8d:87:c5:74:12:03:9a:
de:35:7d:07:48:98:9b:b5:82:1e:eb:a7:97:82:07:
0d:7a:16:44:10:06:25:9d:79:51:29:1e:44:8a:3c:
59:dc:92:84:9d:1d:85:51:09:23:16:17:46:05:7a:
95:01:6a:b0:a3:94:d8:9a:ee:57:1b:df:e4:44:a9:
50:16:b3:91:47:9a:8b:1e:6a:38:fd:c0:2a:1d:fa:
35:4e:99:36:96:e1:bb:06:ab:89:93:62:38:de:90:
52:21:a1:bb:31:2c:64:2a:37:5b:26:09:42:f3:a1:
33:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:09:50:30:0B:D1:E9:03:74:4A:E1:5D:8F:A7:9C:63:34:32:6C:6C
X509v3 Authority Key Identifier:
keyid:98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/7wlQMAvR6QN0SuFdj6ecYzQybGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.84.0/22
185.2.216.0/22
185.43.184.0/22
185.73.184.0/22
217.68.240.0/20
217.69.32.0/20
IPv6:
2a00:c20::/32
2a03:2d20::/32
2a04:95c0::/29
2a0f:5280::/29
Signature Algorithm: sha256WithRSAEncryption
90:b5:f0:6e:a7:22:a1:74:b1:ea:b5:ba:d4:8a:d6:85:dc:0f:
bc:8e:60:4e:1b:6f:61:f9:b6:2b:46:ed:0b:20:10:d5:91:36:
a9:b6:d1:48:d5:2a:69:82:ef:3e:de:be:7a:9b:e0:56:8e:cd:
82:7a:dd:f8:90:56:c3:c7:3c:5c:0f:5e:dc:e1:d8:7c:8d:5c:
33:4b:dc:d2:bd:d9:71:79:bf:1e:42:3a:ac:f5:4f:11:c0:42:
66:8e:04:c8:fa:7a:d9:e3:93:54:c3:da:8c:15:6c:0c:e8:91:
1c:15:e7:17:d5:3b:d5:22:eb:68:10:07:4d:7c:b3:3e:cd:41:
8c:cd:c1:0e:f8:35:f8:57:b8:76:f7:7d:6e:24:97:21:f4:0c:
8d:da:1e:1b:bc:91:d6:c6:78:8f:2e:50:54:25:86:98:ae:13:
b5:5f:d1:e3:79:1e:b5:49:ef:8a:be:03:0c:81:22:15:90:da:
ad:5b:ea:11:bf:40:28:58:20:6f:66:47:90:82:5a:33:86:21:
a9:a3:cc:ad:6e:c9:e0:f7:78:08:f8:4f:62:4b:2c:36:a8:10:
20:88:14:af:82:98:c1:e1:2c:c3:ab:e9:58:29:1d:2c:9e:39:
9b:16:cf:8c:99:a1:00:14:6e:d5:8d:ca:fb:f7:d0:d4:49:7e:
e5:a8:eb:1f
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAYzGSqcI1sE6ktcaW38NCSW/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YTk4N2M2Y2QwYTM2Zjk0ZGJlZjEwZWYyYTJjNjYwMjBh
OTU2MTEwHhcNMjQwMTAxMTgzMDMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjA5NTAzMDBiZDFlOTAzNzQ0YWUxNWQ4ZmE3OWM2MzM0MzI2YzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlqRfHpe/9bPfzNyt9OzZoSYamcs
tlxPPc1MAJybqJYyUPRAGiGzT0opUZJUu/+VnzaPbqXlP6vyi56iPF25PIsMPnyE
c8iQy0PVYnOhABsRaSTyTArvz+kK+yLLTcCa7yuqrHqoECJIxUZvbqaARgYC1J67
IZYw3XTsw7G8iA9iAq/WRKoSMS56s8Ik4I2HxXQSA5reNX0HSJibtYIe66eXggcN
ehZEEAYlnXlRKR5EijxZ3JKEnR2FUQkjFhdGBXqVAWqwo5TYmu5XG9/kRKlQFrOR
R5qLHmo4/cAqHfo1Tpk2luG7BquJk2I43pBSIaG7MSxkKjdbJglC86EzlQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFO8JUDAL0ekDdErhXY+nnGM0MmxsMB8GA1UdIwQY
MBaAFJiph8bNCjb5Tb7xDvKixmAgqVYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUttSHhzMEtOdmxOdnZFTzhxTEdZQ0NwVmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hYjgzMDctNWY5Yy00OWM2LThhMGIt
ZjNiNDU4MTlmMmIwLzEvN3dsUU1BdlI2UU4wU3VGZGo2ZWNZelF5Ykd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9hYjgzMDctNWY5Yy00OWM2LThhMGItZjNiNDU4MTlmMmIw
LzEvbUttSHhzMEtOdmxOdnZFTzhxTEdZQ0NwVmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDAqBAIAATAkAwQCLZ1UAwQC
uQLYAwQCuSu4AwQCuUm4AwQE2UTwAwQE2UUgMCIEAgACMBwDBQAqAAwgAwUAKgMt
IAMFAyoElcADBQMqD1KAMA0GCSqGSIb3DQEBCwUAA4IBAQCQtfBupyKhdLHqtbrU
itaF3A+8jmBOG29h+bYrRu0LIBDVkTapttFI1Sppgu8+3r56m+BWjs2Cet34kFbD
xzxcD17c4dh8jVwzS9zSvdlxeb8eQjqs9U8RwEJmjgTI+nrZ45NUw9qMFWwM6JEc
FecX1TvVIutoEAdNfLM+zUGMzcEO+DX4V7h2931uJJch9AyN2h4bvJHWxniPLlBU
JYaYrhO1X9HjeR61Se+KvgMMgSIVkNqtW+oRv0AoWCBvZkeQglozhiGpo8ytbsng
93gI+E9iSyw2qBAgiBSvgpjB4SzDq+lYKR0snjmbFs+MmaEAFG7Vjcr799DUSX7l
qOsf
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:27 2025 by rpki-client