Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/FDiUxKGjdmXrT6sAOwXAVgswi6M.roa
File: FDiUxKGjdmXrT6sAOwXAVgswi6M.roa (raw, json)
Hash identifier: FCBFbpGfbqn95KuQDZcKegw4Y3nmtMyQfJc+KjOGoU4=
Subject key identifier: 14:38:94:C4:A1:A3:76:65:EB:4F:AB:00:3B:05:C0:56:0B:30:8B:A3
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B59FF8D18B618B7BB12D83FCD95BCC
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/FDiUxKGjdmXrT6sAOwXAVgswi6M.roa
Signing time: Thu 02 Jan 2025 15:50:01 +0000
ROA not before: Thu 02 Jan 2025 15:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41909
IP address blocks: 5.8.0.0/21 maxlen: 22
5.8.88.0/22 maxlen: 24
5.188.68.0/23 maxlen: 24
5.188.88.0/22 maxlen: 24
91.243.62.0/23 maxlen: 24
146.185.244.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 17:45:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:9f:f8:d1:8b:61:8b:7b:b1:2d:83:fc:d9:5b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=143894c4a1a37665eb4fab003b05c0560b308ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ff:05:2e:78:f4:af:8f:22:09:ed:3a:6a:d0:
3a:3f:61:7b:64:c0:25:b4:b6:56:6f:e2:08:74:c3:
3d:4f:5e:11:41:47:72:4c:93:6a:d2:1d:67:aa:e0:
4c:75:4d:f6:dd:a5:50:9e:a4:6f:c5:83:d3:6f:aa:
fb:80:52:64:8a:f0:f6:63:87:10:3a:18:0f:d6:8d:
1d:3b:c7:f8:2e:c3:d7:3d:44:09:b3:10:77:01:a3:
36:e6:cd:1b:a0:ad:be:74:92:73:ed:5d:ca:b1:f3:
80:ec:70:45:d5:a0:4b:f4:6c:43:b2:05:9c:43:ac:
d9:8b:ea:80:f0:20:62:7b:77:d4:27:82:9b:0e:24:
4a:a3:ac:4f:99:8c:46:b5:e5:1e:1c:60:21:96:7e:
e8:df:41:ff:be:95:2c:b5:d9:c6:78:cd:d7:14:ee:
b4:18:fb:c0:1f:8c:93:60:63:82:e2:92:f4:73:c0:
4f:44:a5:bf:b3:ea:e4:11:73:38:cf:17:83:34:0f:
73:48:58:18:dc:04:67:de:e2:37:3e:78:dc:e4:05:
4e:e3:b7:d5:ba:ef:39:a5:5a:b1:42:86:fa:9d:80:
b3:a6:06:42:6d:6b:fd:62:13:40:94:c4:dd:45:67:
1c:0a:2b:ab:b9:e2:53:d4:0e:ff:c6:71:f5:b6:bf:
1c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:38:94:C4:A1:A3:76:65:EB:4F:AB:00:3B:05:C0:56:0B:30:8B:A3
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/FDiUxKGjdmXrT6sAOwXAVgswi6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.0.0/21
5.8.88.0/22
5.188.68.0/23
5.188.88.0/22
91.243.62.0/23
146.185.244.0/23
Signature Algorithm: sha256WithRSAEncryption
02:2e:f7:cb:0a:91:be:1f:ed:86:b8:37:2d:0a:52:fe:65:14:
fb:24:50:3f:46:81:7d:ac:6e:fb:32:0c:d9:da:a7:d7:b6:1e:
74:54:9e:0e:b4:36:9d:5f:fd:43:65:5e:ad:d7:a7:1c:84:f2:
ba:aa:84:ec:04:1f:02:15:b7:90:41:79:68:ae:9d:fd:89:f9:
d3:cd:86:ca:85:ca:af:a4:a2:3f:0c:30:50:df:e2:b7:8f:08:
e7:e0:60:15:75:4a:76:dc:ee:59:43:66:cc:6b:d2:81:e3:55:
73:9e:8a:d1:55:01:1c:6e:c6:26:72:3e:32:9a:f4:54:14:2f:
f4:57:89:11:fa:3d:f0:32:9d:71:ad:b6:0a:3c:6b:43:9e:90:
9d:ce:5f:96:c1:eb:1a:54:ef:38:74:fa:92:52:a0:29:8d:a8:
fb:23:31:ae:fc:bb:ca:5e:cc:4b:1c:66:90:fb:81:31:0c:77:
c4:7b:7d:ff:f1:b9:4d:5b:65:c3:d9:2e:a4:a2:57:c2:3f:f7:
4a:b2:7e:46:69:12:67:f7:4b:f4:89:46:2e:f0:be:0a:15:b0:
61:4f:26:1f:20:8f:c2:f4:90:df:02:c2:40:aa:06:20:41:aa:
ba:e0:92:fc:67:20:3d:ce:ca:0e:81:ef:8b:f4:0b:6b:4b:1e:
77:62:3d:5d
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQntZ/40Ythi3uxLYP82VvMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjUwMTAyMTU1MDAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDM4OTRjNGExYTM3NjY1ZWI0ZmFiMDAzYjA1YzA1NjBiMzA4YmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP8FLnj0r48iCe06atA6P2F7ZMAl
tLZWb+IIdMM9T14RQUdyTJNq0h1nquBMdU323aVQnqRvxYPTb6r7gFJkivD2Y4cQ
OhgP1o0dO8f4LsPXPUQJsxB3AaM25s0boK2+dJJz7V3KsfOA7HBF1aBL9GxDsgWc
Q6zZi+qA8CBie3fUJ4KbDiRKo6xPmYxGteUeHGAhln7o30H/vpUstdnGeM3XFO60
GPvAH4yTYGOC4pL0c8BPRKW/s+rkEXM4zxeDNA9zSFgY3ARn3uI3Pnjc5AVO47fV
uu85pVqxQob6nYCzpgZCbWv9YhNAlMTdRWccCiurueJT1A7/xnH1tr8cUwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFBQ4lMSho3Zl60+rADsFwFYLMIujMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvRkRpVXhLR2pkbVhyVDZzQU93WEFWZ3N3aTZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQDBQgAAwQC
BQhYAwQBBbxEAwQCBbxYAwQBW/M+AwQBkrn0MA0GCSqGSIb3DQEBCwUAA4IBAQAC
LvfLCpG+H+2GuDctClL+ZRT7JFA/RoF9rG77MgzZ2qfXth50VJ4OtDadX/1DZV6t
16cchPK6qoTsBB8CFbeQQXlorp39ifnTzYbKhcqvpKI/DDBQ3+K3jwjn4GAVdUp2
3O5ZQ2bMa9KB41VznorRVQEcbsYmcj4ymvRUFC/0V4kR+j3wMp1xrbYKPGtDnpCd
zl+WwesaVO84dPqSUqApjaj7IzGu/LvKXsxLHGaQ+4ExDHfEe33/8blNW2XD2S6k
olfCP/dKsn5GaRJn90v0iUYu8L4KFbBhTyYfII/C9JDfAsJAqgYgQaq64JL8ZyA9
zsoOge+L9AtrSx53Yj1d
-----END CERTIFICATE-----
Generated at Sat Apr 12 16:31:39 2025 by rpki-client