Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/DnEKBj9uR_VSVGs4VNLrCNQGcF0.roa
File: DnEKBj9uR_VSVGs4VNLrCNQGcF0.roa (raw, json)
Hash identifier: +bQjyLXVU2q0njBk0leR4X/Let5ZaqtUsoK9QqYHiYI=
Subject key identifier: 0E:71:0A:06:3F:6E:47:F5:52:54:6B:38:54:D2:EB:08:D4:06:70:5D
Certificate issuer: /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial: 018DA7DB94BC7E3A2634FEFB6279375E93E8
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/DnEKBj9uR_VSVGs4VNLrCNQGcF0.roa
Signing time: Wed 14 Feb 2024 13:43:21 +0000
ROA not before: Wed 14 Feb 2024 13:43:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 83.138.0.0/21 maxlen: 24
212.25.192.0/20 maxlen: 24
212.25.208.0/23 maxlen: 24
212.25.212.0/23 maxlen: 24
212.159.192.0/19 maxlen: 24
212.159.224.0/19 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:db:94:bc:7e:3a:26:34:fe:fb:62:79:37:5e:93:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Validity
Not Before: Feb 14 13:43:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e710a063f6e47f552546b3854d2eb08d406705d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fe:3e:78:4c:e0:8d:69:b1:b7:70:e7:c1:5b:
87:bb:bc:47:5b:06:7c:ec:8f:05:68:55:fa:be:47:
7c:85:0b:fc:6f:32:e5:98:31:9b:0a:a8:42:10:5e:
41:29:fd:fe:5c:15:a3:b5:50:5f:52:82:69:99:10:
47:eb:76:b8:2e:c3:50:3c:d9:81:78:bf:2b:43:a9:
a3:9f:72:b3:23:f3:e2:8f:49:49:ea:a9:92:83:92:
e6:04:6c:fa:cd:c6:03:e0:33:eb:99:d6:4e:d9:9f:
9e:a5:d3:ce:01:71:c7:5f:4c:2a:e0:e1:3f:40:11:
45:3f:3d:c3:55:76:73:12:2c:b8:ed:ef:7a:b8:38:
97:4c:b2:41:78:92:a5:64:b8:b3:e7:5f:79:52:99:
04:f8:16:70:95:26:c7:aa:38:a4:92:32:e4:b3:ca:
06:c2:9b:41:44:fa:8e:12:7e:79:e1:b0:40:c8:cd:
15:6c:0f:51:7b:f7:77:e7:b1:ed:a1:24:05:b9:10:
0f:c5:ce:b6:e0:51:96:52:fc:3b:8f:56:7f:10:ee:
1f:77:dd:c8:98:a7:50:95:66:97:1b:c8:74:0b:f4:
bf:a9:2c:cf:8d:db:64:22:8c:97:a3:2f:4c:d5:86:
67:26:3e:dc:21:0f:dc:30:a6:d2:ce:c3:9d:83:50:
d5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:71:0A:06:3F:6E:47:F5:52:54:6B:38:54:D2:EB:08:D4:06:70:5D
X509v3 Authority Key Identifier:
keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/DnEKBj9uR_VSVGs4VNLrCNQGcF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.0.0/21
212.25.192.0-212.25.209.255
212.25.212.0/23
212.159.192.0/18
Signature Algorithm: sha256WithRSAEncryption
56:02:05:01:1c:08:b2:ed:16:dc:fc:aa:d1:4d:c8:72:6e:b8:
ed:3e:5a:52:20:0c:3f:d8:4e:f2:60:b5:b5:e9:f9:70:46:b3:
9c:db:fe:b3:d8:94:f1:bd:a1:84:18:ea:93:28:c0:d7:b8:85:
a9:86:46:d3:05:a8:c2:43:d5:0e:45:a7:e6:68:86:fc:2e:33:
7d:89:91:c3:60:05:02:74:ef:3c:b8:fa:ba:fd:6a:c6:f9:ae:
9e:d2:13:df:9b:e7:10:e3:e5:9b:f0:9e:be:7d:bf:b1:2d:c0:
fc:92:a1:94:56:90:84:1e:18:c3:55:4f:35:00:31:ca:50:a0:
b4:1d:da:01:0c:21:91:f3:14:ae:ee:2b:2f:5c:97:13:9e:f5:
30:9e:66:31:6d:32:98:a8:d7:29:39:4d:55:73:a1:f4:65:e5:
c8:0c:ef:d7:a5:87:6e:2a:33:7d:d6:87:db:06:05:28:86:ca:
fc:23:c1:58:05:3e:92:2f:b3:4a:e0:44:46:91:44:6e:86:16:
b2:05:5a:14:7e:ff:f6:14:60:4f:d8:68:ad:52:9c:0d:3f:8d:
16:99:20:e8:b7:a7:91:34:55:cf:5d:96:0a:64:58:33:dd:76:
95:fa:f6:29:70:80:38:62:72:53:2f:9c:35:ac:65:7f:1e:53:
d1:6a:5a:9c
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAY2n25S8fjomNP77Ynk3XpPoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNmJmZDkyOGJjY2I0MmFkOWM0NjhhNTUyYWI3MzkzZmRk
ODcwOTUwHhcNMjQwMjE0MTM0MzIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTcxMGEwNjNmNmU0N2Y1NTI1NDZiMzg1NGQyZWIwOGQ0MDY3MDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf4+eEzgjWmxt3DnwVuHu7xHWwZ8
7I8FaFX6vkd8hQv8bzLlmDGbCqhCEF5BKf3+XBWjtVBfUoJpmRBH63a4LsNQPNmB
eL8rQ6mjn3KzI/Pij0lJ6qmSg5LmBGz6zcYD4DPrmdZO2Z+epdPOAXHHX0wq4OE/
QBFFPz3DVXZzEiy47e96uDiXTLJBeJKlZLiz5195UpkE+BZwlSbHqjikkjLks8oG
wptBRPqOEn554bBAyM0VbA9Re/d357HtoSQFuRAPxc624FGWUvw7j1Z/EO4fd93I
mKdQlWaXG8h0C/S/qSzPjdtkIoyXoy9M1YZnJj7cIQ/cMKbSzsOdg1DV9wIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFA5xCgY/bkf1UlRrOFTS6wjUBnBdMB8GA1UdIwQY
MBaAFNNr/ZKLzLQq2cRopVKrc5P92HCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJ2OWtvdk10Q3JaeEdpbFVxdHprXzNZY0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9jN2FhMmEtMDkwYy00Zjc3LTlkNjkt
YTc0ZTRhODg3ODA0LzEvRG5FS0JqOXVSX1ZTVkdzNFZOTHJDTlFHY0YwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9jN2FhMmEtMDkwYy00Zjc3LTlkNjktYTc0ZTRhODg3ODA0
LzEvMDJ2OWtvdk10Q3JaeEdpbFVxdHprXzNZY0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQDU4oAMAwD
BAbUGcADBAHUGdADBAHUGdQDBAbUn8AwDQYJKoZIhvcNAQELBQADggEBAFYCBQEc
CLLtFtz8qtFNyHJuuO0+WlIgDD/YTvJgtbXp+XBGs5zb/rPYlPG9oYQY6pMowNe4
hamGRtMFqMJD1Q5Fp+ZohvwuM32JkcNgBQJ07zy4+rr9asb5rp7SE9+b5xDj5Zvw
nr59v7EtwPySoZRWkIQeGMNVTzUAMcpQoLQd2gEMIZHzFK7uKy9clxOe9TCeZjFt
Mpio1yk5TVVzofRl5cgM79elh24qM33Wh9sGBSiGyvwjwVgFPpIvs0rgREaRRG6G
FrIFWhR+//YUYE/YaK1SnA0/jRaZIOi3p5E0Vc9dlgpkWDPddpX69ilwgDhiclMv
nDWsZX8eU9FqWpw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:56 2025 by rpki-client