Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/5XamEG9kGalk08-LoQxCf0qIPrY.roa
File: 5XamEG9kGalk08-LoQxCf0qIPrY.roa (raw, json)
Hash identifier: AgzaAnkvKbSsxJFj4WcdmmxgQzvhoV17bgrpGlxlO/w=
Subject key identifier: E5:76:A6:10:6F:64:19:A9:64:D3:CF:8B:A1:0C:42:7F:4A:88:3E:B6
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0194266BBDC7E693A68A4B50836834A48D19
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/5XamEG9kGalk08-LoQxCf0qIPrY.roa
Signing time: Thu 02 Jan 2025 09:49:42 +0000
ROA not before: Thu 02 Jan 2025 09:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 89.21.86.0/24 maxlen: 24
89.251.24.0/24 maxlen: 24
109.122.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Jan 2025 09:54:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:bd:c7:e6:93:a6:8a:4b:50:83:68:34:a4:8d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 09:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e576a6106f6419a964d3cf8ba10c427f4a883eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:29:83:28:0a:16:38:9c:6c:70:9f:83:b6:
ea:d6:4d:34:0e:de:24:c9:2e:a0:30:81:ea:46:72:
87:57:5b:36:44:97:ee:ad:d4:27:cf:14:de:7f:0d:
03:12:61:fc:ad:7c:cb:ea:c3:32:b1:37:54:b5:0a:
cf:f3:25:1b:79:7f:a4:d2:cc:7f:10:c7:49:a5:7b:
51:a6:e4:56:54:2f:b4:33:17:6e:9e:d7:09:ec:86:
cd:e8:5a:84:09:16:fb:64:89:08:47:a3:d1:c1:96:
3c:01:0d:6e:38:e9:82:55:2b:f6:46:63:dc:8f:11:
26:5c:c3:cd:91:4c:97:53:f1:9f:27:d3:c3:c6:a8:
97:99:1f:05:73:e3:14:18:28:69:d6:ca:fc:f9:ce:
da:81:2d:11:e9:ee:bd:b0:a1:33:2c:33:40:3c:d0:
c3:49:fe:62:75:c4:e8:78:12:58:42:a7:10:dd:0d:
d7:43:66:a0:14:f1:bc:f9:67:f9:b5:a0:b7:b9:c9:
fe:ed:62:4b:60:82:ca:84:d3:a7:1a:b6:be:80:24:
3b:bf:05:75:3f:0e:4f:56:6a:cd:58:a5:78:83:e6:
aa:9a:24:6b:33:9d:89:c9:53:29:b4:e7:e3:27:0c:
49:18:b5:05:24:3c:a2:96:5c:16:38:7d:39:e9:4b:
b2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:76:A6:10:6F:64:19:A9:64:D3:CF:8B:A1:0C:42:7F:4A:88:3E:B6
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/5XamEG9kGalk08-LoQxCf0qIPrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.86.0/24
89.251.24.0/24
109.122.43.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:e5:2b:67:1b:68:1d:09:cf:c4:26:fc:c4:94:ee:6d:e7:d7:
44:45:f7:bf:02:4f:01:2f:cb:e0:2b:66:0a:22:06:40:69:e4:
7d:3c:97:c2:ba:6a:e8:40:0b:1d:cf:ea:49:25:60:14:47:53:
db:40:62:7f:3f:c1:40:18:6a:ae:13:79:b3:15:42:45:76:8a:
02:f0:0f:4f:52:fd:ac:81:7c:2e:e1:d7:f2:51:81:e5:ab:f9:
5f:95:b1:8f:74:9b:92:af:03:b3:45:67:e6:39:bc:73:0a:d9:
1b:92:0f:7e:9b:30:81:65:6e:55:a4:17:90:fb:e0:04:be:19:
7e:d3:67:68:3b:62:e4:50:58:c9:1d:3b:cd:dd:07:90:65:da:
74:76:ba:e2:97:27:e9:9e:73:47:d5:3b:fe:54:fa:af:63:6d:
49:0c:4d:08:94:99:bf:ad:dd:68:54:2d:cf:a4:ab:b9:c9:22:
3c:a2:7b:3f:c4:9b:6e:92:37:42:92:bc:1d:b3:df:33:2f:d1:
a1:21:9c:74:0a:d5:3a:41:b6:81:68:7a:40:21:d9:d5:8d:8a:
dd:eb:b2:f9:91:71:f0:a6:66:59:57:f4:ad:ae:7b:24:be:8c:
8a:12:df:15:5c:65:9d:02:15:d5:31:a1:a6:96:c0:67:86:cc:
5d:6e:3c:94
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQma73H5pOmiktQg2g0pI0ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjUwMTAyMDk0OTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTc2YTYxMDZmNjQxOWE5NjRkM2NmOGJhMTBjNDI3ZjRhODgzZWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaQpgygKFjicbHCfg7bq1k00Dt4k
yS6gMIHqRnKHV1s2RJfurdQnzxTefw0DEmH8rXzL6sMysTdUtQrP8yUbeX+k0sx/
EMdJpXtRpuRWVC+0MxduntcJ7IbN6FqECRb7ZIkIR6PRwZY8AQ1uOOmCVSv2RmPc
jxEmXMPNkUyXU/GfJ9PDxqiXmR8Fc+MUGChp1sr8+c7agS0R6e69sKEzLDNAPNDD
Sf5idcToeBJYQqcQ3Q3XQ2agFPG8+Wf5taC3ucn+7WJLYILKhNOnGra+gCQ7vwV1
Pw5PVmrNWKV4g+aqmiRrM52JyVMptOfjJwxJGLUFJDyillwWOH056UuyOQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOV2phBvZBmpZNPPi6EMQn9KiD62MB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvNVhhbUVHOWtHYWxrMDgtTG9ReENmMHFJUHJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWRVWAwQA
WfsYAwQAbXorMA0GCSqGSIb3DQEBCwUAA4IBAQA/5StnG2gdCc/EJvzElO5t59dE
Rfe/Ak8BL8vgK2YKIgZAaeR9PJfCumroQAsdz+pJJWAUR1PbQGJ/P8FAGGquE3mz
FUJFdooC8A9PUv2sgXwu4dfyUYHlq/lflbGPdJuSrwOzRWfmObxzCtkbkg9+mzCB
ZW5VpBeQ++AEvhl+02doO2LkUFjJHTvN3QeQZdp0drrilyfpnnNH1Tv+VPqvY21J
DE0IlJm/rd1oVC3PpKu5ySI8ons/xJtukjdCkrwds98zL9GhIZx0CtU6QbaBaHpA
IdnVjYrd67L5kXHwpmZZV/StrnskvoyKEt8VXGWdAhXVMaGmlsBnhsxdbjyU
-----END CERTIFICATE-----
Generated at Thu Apr 17 21:45:23 2025 by rpki-client