Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/74CM9vdQ7CvUejtayGSLakiy4u0.roa
File: 74CM9vdQ7CvUejtayGSLakiy4u0.roa (raw, json)
Hash identifier: /Cw5wqnFjP+nXBU2ovTXOeBnFvEQ1+cMpcd5PiQGuxI=
Subject key identifier: EF:80:8C:F6:F7:50:EC:2B:D4:7A:3B:5A:C8:64:8B:6A:48:B2:E2:ED
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0194266BB9B020FDFA7B19025BDEAEE6A312
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/74CM9vdQ7CvUejtayGSLakiy4u0.roa
Signing time: Thu 02 Jan 2025 09:49:41 +0000
ROA not before: Thu 02 Jan 2025 09:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 91.210.144.0/24 maxlen: 24
109.122.45.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Jan 2025 20:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b9:b0:20:fd:fa:7b:19:02:5b:de:ae:e6:a3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 09:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef808cf6f750ec2bd47a3b5ac8648b6a48b2e2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7a:35:b1:71:0b:68:e8:93:f5:95:f6:0e:7e:
17:fa:cf:dd:96:b9:8e:e3:62:06:8d:57:40:6e:c5:
b1:e2:93:6a:ad:ef:6c:93:61:6b:7c:a1:06:cd:a2:
36:df:03:5a:8e:05:39:1f:8e:3d:c9:f0:af:40:76:
8b:db:8d:5a:09:2d:63:30:b3:86:2c:37:92:56:99:
60:18:6e:fe:9a:8c:0d:8a:43:6d:55:e0:9d:8f:30:
7f:f2:ae:a7:c4:56:ce:21:19:c1:a7:2d:37:a6:b3:
75:3a:f7:ce:0a:43:5a:5c:34:16:85:ff:df:9c:85:
df:07:f4:ff:95:c3:79:21:01:76:26:b5:a5:2a:02:
46:82:b5:72:cd:4a:5e:9d:a6:08:d0:38:c0:b0:03:
ed:9b:7a:8a:15:f8:2d:8b:c8:1b:6f:83:f9:24:a1:
57:5b:cf:37:62:86:5e:8a:d1:50:85:9b:45:3d:14:
33:1b:5d:86:b0:b3:36:e8:c9:54:27:7a:91:96:0f:
0d:df:50:68:38:27:31:f2:5a:52:01:11:7a:b2:b9:
91:64:f3:cc:cc:3c:01:41:66:4e:24:5e:d9:90:54:
46:ca:cf:d9:1a:c3:01:e6:c7:b0:cb:64:c6:0f:8e:
80:a7:c6:1a:68:e2:46:7b:69:87:b4:e0:f3:f8:50:
49:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:80:8C:F6:F7:50:EC:2B:D4:7A:3B:5A:C8:64:8B:6A:48:B2:E2:ED
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/74CM9vdQ7CvUejtayGSLakiy4u0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.144.0/24
109.122.45.0-109.122.46.255
Signature Algorithm: sha256WithRSAEncryption
98:af:6e:e4:b4:46:ce:df:08:73:83:fd:0e:00:be:1e:1c:ac:
94:d4:a5:a4:bc:e8:b2:68:45:41:08:51:71:e0:db:3a:b9:47:
d9:7e:7d:54:e6:cc:19:3a:7c:a0:22:d0:4d:6a:f0:1b:88:9d:
2f:92:56:8b:52:ac:14:80:29:57:93:0d:99:ca:87:c8:a2:39:
74:00:56:33:97:0c:89:3d:b3:20:37:2b:3d:35:b3:df:ff:1a:
6c:7d:54:24:d1:91:cd:1a:0a:b2:1c:6d:9b:0c:da:ff:54:29:
88:0f:0c:89:4d:cf:56:84:aa:0a:af:35:ec:75:a2:3e:9e:b4:
be:63:c9:e5:1e:fd:ff:6f:4a:d6:30:59:5a:34:da:09:f6:59:
0d:bc:9c:f1:b8:8f:64:99:db:41:00:89:07:5d:1a:9d:89:12:
9b:da:ad:94:00:51:94:28:80:a5:22:9d:13:c3:c0:bb:8a:a6:
c8:ff:b9:1f:04:7e:33:1f:35:56:53:93:15:bb:14:4d:f0:bd:
ae:15:b9:bf:f1:a5:38:6e:68:fd:17:6e:85:93:b4:03:c1:0b:
2c:6a:ad:29:c5:2d:b8:3b:9b:e6:eb:1e:c1:9c:05:e7:0d:d1:
0c:bf:ee:13:d0:32:2c:45:98:8a:03:2d:2e:ca:33:3e:3d:9d:
18:32:81:6c
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQma7mwIP36exkCW96u5qMSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjUwMTAyMDk0OTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjgwOGNmNmY3NTBlYzJiZDQ3YTNiNWFjODY0OGI2YTQ4YjJlMmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHo1sXELaOiT9ZX2Dn4X+s/dlrmO
42IGjVdAbsWx4pNqre9sk2FrfKEGzaI23wNajgU5H449yfCvQHaL241aCS1jMLOG
LDeSVplgGG7+mowNikNtVeCdjzB/8q6nxFbOIRnBpy03prN1OvfOCkNaXDQWhf/f
nIXfB/T/lcN5IQF2JrWlKgJGgrVyzUpenaYI0DjAsAPtm3qKFfgti8gbb4P5JKFX
W883YoZeitFQhZtFPRQzG12GsLM26MlUJ3qRlg8N31BoOCcx8lpSARF6srmRZPPM
zDwBQWZOJF7ZkFRGys/ZGsMB5sewy2TGD46Ap8YaaOJGe2mHtODz+FBJDwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFO+AjPb3UOwr1Ho7Wshki2pIsuLtMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvNzRDTTl2ZFE3Q3ZVZWp0YXlHU0xha2l5NHUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAW9KQMAwD
BABtei0DBABtei4wDQYJKoZIhvcNAQELBQADggEBAJivbuS0Rs7fCHOD/Q4Avh4c
rJTUpaS86LJoRUEIUXHg2zq5R9l+fVTmzBk6fKAi0E1q8BuInS+SVotSrBSAKVeT
DZnKh8iiOXQAVjOXDIk9syA3Kz01s9//Gmx9VCTRkc0aCrIcbZsM2v9UKYgPDIlN
z1aEqgqvNex1oj6etL5jyeUe/f9vStYwWVo02gn2WQ28nPG4j2SZ20EAiQddGp2J
EpvarZQAUZQogKUinRPDwLuKpsj/uR8EfjMfNVZTkxW7FE3wva4Vub/xpThuaP0X
boWTtAPBCyxqrSnFLbg7m+brHsGcBecN0Qy/7hPQMixFmIoDLS7KMz49nRgygWw=
-----END CERTIFICATE-----
Generated at Thu Apr 17 21:54:50 2025 by rpki-client