Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/EZmVhyh7ylj_JyBbMaHWtD6XW8Y.roa
File: EZmVhyh7ylj_JyBbMaHWtD6XW8Y.roa (raw, json)
Hash identifier: BFNOcomnsyofkUYvmingkvlBImCrxjY/g7Ljeonf5xc=
Subject key identifier: 11:99:95:87:28:7B:CA:58:FF:27:20:5B:31:A1:D6:B4:3E:97:5B:C6
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01907E8CDACDCB6F9389C38BFB64F5C3184D
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/EZmVhyh7ylj_JyBbMaHWtD6XW8Y.roa
Signing time: Thu 04 Jul 2024 16:21:18 +0000
ROA not before: Thu 04 Jul 2024 16:21:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215133
IP address blocks: 77.72.81.0/24 maxlen: 24
146.19.93.0/24 maxlen: 24
188.93.138.0/24 maxlen: 24
212.46.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jul 2024 19:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7e:8c:da:cd:cb:6f:93:89:c3:8b:fb:64:f5:c3:18:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jul 4 16:21:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11999587287bca58ff27205b31a1d6b43e975bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2f:ec:d6:61:fc:b7:7d:2c:0c:1a:e7:bc:b9:
41:7f:ad:c8:68:64:57:27:7f:21:4e:56:90:3a:53:
f2:99:5b:42:13:85:7a:c5:52:79:31:a9:2d:fe:73:
3f:d4:aa:5d:d6:36:df:7a:58:d8:e2:e1:03:2d:17:
73:b9:f4:34:18:11:56:bd:b2:53:04:5d:8f:93:b4:
8d:4d:0d:45:16:55:43:6f:6b:71:22:31:0d:77:44:
7d:cd:ff:03:8b:de:ec:04:5f:8f:4f:98:83:bb:24:
72:d5:43:71:e5:41:f1:2e:48:fc:9b:b0:69:06:5c:
d2:6a:2f:72:6c:31:fa:68:05:cb:dd:e8:c3:69:ce:
4e:02:12:a0:3c:01:a7:5a:60:f2:01:41:3b:1c:b6:
e8:b9:5c:1e:ff:2b:02:25:8c:e6:8d:d7:b0:ef:6c:
ab:8a:55:63:08:d5:3d:7f:a9:8a:81:ff:a1:97:cc:
e8:11:c2:ac:8e:9c:ea:91:e3:4c:0b:b5:2f:2a:a1:
09:c4:f6:53:a4:e2:24:2a:d7:cf:68:11:7d:cd:00:
7f:a5:74:7a:71:c0:42:35:7d:6f:df:5a:db:fc:18:
74:42:8e:13:d5:b7:af:71:a8:60:f4:68:c7:2c:72:
5e:80:e3:45:51:1d:7f:ab:31:bc:8a:db:e8:b5:69:
c2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:99:95:87:28:7B:CA:58:FF:27:20:5B:31:A1:D6:B4:3E:97:5B:C6
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/EZmVhyh7ylj_JyBbMaHWtD6XW8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.81.0/24
146.19.93.0/24
188.93.138.0/24
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
db:ea:0b:c3:19:39:95:9c:6c:1f:30:ef:3b:b9:1e:84:2c:cb:
a1:6f:7e:fd:b4:b1:78:4a:22:f4:be:e8:7a:02:33:4e:fd:37:
d8:dd:22:ea:34:b9:0f:43:e9:a7:ed:31:dc:d9:c5:82:d9:c8:
1b:e7:b9:ff:4a:cb:8c:d5:42:8a:74:5f:2b:1a:fe:de:27:62:
10:4d:0a:f8:9f:74:49:37:e8:1e:a5:cf:a7:23:b5:b4:7a:d0:
bd:35:96:ba:09:2d:37:59:b9:ab:90:2a:eb:4c:56:6d:a9:93:
3e:43:b8:a1:1c:be:88:8d:ea:74:3b:e5:63:d0:cd:a7:1f:d6:
ce:93:b7:88:e8:cb:a2:5d:95:70:bd:06:5a:aa:9a:8c:b2:ee:
a3:a0:6e:79:af:e9:90:f8:67:5d:96:7d:87:3f:ca:de:ca:f1:
e5:db:41:51:cc:c1:6b:bf:09:bb:b0:62:82:9e:f0:5f:59:31:
dd:86:63:7c:4a:04:80:5b:3b:43:8c:a0:e8:f5:bd:42:20:25:
f8:80:3b:fa:6b:33:e1:e6:c7:f9:aa:75:8a:21:d8:92:fe:e3:
75:ca:96:15:53:a8:3b:a0:49:67:77:78:59:7c:a0:ce:51:c1:
86:9a:7c:e4:fa:7c:1c:9d:9e:4e:a1:a5:3a:42:1f:05:16:85:
33:60:e2:04
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZB+jNrNy2+TicOL+2T1wxhNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjQwNzA0MTYyMTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTk5OTU4NzI4N2JjYTU4ZmYyNzIwNWIzMWExZDZiNDNlOTc1YmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S/s1mH8t30sDBrnvLlBf63IaGRX
J38hTlaQOlPymVtCE4V6xVJ5Makt/nM/1Kpd1jbfeljY4uEDLRdzufQ0GBFWvbJT
BF2Pk7SNTQ1FFlVDb2txIjENd0R9zf8Di97sBF+PT5iDuyRy1UNx5UHxLkj8m7Bp
BlzSai9ybDH6aAXL3ejDac5OAhKgPAGnWmDyAUE7HLbouVwe/ysCJYzmjdew72yr
ilVjCNU9f6mKgf+hl8zoEcKsjpzqkeNMC7UvKqEJxPZTpOIkKtfPaBF9zQB/pXR6
ccBCNX1v31rb/Bh0Qo4T1bevcahg9GjHLHJegONFUR1/qzG8itvotWnCRQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBGZlYcoe8pY/ycgWzGh1rQ+l1vGMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvRVptVmh5aDd5bGpfSnlCYk1hSFd0RDZYVzhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATUhRAwQA
khNdAwQAvF2KAwQA1C4lMA0GCSqGSIb3DQEBCwUAA4IBAQDb6gvDGTmVnGwfMO87
uR6ELMuhb379tLF4SiL0vuh6AjNO/TfY3SLqNLkPQ+mn7THc2cWC2cgb57n/SsuM
1UKKdF8rGv7eJ2IQTQr4n3RJN+gepc+nI7W0etC9NZa6CS03WbmrkCrrTFZtqZM+
Q7ihHL6Ijep0O+Vj0M2nH9bOk7eI6MuiXZVwvQZaqpqMsu6joG55r+mQ+Gddln2H
P8reyvHl20FRzMFrvwm7sGKCnvBfWTHdhmN8SgSAWztDjKDo9b1CICX4gDv6azPh
5sf5qnWKIdiS/uN1ypYVU6g7oElnd3hZfKDOUcGGmnzk+nwcnZ5OoaU6Qh8FFoUz
YOIE
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:28:25 2025 by rpki-client