Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/XupPnguu1ANg-PwicVvfHM17JBw.roa
File: XupPnguu1ANg-PwicVvfHM17JBw.roa (raw, json)
Hash identifier: AxNlqpYwbknuYKOUFFec+gpwBeQ8MfTAKou2RJSc02s=
Subject key identifier: 5E:EA:4F:9E:0B:AE:D4:03:60:F8:FC:22:71:5B:DF:1C:CD:7B:24:1C
Certificate issuer: /CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
Certificate serial: 018CC2DB40C683AA9DD89C4CFB84490604BB
Authority key identifier: 34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/XupPnguu1ANg-PwicVvfHM17JBw.roa
Signing time: Mon 01 Jan 2024 02:29:58 +0000
ROA not before: Mon 01 Jan 2024 02:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197152
IP address blocks: 195.54.42.0/23 maxlen: 23
185.120.90.0/23 maxlen: 23
185.120.88.0/23 maxlen: 23
185.120.88.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:40:c6:83:aa:9d:d8:9c:4c:fb:84:49:06:04:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
Validity
Not Before: Jan 1 02:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5eea4f9e0baed40360f8fc22715bdf1ccd7b241c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:17:63:df:0f:7a:23:3d:4e:c1:0b:0e:d5:7c:
60:74:f5:9b:a1:e4:50:75:6a:fd:9f:91:30:a5:c3:
b3:8b:6e:a2:31:21:c9:b0:7f:d6:4e:5c:53:81:29:
1f:32:6f:8f:3c:48:6d:64:b7:08:75:e0:68:86:22:
2b:65:83:8b:fd:e0:d6:33:a2:f2:1f:44:c2:53:f8:
35:fb:0a:74:b7:f1:c1:02:01:26:d3:61:6f:8e:1e:
5f:ef:15:7c:f4:d0:a5:b5:01:a4:ef:48:12:7b:b6:
83:c6:6d:73:66:29:ac:a8:77:37:0d:8c:01:7b:ea:
b8:df:65:ac:64:f7:de:92:9b:9e:99:e8:b4:fa:2a:
27:70:63:ec:dc:3d:7f:5d:de:94:d5:18:b1:dc:e9:
c7:40:e1:ed:4d:12:b3:ca:8a:50:4e:5f:bb:7e:2e:
86:9b:2f:40:8d:87:23:e5:3c:c8:4d:af:e6:40:61:
3e:cd:42:d8:83:58:e6:cd:ca:24:ae:ae:6d:b0:71:
f9:b2:c7:f9:51:a9:7e:d2:08:39:7b:b7:97:3a:af:
da:63:75:2f:c1:10:61:92:e3:b7:8d:17:ae:04:d0:
32:54:f5:c0:4b:6e:3e:2b:dd:e7:31:aa:7d:94:fd:
cc:ac:9b:f1:6d:7c:92:47:1f:a9:11:e9:46:9c:ff:
02:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:EA:4F:9E:0B:AE:D4:03:60:F8:FC:22:71:5B:DF:1C:CD:7B:24:1C
X509v3 Authority Key Identifier:
keyid:34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/XupPnguu1ANg-PwicVvfHM17JBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.88.0/22
195.54.42.0/23
Signature Algorithm: sha256WithRSAEncryption
99:ad:a6:3d:d7:76:3a:f7:96:ba:7a:cc:a6:72:22:27:a7:bb:
20:9f:5b:30:b0:39:88:41:c5:f6:7d:d8:01:10:3a:6e:4a:31:
e1:e9:fb:22:73:78:a2:17:ae:68:1e:4f:69:32:9c:d6:a2:89:
e2:ae:ac:b9:78:20:9f:0f:92:73:e7:f3:0f:a1:f9:76:b5:bd:
08:df:d1:3b:29:9a:81:91:72:4d:db:fd:26:21:b4:db:f3:39:
cf:6b:4e:e7:bd:d4:84:16:64:47:69:34:6c:64:24:b0:68:f5:
4a:db:e3:e6:dd:5c:9c:c5:33:d5:d9:79:3e:82:a3:36:da:2f:
60:c3:0b:d0:e1:52:5b:0a:1a:85:bf:09:63:24:3e:a2:0b:83:
cc:4c:fa:c6:10:5c:0d:0f:9f:af:82:ac:98:6e:32:e8:03:4e:
e7:99:bc:96:1c:51:b8:5b:49:d9:95:1f:f0:49:9a:6a:d0:b2:
5a:6b:2c:5a:f2:c4:1b:97:e1:3c:c8:71:4b:d5:30:63:26:d4:
ed:74:32:b6:95:f2:93:e3:1e:36:84:5c:26:4d:bb:a3:15:af:
09:4d:5c:04:c7:5a:9b:97:65:bc:f8:7b:0e:1a:11:d5:d0:96:
2b:61:f6:9f:61:dd:ad:20:d5:dd:94:f2:43:98:b3:5b:1e:c3:
b4:3a:77:ab
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzC20DGg6qd2JxM+4RJBgS7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZDUxOTI0NzQwMmJjZmJkZjBlY2U5MDIwYWQ2NDYyMmU5
ZDNiYWUwHhcNMjQwMTAxMDIyOTU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWVhNGY5ZTBiYWVkNDAzNjBmOGZjMjI3MTViZGYxY2NkN2IyNDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxdj3w96Iz1OwQsO1XxgdPWboeRQ
dWr9n5EwpcOzi26iMSHJsH/WTlxTgSkfMm+PPEhtZLcIdeBohiIrZYOL/eDWM6Ly
H0TCU/g1+wp0t/HBAgEm02Fvjh5f7xV89NCltQGk70gSe7aDxm1zZimsqHc3DYwB
e+q432WsZPfekpuemei0+ioncGPs3D1/Xd6U1Rix3OnHQOHtTRKzyopQTl+7fi6G
my9AjYcj5TzITa/mQGE+zULYg1jmzcokrq5tsHH5ssf5Ual+0gg5e7eXOq/aY3Uv
wRBhkuO3jReuBNAyVPXAS24+K93nMap9lP3MrJvxbXySRx+pEelGnP8CwQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFF7qT54LrtQDYPj8InFb3xzNeyQcMB8GA1UdIwQY
MBaAFDTVGSR0Arz73w7OkCCtZGIunTuuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk5VWkpIUUN2UHZmRHM2UUlLMWtZaTZkTzY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zMDgxNzktYmU2OS00YzEwLTg2OTQt
ZmJkMzk5YTQ0NzVlLzEvWHVwUG5ndXUxQU5nLVB3aWNWdmZITTE3SkJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zMDgxNzktYmU2OS00YzEwLTg2OTQtZmJkMzk5YTQ0NzVl
LzEvTk5VWkpIUUN2UHZmRHM2UUlLMWtZaTZkTzY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuXhYAwQB
wzYqMA0GCSqGSIb3DQEBCwUAA4IBAQCZraY913Y695a6esymciInp7sgn1swsDmI
QcX2fdgBEDpuSjHh6fsic3iiF65oHk9pMpzWoonirqy5eCCfD5Jz5/MPofl2tb0I
39E7KZqBkXJN2/0mIbTb8znPa07nvdSEFmRHaTRsZCSwaPVK2+Pm3VycxTPV2Xk+
gqM22i9gwwvQ4VJbChqFvwljJD6iC4PMTPrGEFwND5+vgqyYbjLoA07nmbyWHFG4
W0nZlR/wSZpq0LJaayxa8sQbl+E8yHFL1TBjJtTtdDK2lfKT4x42hFwmTbujFa8J
TVwEx1qbl2W8+HsOGhHV0JYrYfafYd2tINXdlPJDmLNbHsO0Oner
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:47:56 2025 by rpki-client