Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/Rr3Qi_K3GrT6e7eFCa3bKTAoSio.roa
File: Rr3Qi_K3GrT6e7eFCa3bKTAoSio.roa (raw, json)
Hash identifier: BYE95a5cU6f+GBz2Cjk/ebLnVhZJ/Q7ogWWyIvM1Wug=
Subject key identifier: 46:BD:D0:8B:F2:B7:1A:B4:FA:7B:B7:85:09:AD:DB:29:30:28:4A:2A
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 0194266C14E3C4A3FA78CE50987192C600C8
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/Rr3Qi_K3GrT6e7eFCa3bKTAoSio.roa
Signing time: Thu 02 Jan 2025 09:50:04 +0000
ROA not before: Thu 02 Jan 2025 09:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6453
IP address blocks: 5.23.0.0/19 maxlen: 19
80.231.0.0/16 maxlen: 16
80.231.8.0/21 maxlen: 21
80.231.11.0/24 maxlen: 24
80.231.22.0/24 maxlen: 24
80.231.56.0/24 maxlen: 24
80.231.71.0/24 maxlen: 24
80.231.93.0/24 maxlen: 24
80.231.94.0/24 maxlen: 24
80.231.96.0/21 maxlen: 21
80.231.112.0/21 maxlen: 21
80.231.176.0/21 maxlen: 21
80.231.187.0/24 maxlen: 24
80.231.202.0/24 maxlen: 24
80.231.216.0/24 maxlen: 24
80.231.235.0/24 maxlen: 24
195.219.0.0/16 maxlen: 16
195.219.22.0/24 maxlen: 24
195.219.40.0/24 maxlen: 24
195.219.41.0/24 maxlen: 24
195.219.168.0/23 maxlen: 23
195.219.204.0/24 maxlen: 24
195.219.232.0/24 maxlen: 24
195.219.235.0/24 maxlen: 24
195.219.238.0/24 maxlen: 24
195.219.240.0/24 maxlen: 24
195.219.246.0/24 maxlen: 24
195.219.248.0/21 maxlen: 21
195.219.253.0/24 maxlen: 24
2a01:3e0::/29 maxlen: 29
2a01:3e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 06 Jan 2025 23:29:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:14:e3:c4:a3:fa:78:ce:50:98:71:92:c6:00:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: Jan 2 09:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46bdd08bf2b71ab4fa7bb78509addb2930284a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8f:80:e9:75:ec:e7:b9:12:1d:66:97:64:9e:
29:1a:86:4f:da:9a:2b:fb:b4:b8:09:f1:9e:6b:23:
52:84:ea:04:93:e8:d7:12:99:08:2a:1c:20:cb:c9:
00:eb:a0:d3:11:8e:3e:d3:97:4c:32:f3:f1:53:59:
17:48:75:c1:93:e0:91:06:be:f2:8f:58:5a:9d:95:
7e:2c:9d:26:99:13:73:6a:3a:82:51:ea:a0:ab:55:
fc:b4:d6:aa:55:c9:0a:89:d4:d4:4a:d2:bc:64:06:
ed:23:8d:88:be:86:4f:b2:5c:b2:0c:e6:92:7a:23:
77:18:43:70:f8:a3:db:2d:35:70:61:d9:0e:db:26:
3c:60:1c:1f:8f:b8:76:a2:c2:63:77:7c:31:2f:98:
4e:93:93:ec:cd:dc:48:87:ca:07:14:b6:65:92:56:
92:18:4d:bf:be:1d:18:cc:9c:9f:bc:a7:65:44:59:
46:4d:15:1e:ca:3b:42:e2:3d:4b:8e:3a:4a:17:47:
c4:1b:1b:82:26:fb:58:66:c1:7d:9e:3b:d0:76:67:
81:e8:c4:d6:2d:eb:4f:15:fa:40:00:e0:76:6f:b6:
38:84:70:21:69:64:83:6b:92:37:a0:a0:b7:c8:b5:
14:f9:0a:13:43:8f:1a:e1:bc:9c:02:50:b8:ff:9b:
b8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BD:D0:8B:F2:B7:1A:B4:FA:7B:B7:85:09:AD:DB:29:30:28:4A:2A
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/Rr3Qi_K3GrT6e7eFCa3bKTAoSio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.23.0.0/19
80.231.0.0/16
195.219.0.0/16
IPv6:
2a01:3e0::/29
Signature Algorithm: sha256WithRSAEncryption
a0:0c:eb:0e:6c:bf:e2:dd:a3:62:f6:e7:92:16:d8:bd:be:57:
42:0a:ea:e3:d9:2b:9b:80:5a:c5:0e:8c:44:78:a6:d5:f0:e4:
48:53:8f:59:81:45:9a:c1:c8:c9:36:eb:9b:bf:4b:51:c9:42:
90:b8:25:4c:55:5c:c5:2c:91:3a:d7:f4:7d:fb:00:b3:ae:6b:
08:c9:6c:2c:e5:c7:46:c2:29:e6:08:0d:23:eb:18:82:6d:e9:
ab:8c:bd:a5:5a:27:85:61:67:e7:68:52:da:fd:ff:a5:98:66:
90:ab:0c:4e:5a:08:0e:ae:62:69:8a:52:09:ba:50:d4:a7:34:
07:25:8e:c2:1d:d3:31:bc:6e:4c:75:84:b0:09:42:23:23:65:
c4:bc:f8:58:56:40:96:90:81:12:f7:d1:2d:ed:21:86:e8:6b:
e8:de:a3:83:ed:37:41:cb:0f:2c:2f:09:a6:e5:6a:dc:70:13:
ca:4a:24:f3:50:95:82:2f:9d:74:2c:33:1e:1a:08:fa:9d:38:
86:6e:f8:03:39:e6:33:c9:38:07:70:4b:ca:ed:89:83:ce:65:
9a:e3:8a:60:3d:e5:77:ff:43:fe:f9:a8:4c:b8:bf:6c:d7:e1:
45:63:8b:38:b0:b3:cd:af:d3:da:45:21:e4:b1:72:8c:a0:51:
6e:45:9a:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQmbBTjxKP6eM5QmHGSxgDIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDFiMjU4NzQ5MGFkMDYxY2IyMDcxNzZiZGVlYzgxYTUz
MTU4OGMwHhcNMjUwMTAyMDk1MDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmJkZDA4YmYyYjcxYWI0ZmE3YmI3ODUwOWFkZGIyOTMwMjg0YTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7I+A6XXs57kSHWaXZJ4pGoZP2por
+7S4CfGeayNShOoEk+jXEpkIKhwgy8kA66DTEY4+05dMMvPxU1kXSHXBk+CRBr7y
j1hanZV+LJ0mmRNzajqCUeqgq1X8tNaqVckKidTUStK8ZAbtI42IvoZPslyyDOaS
eiN3GENw+KPbLTVwYdkO2yY8YBwfj7h2osJjd3wxL5hOk5PszdxIh8oHFLZlklaS
GE2/vh0YzJyfvKdlRFlGTRUeyjtC4j1LjjpKF0fEGxuCJvtYZsF9njvQdmeB6MTW
LetPFfpAAOB2b7Y4hHAhaWSDa5I3oKC3yLUU+QoTQ48a4bycAlC4/5u4dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEa90Ivytxq0+nu3hQmt2ykwKEoqMB8GA1UdIwQY
MBaAFE3Rslh0kK0GHLIHF2ve7IGlMViMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUt
ZGI0NjNjNWZiMGI0LzEvUnIzUWlfSzNHclQ2ZTdlRkNhM2JLVEFvU2lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUtZGI0NjNjNWZiMGI0
LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAWBAIAATAQAwQFBRcAAwMA
UOcDAwDD2zANBAIAAjAHAwUDKgED4DANBgkqhkiG9w0BAQsFAAOCAQEAoAzrDmy/
4t2jYvbnkhbYvb5XQgrq49krm4BaxQ6MRHim1fDkSFOPWYFFmsHIyTbrm79LUclC
kLglTFVcxSyROtf0ffsAs65rCMlsLOXHRsIp5ggNI+sYgm3pq4y9pVonhWFn52hS
2v3/pZhmkKsMTloIDq5iaYpSCbpQ1Kc0ByWOwh3TMbxuTHWEsAlCIyNlxLz4WFZA
lpCBEvfRLe0hhuhr6N6jg+03QcsPLC8JpuVq3HATykok81CVgi+ddCwzHhoI+p04
hm74AznmM8k4B3BLyu2Jg85lmuOKYD3ld/9D/vmoTLi/bNfhRWOLOLCzza/T2kUh
5LFyjKBRbkWayA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:58:36 2025 by rpki-client