Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/etlDPN_bpe9TLg2fyZ0Sp2JCqGE.roa
File: etlDPN_bpe9TLg2fyZ0Sp2JCqGE.roa (raw, json)
Hash identifier: Sw8uwoEKTAAIWSqGb8rQdwXilMfB8If6DrAUdl1peqk=
Subject key identifier: 7A:D9:43:3C:DF:DB:A5:EF:53:2E:0D:9F:C9:9D:12:A7:62:42:A8:61
Certificate issuer: /CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Certificate serial: 0190E7417332010F649CF7BF1A22E3DB19D2
Authority key identifier: DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/etlDPN_bpe9TLg2fyZ0Sp2JCqGE.roa
Signing time: Thu 25 Jul 2024 00:19:04 +0000
ROA not before: Thu 25 Jul 2024 00:19:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209839
IP address blocks: 94.154.152.0/22 maxlen: 22
94.154.152.0/24 maxlen: 24
94.154.153.0/24 maxlen: 24
94.154.154.0/24 maxlen: 24
94.154.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 00:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e7:41:73:32:01:0f:64:9c:f7:bf:1a:22:e3:db:19:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Validity
Not Before: Jul 25 00:19:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ad9433cdfdba5ef532e0d9fc99d12a76242a861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:5d:a1:0a:01:02:74:05:1f:c1:bd:e5:ab:
f7:c4:46:27:5c:bb:0b:c5:7c:a9:aa:28:39:58:65:
8c:3a:1e:18:20:8c:10:74:54:a8:b5:19:bd:28:69:
31:05:c0:6f:68:e1:b2:b6:64:42:cd:c4:bc:13:1d:
39:60:9b:06:36:1e:07:06:88:9b:d8:7e:b7:22:f1:
f7:07:e8:74:da:6e:25:6f:4a:e9:f6:71:6c:99:37:
b2:cd:60:77:d2:18:34:f3:a7:37:53:55:ae:03:05:
75:c8:27:19:89:ac:aa:7c:2e:15:91:c3:f9:ae:b7:
2a:ac:77:27:0d:a8:4b:2a:ba:f6:dd:83:45:24:3f:
aa:c5:8c:01:8b:7f:db:4a:60:12:6d:d7:cc:03:c2:
eb:20:18:ea:0c:5a:6e:90:49:fb:46:f0:11:19:70:
83:61:28:e8:8c:99:52:ad:1d:ae:27:84:fb:c4:8b:
44:91:f0:3f:aa:ca:9f:a4:11:d6:c0:67:16:e5:78:
80:98:f4:1c:c1:8b:14:4b:e1:d8:ba:e6:9b:2a:65:
26:70:c2:39:8f:34:1e:7c:77:79:82:1d:b3:c1:36:
9c:09:fb:11:de:51:7f:61:5d:ef:a2:f8:fe:86:96:
96:45:b2:61:57:aa:71:97:6b:88:1c:5b:ff:c1:5b:
36:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D9:43:3C:DF:DB:A5:EF:53:2E:0D:9F:C9:9D:12:A7:62:42:A8:61
X509v3 Authority Key Identifier:
keyid:DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/etlDPN_bpe9TLg2fyZ0Sp2JCqGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.152.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:27:76:a0:ec:36:3d:d1:ba:28:62:68:34:ae:e7:ea:3f:10:
5c:c5:e0:2f:08:8d:20:01:a9:68:a7:89:74:f7:57:39:35:87:
49:ed:66:10:69:ca:95:bb:0d:7c:97:76:e6:ac:f6:4a:76:09:
bd:88:67:9c:16:1f:c2:04:5c:d4:50:ba:3c:a3:6f:1b:48:7c:
ba:6c:7d:6a:e9:6c:37:fe:82:d4:8d:3f:84:e8:09:6d:3b:cd:
28:55:68:12:a0:c0:49:fe:5e:7e:2d:58:c7:94:b0:90:3a:fd:
6c:c5:5e:65:fa:f1:8e:1c:bd:1a:94:35:9c:4a:70:27:37:82:
9f:c0:84:ab:5a:8d:8f:49:c9:d4:89:46:72:ae:5c:9e:bc:0d:
c0:71:ef:2f:48:86:df:ac:cc:7f:4a:ca:14:25:5c:5c:7e:07:
b0:df:b4:06:6a:b8:e4:09:69:40:54:7a:50:6a:7a:3d:70:be:
ac:80:26:41:d5:4d:12:71:fc:b2:1c:a5:bb:a0:c8:5d:3f:f2:
26:b8:dd:53:b9:ef:f9:b2:e5:2f:2d:c8:2f:0d:af:ee:92:bf:
a1:31:3f:53:ec:e6:2e:58:cf:6b:58:3b:1d:14:2c:75:49:6e:
e8:99:c6:51:a3:eb:a3:14:56:d7:1f:f1:66:e8:16:79:1b:e4:
13:41:b2:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDnQXMyAQ9knPe/GiLj2xnSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMTRlN2E2YmU5N2NlYzZmNWJjMWE2NzhhNzZlYTZkMTYx
OWMzMDYwHhcNMjQwNzI1MDAxOTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWQ5NDMzY2RmZGJhNWVmNTMyZTBkOWZjOTlkMTJhNzYyNDJhODYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIBdoQoBAnQFH8G95av3xEYnXLsL
xXypqig5WGWMOh4YIIwQdFSotRm9KGkxBcBvaOGytmRCzcS8Ex05YJsGNh4HBoib
2H63IvH3B+h02m4lb0rp9nFsmTeyzWB30hg086c3U1WuAwV1yCcZiayqfC4VkcP5
rrcqrHcnDahLKrr23YNFJD+qxYwBi3/bSmASbdfMA8LrIBjqDFpukEn7RvARGXCD
YSjojJlSrR2uJ4T7xItEkfA/qsqfpBHWwGcW5XiAmPQcwYsUS+HYuuabKmUmcMI5
jzQefHd5gh2zwTacCfsR3lF/YV3vovj+hpaWRbJhV6pxl2uIHFv/wVs2BwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHrZQzzf26XvUy4Nn8mdEqdiQqhhMB8GA1UdIwQY
MBaAFNsU56a+l87G9bwaZ4p26m0WGcMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnhUbnByNlh6c2IxdkJwbmluYnFiUllad3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xMDY0NWQtMzU0Mi00ZTVkLThlNzAt
MTFmOTFkMDczOWM5LzEvZXRsRFBOX2JwZTlUTGcyZnlaMFNwMkpDcUdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8xMDY0NWQtMzU0Mi00ZTVkLThlNzAtMTFmOTFkMDczOWM5
LzEvMnhUbnByNlh6c2IxdkJwbmluYnFiUllad3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXpqYMA0G
CSqGSIb3DQEBCwUAA4IBAQA+J3ag7DY90booYmg0rufqPxBcxeAvCI0gAalop4l0
91c5NYdJ7WYQacqVuw18l3bmrPZKdgm9iGecFh/CBFzUULo8o28bSHy6bH1q6Ww3
/oLUjT+E6AltO80oVWgSoMBJ/l5+LVjHlLCQOv1sxV5l+vGOHL0alDWcSnAnN4Kf
wISrWo2PScnUiUZyrlyevA3Ace8vSIbfrMx/SsoUJVxcfgew37QGarjkCWlAVHpQ
ano9cL6sgCZB1U0ScfyyHKW7oMhdP/ImuN1Tue/5suUvLcgvDa/ukr+hMT9T7OYu
WM9rWDsdFCx1SW7omcZRo+ujFFbXH/Fm6BZ5G+QTQbK5
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:51:50 2025 by rpki-client