Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/G0sHtWoQZB2CuQ5i6rI6Dhp1RI8.roa
File: G0sHtWoQZB2CuQ5i6rI6Dhp1RI8.roa (raw, json)
Hash identifier: KeO2vPezVAirRayhcUUm3x48Yi/dtV2GTJUsULa77SY=
Subject key identifier: 1B:4B:07:B5:6A:10:64:1D:82:B9:0E:62:EA:B2:3A:0E:1A:75:44:8F
Certificate issuer: /CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Certificate serial: 0191556887D2FF20C4A0090E692434B04848
Authority key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/G0sHtWoQZB2CuQ5i6rI6Dhp1RI8.roa
Signing time: Thu 15 Aug 2024 09:39:59 +0000
ROA not before: Thu 15 Aug 2024 09:39:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43623
IP address blocks: 149.219.8.0/23 maxlen: 24
149.219.249.0/24 maxlen: 24
149.219.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:68:87:d2:ff:20:c4:a0:09:0e:69:24:34:b0:48:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Validity
Not Before: Aug 15 09:39:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b4b07b56a10641d82b90e62eab23a0e1a75448f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a2:a0:2e:26:b4:66:c6:7f:14:70:a3:fc:03:
ff:fc:de:b9:9e:58:7a:4b:f0:0a:e1:45:34:32:dd:
68:5c:9c:e0:67:2b:a3:5f:e0:6e:25:4d:fc:8e:e6:
1e:eb:25:f4:ee:83:c5:0a:50:b4:6d:8d:70:26:de:
95:5a:ca:17:32:46:95:cd:95:a0:36:f8:30:d3:36:
85:9a:9e:2c:16:4f:3a:e3:58:ff:56:51:50:9d:df:
92:c4:1d:7f:87:d3:a4:9a:35:df:e6:a4:33:fc:be:
93:bb:8c:97:27:35:43:d7:ff:e1:45:7e:31:e9:c7:
ab:4e:d4:53:77:80:6f:70:f4:8c:e7:e6:48:b5:c2:
dd:0a:df:c2:75:91:e6:1d:4a:1b:82:36:77:ef:df:
53:a6:c7:63:13:f6:e3:bf:d5:4c:a1:53:7e:91:3f:
63:b5:dd:da:69:d6:01:9a:f8:90:a2:15:38:cd:05:
16:64:b5:fa:cd:ce:04:5a:c4:ae:2c:cc:29:a0:7b:
2d:2b:01:0c:4a:52:ae:86:e0:b6:2d:db:27:58:0c:
d4:3f:41:7e:92:c3:47:bc:ed:a5:00:5d:19:40:00:
dc:c3:19:f4:b6:07:ba:6e:7b:b5:b5:d0:38:69:66:
ba:98:96:f1:de:ac:2e:00:3b:d2:29:3f:a2:fe:b1:
63:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4B:07:B5:6A:10:64:1D:82:B9:0E:62:EA:B2:3A:0E:1A:75:44:8F
X509v3 Authority Key Identifier:
keyid:4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/G0sHtWoQZB2CuQ5i6rI6Dhp1RI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.219.8.0/23
149.219.249.0-149.219.250.255
Signature Algorithm: sha256WithRSAEncryption
53:9b:25:85:cd:7d:9a:a4:f5:90:1d:cf:b5:69:24:b3:2c:1b:
fc:ce:56:80:c8:7e:38:f2:f5:6c:2a:97:5a:17:29:32:fe:d3:
4c:b2:a2:0d:1d:aa:2c:51:a1:d9:0c:36:87:2b:63:95:d6:47:
79:60:b2:f7:4a:15:96:69:4f:90:59:ef:37:22:37:34:ab:c1:
c2:53:dc:b6:b1:db:02:22:c6:36:4d:dc:1b:5a:c0:96:f8:49:
3d:98:3e:7f:9c:1c:8a:f0:f2:b7:9f:8a:7f:71:73:1a:11:21:
12:e4:48:63:75:7b:a5:8b:e8:b8:cb:b7:fc:06:41:13:b3:ab:
39:74:7f:5a:5f:e8:ca:ea:b2:ad:cb:b1:c4:cb:1e:3c:ba:00:
46:a6:59:1b:77:ba:2a:b2:da:b8:d8:c2:dd:18:d9:9c:9e:f9:
94:90:4a:95:1e:c4:83:1f:a0:4a:0f:41:8c:3e:1a:73:02:73:
44:cf:ab:19:b4:8d:8e:47:2c:66:5b:95:47:90:45:80:18:ee:
25:e7:88:a8:f5:a6:27:7a:12:26:be:14:64:d4:fa:b2:d6:81:
72:07:f1:9a:6a:43:d0:cc:b8:aa:bc:7c:0a:91:71:5d:26:64:
14:2b:ae:91:ff:96:b4:ac:b1:aa:71:a8:ab:e9:0d:a2:42:65:
70:25:36:7e
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZFVaIfS/yDEoAkOaSQ0sEhIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZTUyNzUyYTgxYmRmZTBhNDAxZjlhMjYxZDc5ZmVlNGI2
MTcxMTUwHhcNMjQwODE1MDkzOTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjRiMDdiNTZhMTA2NDFkODJiOTBlNjJlYWIyM2EwZTFhNzU0NDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qKgLia0ZsZ/FHCj/AP//N65nlh6
S/AK4UU0Mt1oXJzgZyujX+BuJU38juYe6yX07oPFClC0bY1wJt6VWsoXMkaVzZWg
Nvgw0zaFmp4sFk8641j/VlFQnd+SxB1/h9OkmjXf5qQz/L6Tu4yXJzVD1//hRX4x
6cerTtRTd4BvcPSM5+ZItcLdCt/CdZHmHUobgjZ3799TpsdjE/bjv9VMoVN+kT9j
td3aadYBmviQohU4zQUWZLX6zc4EWsSuLMwpoHstKwEMSlKuhuC2LdsnWAzUP0F+
ksNHvO2lAF0ZQADcwxn0tge6bnu1tdA4aWa6mJbx3qwuADvSKT+i/rFjjQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFBtLB7VqEGQdgrkOYuqyOg4adUSPMB8GA1UdIwQY
MBaAFE7lJ1KoG9/gpAH5omHXn+5LYXEVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHVVblVxZ2IzLUNrQWZtaVlkZWY3a3RoY1JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zMWUwZDQtMzVjZS00ZDAyLTk3MzQt
ZDc4ZmI5N2Y5ODI4LzEvRzBzSHRXb1FaQjJDdVE1aTZySTZEaHAxUkk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8zMWUwZDQtMzVjZS00ZDAyLTk3MzQtZDc4ZmI5N2Y5ODI4
LzEvVHVVblVxZ2IzLUNrQWZtaVlkZWY3a3RoY1JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBldsIMAwD
BACV2/kDBACV2/owDQYJKoZIhvcNAQELBQADggEBAFObJYXNfZqk9ZAdz7VpJLMs
G/zOVoDIfjjy9Wwql1oXKTL+00yyog0dqixRodkMNocrY5XWR3lgsvdKFZZpT5BZ
7zciNzSrwcJT3Lax2wIixjZN3BtawJb4ST2YPn+cHIrw8refin9xcxoRIRLkSGN1
e6WL6LjLt/wGQROzqzl0f1pf6Mrqsq3LscTLHjy6AEamWRt3uiqy2rjYwt0Y2Zye
+ZSQSpUexIMfoEoPQYw+GnMCc0TPqxm0jY5HLGZblUeQRYAY7iXniKj1pid6Eia+
FGTU+rLWgXIH8ZpqQ9DMuKq8fAqRcV0mZBQrrpH/lrSssapxqKvpDaJCZXAlNn4=
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:06 2025 by rpki-client