Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/1-uhELfZn8yj6VCK3atfsCEuoxuA.roa
File: 1-uhELfZn8yj6VCK3atfsCEuoxuA.roa (raw, json)
Hash identifier: 6bTVrcalCV5ABkwh85AivNF174VRNH9izQ9Yp0wrxOs=
Subject key identifier: FA:E8:44:2D:F6:67:F3:28:FA:54:22:B7:6A:D7:EC:08:4B:A8:C6:E0
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018F0AB5AAF4FA639953F6C940A77DAF824D
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/1-uhELfZn8yj6VCK3atfsCEuoxuA.roa
Signing time: Tue 23 Apr 2024 11:27:08 +0000
ROA not before: Tue 23 Apr 2024 11:27:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 89.45.34.0/24 maxlen: 24
93.114.187.0/24 maxlen: 24
188.215.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0a:b5:aa:f4:fa:63:99:53:f6:c9:40:a7:7d:af:82:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Apr 23 11:27:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fae8442df667f328fa5422b76ad7ec084ba8c6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:24:c9:b4:96:23:18:18:13:ca:41:be:ee:29:
a2:c8:a7:c6:c1:19:f2:57:ee:0b:d2:28:0a:8c:88:
54:9f:9a:71:92:04:b1:ae:ed:47:3a:b7:82:70:a1:
44:2f:bf:4e:ff:9f:f1:78:f4:13:1f:66:6d:f6:ec:
d6:e8:35:05:bc:cd:4d:02:64:12:db:ca:93:41:42:
0e:8e:9c:ef:ac:bd:ca:b1:c3:44:51:f1:22:c0:d1:
11:a5:3c:06:23:3d:d5:88:59:21:05:3c:42:72:00:
49:39:35:b8:d5:43:ea:a2:93:05:c7:ef:02:1b:9d:
53:bc:df:71:da:97:46:56:48:9f:45:33:ad:1c:73:
49:eb:21:ce:7e:4e:43:3f:31:97:0c:99:e9:2c:cb:
aa:6c:94:fd:43:45:9a:09:ed:a0:e0:ac:e7:d2:c2:
f2:95:7c:b0:ea:13:b8:26:16:16:8a:b5:2d:44:84:
1e:27:96:3d:f3:fb:83:a2:ce:58:2c:4b:20:91:cd:
6f:7a:17:1f:ea:2a:11:29:2f:c8:8e:b9:24:01:16:
34:9d:c2:97:4e:28:2d:41:a1:23:47:1e:eb:4c:69:
23:87:8d:4e:ab:93:49:0e:0d:51:3a:fc:54:a2:7d:
06:84:05:27:39:2d:10:c7:ae:2c:32:19:42:b6:45:
56:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E8:44:2D:F6:67:F3:28:FA:54:22:B7:6A:D7:EC:08:4B:A8:C6:E0
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/1-uhELfZn8yj6VCK3atfsCEuoxuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.34.0/24
93.114.187.0/24
188.215.72.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:e5:18:f8:61:30:41:98:ba:d6:d8:ca:a3:0a:08:f3:f2:70:
2e:d3:e5:48:19:fa:96:45:57:0c:b2:24:0b:9f:84:3a:3f:36:
89:33:a3:7f:9f:55:36:2e:40:8d:8f:91:28:2a:b3:92:ff:91:
1e:58:5a:87:67:a1:2d:6b:20:39:88:7a:2a:a3:2b:1d:9c:9e:
57:57:a4:b8:45:0f:fa:8a:03:20:07:a4:51:cf:eb:70:43:b5:
bc:a6:d7:a4:c3:a3:e3:af:a1:3e:11:d2:a6:d9:45:b2:60:00:
90:9b:44:99:4b:15:2c:dc:a4:3d:6f:0c:63:7c:dd:a6:93:d2:
c5:45:70:6a:9c:ec:11:6c:3d:0c:43:c4:52:1f:cf:0e:70:b6:
24:62:a4:01:d5:ab:f2:a3:42:93:ef:e3:19:c7:90:0e:a5:91:
e1:74:1f:ba:0d:c4:fe:c7:d6:cc:8d:54:0c:e0:ba:29:15:ce:
9b:ce:28:2e:90:f5:cf:a7:80:66:b2:7c:9a:74:1b:0f:a3:a1:
fa:cb:af:b3:5c:6d:24:e3:ac:be:c1:96:6a:bc:c2:66:97:58:
cc:d9:75:78:38:9d:f3:f1:fc:ae:5f:62:93:6a:c9:49:19:67:
26:4a:4b:cb:44:6e:bc:f2:27:ae:ca:ae:25:f3:5e:10:f3:a6:
12:82:ac:93
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAY8Ktar0+mOZU/bJQKd9r4JNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5
M2FlYjkwHhcNMjQwNDIzMTEyNzA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWU4NDQyZGY2NjdmMzI4ZmE1NDIyYjc2YWQ3ZWMwODRiYThjNmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCTJtJYjGBgTykG+7imiyKfGwRny
V+4L0igKjIhUn5pxkgSxru1HOreCcKFEL79O/5/xePQTH2Zt9uzW6DUFvM1NAmQS
28qTQUIOjpzvrL3KscNEUfEiwNERpTwGIz3ViFkhBTxCcgBJOTW41UPqopMFx+8C
G51TvN9x2pdGVkifRTOtHHNJ6yHOfk5DPzGXDJnpLMuqbJT9Q0WaCe2g4Kzn0sLy
lXyw6hO4JhYWirUtRIQeJ5Y98/uDos5YLEsgkc1vehcf6ioRKS/IjrkkARY0ncKX
TigtQaEjRx7rTGkjh41Oq5NJDg1ROvxUon0GhAUnOS0Qx64sMhlCtkVWNwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFProRC32Z/Mo+lQit2rX7AhLqMbgMB8GA1UdIwQY
MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt
NWQ0OGI2NWNlNTczLzEvMS11aEVMZlpuOHlqNlZDSzNhdGZzQ0V1b3h1QS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzAvYjI2YWE4LWFjZTctNGZhNi05ZThlLTVkNDhiNjVjZTU3
My8xL19saVZMVGs1TmZEVHZPZ1VfWkY0MEVhVHJyay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFktIgME
AF1yuwMEALzXSDANBgkqhkiG9w0BAQsFAAOCAQEAzeUY+GEwQZi61tjKowoI8/Jw
LtPlSBn6lkVXDLIkC5+EOj82iTOjf59VNi5AjY+RKCqzkv+RHlhah2ehLWsgOYh6
KqMrHZyeV1ekuEUP+ooDIAekUc/rcEO1vKbXpMOj46+hPhHSptlFsmAAkJtEmUsV
LNykPW8MY3zdppPSxUVwapzsEWw9DEPEUh/PDnC2JGKkAdWr8qNCk+/jGceQDqWR
4XQfug3E/sfWzI1UDOC6KRXOm84oLpD1z6eAZrJ8mnQbD6Oh+suvs1xtJOOsvsGW
arzCZpdYzNl1eDid8/H8rl9ik2rJSRlnJkpLy0RuvPInrsquJfNeEPOmEoKskw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 21:28:18 2025 by rpki-client