Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/6BUN9J045q6Qvw7VsgyOfbiX8gg.roa
File: 6BUN9J045q6Qvw7VsgyOfbiX8gg.roa (raw, json)
Hash identifier: UWhxqL4Opa1NHzCTeNO2w6EEZlXkBYhvsbdD29Lfkvc=
Subject key identifier: E8:15:0D:F4:9D:38:E6:AE:90:BF:0E:D5:B2:0C:8E:7D:B8:97:F2:08
Certificate issuer: /CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
Certificate serial: 018CC72749D4DE170B1183EC5CAE494FFE94
Authority key identifier: 2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/6BUN9J045q6Qvw7VsgyOfbiX8gg.roa
Signing time: Mon 01 Jan 2024 22:31:29 +0000
ROA not before: Mon 01 Jan 2024 22:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51492
IP address blocks: 185.177.140.0/22 maxlen: 22
185.36.253.0/24 maxlen: 24
188.116.47.0/24 maxlen: 24
89.46.121.0/24 maxlen: 24
89.46.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:49:d4:de:17:0b:11:83:ec:5c:ae:49:4f:fe:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
Validity
Not Before: Jan 1 22:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8150df49d38e6ae90bf0ed5b20c8e7db897f208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7d:de:41:21:85:82:14:7a:1c:0f:6f:da:0c:
e0:ae:80:d3:db:78:98:05:4d:f3:30:34:e6:f1:06:
f4:b5:60:55:04:14:ed:e8:26:30:79:8f:3f:37:e2:
fd:82:78:51:2e:5a:50:d1:22:8e:28:57:c5:a9:3c:
d5:9f:2c:06:22:ca:b5:00:38:66:42:fa:39:e5:6f:
78:f5:96:24:72:af:43:22:ed:0b:d5:a0:95:96:7d:
dd:13:d1:c5:d3:7c:f9:e0:d5:05:53:51:a4:df:3b:
dc:d6:61:cd:86:e4:31:c2:44:14:1f:16:f7:d9:c0:
26:25:b4:76:a2:1a:51:50:a0:bd:8b:42:95:53:f6:
8e:26:38:70:7a:9f:f2:dd:7e:42:f2:82:cc:45:61:
bd:1e:3e:44:ae:9d:39:db:66:3c:6a:47:1c:3f:f2:
25:b0:af:f9:68:2f:ee:99:8a:49:75:07:60:95:66:
40:29:bb:be:e7:94:8a:7c:e7:cd:29:ec:67:3f:08:
e8:f9:19:0c:83:df:52:a8:8b:89:c5:e1:5c:df:9a:
d5:c2:4b:2c:d3:70:6e:e7:7a:a6:96:97:86:84:92:
9d:0e:63:e7:c1:2a:30:f8:a8:57:09:17:d8:86:75:
61:0d:b2:76:50:f3:28:24:9d:9a:7a:58:79:f5:11:
fa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:15:0D:F4:9D:38:E6:AE:90:BF:0E:D5:B2:0C:8E:7D:B8:97:F2:08
X509v3 Authority Key Identifier:
keyid:2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/6BUN9J045q6Qvw7VsgyOfbiX8gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.121.0/24
89.46.125.0/24
185.36.253.0/24
185.177.140.0/22
188.116.47.0/24
Signature Algorithm: sha256WithRSAEncryption
54:33:a7:23:b2:b9:75:82:ec:a1:b2:57:82:e2:9d:a4:ed:d6:
ab:86:1c:23:ef:b6:bd:78:90:8a:88:0e:db:49:34:01:d4:98:
3b:be:a2:e8:3a:1e:d4:00:06:4a:33:49:d2:f4:fa:82:6d:85:
df:40:6a:0c:ea:32:c8:41:92:d6:48:1b:3b:f0:6a:39:4e:b6:
df:43:9f:21:37:19:d6:42:05:d3:f0:07:02:2e:01:23:1c:5e:
c7:b4:5f:0b:ff:31:0e:77:4c:ac:6d:c9:ca:af:45:81:db:d5:
24:6e:cc:09:21:94:b9:94:8e:6b:bd:ca:3e:b4:c3:75:0b:70:
ef:2f:92:27:fe:96:e0:4a:f5:5b:3b:f2:6d:68:99:d1:9d:c0:
dc:f6:40:e6:21:15:fa:77:a5:b2:81:b7:a5:68:45:79:3f:4d:
f2:53:17:f2:07:a7:70:27:77:b7:1f:28:62:5a:ab:63:cb:58:
7e:02:e1:9d:11:e8:79:22:25:c9:6d:74:67:5f:91:91:7e:22:
f8:5a:11:ef:17:71:e1:8d:33:fe:72:38:be:44:bf:2d:b3:03:
43:5d:47:07:b2:f7:a8:85:b7:92:4e:39:2d:04:64:6a:8c:e3:
3c:c1:29:f2:79:6e:c0:08:6b:cb:1b:a3:34:e6:c3:6d:a5:ed:
cf:ed:1d:01
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYzHJ0nU3hcLEYPsXK5JT/6UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNTdhMzRiMDU4YWFmYTBhNzYzMTI0YTdkNWQ0MTg3ZjRm
YWFiYWMwHhcNMjQwMTAxMjIzMTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODE1MGRmNDlkMzhlNmFlOTBiZjBlZDViMjBjOGU3ZGI4OTdmMjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX3eQSGFghR6HA9v2gzgroDT23iY
BU3zMDTm8Qb0tWBVBBTt6CYweY8/N+L9gnhRLlpQ0SKOKFfFqTzVnywGIsq1ADhm
Qvo55W949ZYkcq9DIu0L1aCVln3dE9HF03z54NUFU1Gk3zvc1mHNhuQxwkQUHxb3
2cAmJbR2ohpRUKC9i0KVU/aOJjhwep/y3X5C8oLMRWG9Hj5Erp0522Y8akccP/Il
sK/5aC/umYpJdQdglWZAKbu+55SKfOfNKexnPwjo+RkMg99SqIuJxeFc35rVwkss
03Bu53qmlpeGhJKdDmPnwSow+KhXCRfYhnVhDbJ2UPMoJJ2aelh59RH6PwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOgVDfSdOOaukL8O1bIMjn24l/IIMB8GA1UdIwQY
MBaAFC9Xo0sFiq+gp2MSSn1dQYf0+qusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDFlalN3V0tyNkNuWXhKS2ZWMUJoX1Q2cTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83ZjM1NmEtYTI1MS00YjdhLTkwNjIt
MmRjZDZhMDBjYTEyLzEvNkJVTjlKMDQ1cTZRdnc3VnNneU9mYmlYOGdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83ZjM1NmEtYTI1MS00YjdhLTkwNjItMmRjZDZhMDBjYTEy
LzEvTDFlalN3V0tyNkNuWXhKS2ZWMUJoX1Q2cTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAWS55AwQA
WS59AwQAuST9AwQCubGMAwQAvHQvMA0GCSqGSIb3DQEBCwUAA4IBAQBUM6cjsrl1
guyhsleC4p2k7darhhwj77a9eJCKiA7bSTQB1Jg7vqLoOh7UAAZKM0nS9PqCbYXf
QGoM6jLIQZLWSBs78Go5TrbfQ58hNxnWQgXT8AcCLgEjHF7HtF8L/zEOd0ysbcnK
r0WB29UkbswJIZS5lI5rvco+tMN1C3DvL5In/pbgSvVbO/JtaJnRncDc9kDmIRX6
d6WygbelaEV5P03yUxfyB6dwJ3e3HyhiWqtjy1h+AuGdEeh5IiXJbXRnX5GRfiL4
WhHvF3HhjTP+cji+RL8tswNDXUcHsveohbeSTjktBGRqjOM8wSnyeW7ACGvLG6M0
5sNtpe3P7R0B
-----END CERTIFICATE-----
Generated at Wed Apr 16 05:04:34 2025 by rpki-client