Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/12m6cgnMMYlituoNiZC5tGyQlds.roa
File: 12m6cgnMMYlituoNiZC5tGyQlds.roa (raw, json)
Hash identifier: o8fcZy2t5mWpSXw9r38geYB8C8QEuC/hj0mOjECrGwA=
Subject key identifier: D7:69:BA:72:09:CC:31:89:62:B6:EA:0D:89:90:B9:B4:6C:90:95:DB
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 019428254555CBBEE59F40583195DC26FDE0
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/12m6cgnMMYlituoNiZC5tGyQlds.roa
Signing time: Thu 02 Jan 2025 17:51:58 +0000
ROA not before: Thu 02 Jan 2025 17:51:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48045
IP address blocks: 46.46.64.0/18 maxlen: 18
94.240.128.0/22 maxlen: 22
94.240.160.0/19 maxlen: 19
2a09:65c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 16 Jan 2025 17:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:45:55:cb:be:e5:9f:40:58:31:95:dc:26:fd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Jan 2 17:51:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d769ba7209cc318962b6ea0d8990b9b46c9095db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:4d:3a:33:43:24:13:ab:8d:30:d0:96:f0:af:
78:60:fe:60:a0:e7:5f:e7:a2:e1:8b:2c:3b:8a:a9:
3f:81:54:ad:be:86:cd:12:7b:07:04:16:63:a9:04:
cd:48:1b:f4:4f:70:89:29:e4:56:40:47:22:26:6e:
6d:8e:66:a7:d1:e7:cf:8c:d1:04:c3:32:06:85:fb:
5f:f3:24:69:ac:6a:b1:41:64:2a:f2:2e:32:be:5e:
61:b2:6c:b9:1f:b3:19:06:61:a0:92:ae:e5:e5:e6:
28:8d:1a:67:ee:1a:45:9f:4c:ae:91:4a:6c:1c:fa:
97:6f:a5:f7:a6:81:f4:da:4e:6c:4f:2e:7d:23:db:
bd:20:24:44:2b:de:65:a5:8a:03:4f:5c:af:7c:e6:
b1:3d:26:05:aa:68:07:af:f7:7d:99:e4:33:d9:33:
b5:4c:7d:e9:21:b2:7f:6c:ec:89:63:f2:b0:fa:6d:
eb:ac:4e:c4:1e:36:8b:f5:85:ab:3f:61:35:9f:3c:
ad:42:f9:f0:ee:4d:b3:70:34:d9:96:9f:62:37:69:
28:bd:2a:a7:4c:1d:f2:15:44:e8:2e:7d:8c:07:7a:
4b:8f:6c:a1:9e:49:b3:ad:06:a4:41:6c:79:7f:fc:
72:2d:08:a5:81:36:b3:b0:27:10:b3:1d:01:6f:00:
18:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:69:BA:72:09:CC:31:89:62:B6:EA:0D:89:90:B9:B4:6C:90:95:DB
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/12m6cgnMMYlituoNiZC5tGyQlds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.46.64.0/18
94.240.128.0/22
94.240.160.0/19
IPv6:
2a09:65c0::/32
Signature Algorithm: sha256WithRSAEncryption
16:1f:39:ff:bb:be:00:c3:44:35:c3:65:fa:06:09:54:b2:91:
ea:44:95:9b:c3:6b:7e:10:e1:97:4a:71:02:ab:f0:6b:d3:4e:
f9:5c:c6:7d:20:16:5d:d3:8f:42:9f:6f:83:37:b2:ec:2a:ad:
cf:2c:44:2a:7f:22:35:c0:d6:5f:06:89:e6:34:53:3e:ae:38:
9c:10:44:43:22:f2:e1:21:31:71:e4:3b:e1:cd:d0:f3:0c:72:
f0:33:13:a7:76:79:08:db:52:94:1d:61:8b:09:0e:9c:40:83:
bc:33:9d:4e:70:6a:2c:9a:29:16:77:2c:6c:36:bd:7e:50:8d:
d1:75:44:7b:ee:3d:9b:f6:61:b5:81:56:21:8c:f5:95:8e:21:
c0:dc:d9:d5:c9:28:be:6d:d4:40:7d:9c:5c:0f:f5:d0:f2:45:
57:ee:f3:1c:96:c8:ff:09:69:10:65:fa:90:7a:56:cc:9b:08:
27:95:88:fe:57:e0:f2:f8:f9:86:5c:ca:05:a0:7d:31:fd:fc:
3c:f5:36:ae:8b:e4:8e:c0:8c:06:c8:00:3d:52:67:36:e1:d8:
43:9f:9a:87:9f:9a:60:e2:74:0a:2a:c1:0f:e6:51:b5:49:5b:
92:2f:70:79:62:3e:4d:18:c8:38:74:5e:e3:11:8c:99:e0:d9:
e4:7c:23:e7
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQoJUVVy77ln0BYMZXcJv3gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ODI1ZmJlZTdjNDNhMjk4MzhlYWJlNGZjODdkNzk0MzQ5
YzBjODAwHhcNMjUwMTAyMTc1MTU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzY5YmE3MjA5Y2MzMTg5NjJiNmVhMGQ4OTkwYjliNDZjOTA5NWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+E06M0MkE6uNMNCW8K94YP5goOdf
56Lhiyw7iqk/gVStvobNEnsHBBZjqQTNSBv0T3CJKeRWQEciJm5tjman0efPjNEE
wzIGhftf8yRprGqxQWQq8i4yvl5hsmy5H7MZBmGgkq7l5eYojRpn7hpFn0yukUps
HPqXb6X3poH02k5sTy59I9u9ICREK95lpYoDT1yvfOaxPSYFqmgHr/d9meQz2TO1
TH3pIbJ/bOyJY/Kw+m3rrE7EHjaL9YWrP2E1nzytQvnw7k2zcDTZlp9iN2kovSqn
TB3yFUToLn2MB3pLj2yhnkmzrQakQWx5f/xyLQilgTazsCcQsx0BbwAYNwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFNdpunIJzDGJYrbqDYmQubRskJXbMB8GA1UdIwQY
MBaAFOWCX77nxDopg46r5PyH15Q0nAyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS83NThjOTYtNjExZC00MTY3LTgwY2Qt
MDQxYWIzMDJjMmY5LzEvMTJtNmNnbk1NWWxpdHVvTmlaQzV0R3lRbGRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS83NThjOTYtNjExZC00MTY3LTgwY2QtMDQxYWIzMDJjMmY5
LzEvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQGLi5AAwQC
XvCAAwQFXvCgMA0EAgACMAcDBQAqCWXAMA0GCSqGSIb3DQEBCwUAA4IBAQAWHzn/
u74Aw0Q1w2X6BglUspHqRJWbw2t+EOGXSnECq/Br0075XMZ9IBZd049Cn2+DN7Ls
Kq3PLEQqfyI1wNZfBonmNFM+rjicEERDIvLhITFx5DvhzdDzDHLwMxOndnkI21KU
HWGLCQ6cQIO8M51OcGosmikWdyxsNr1+UI3RdUR77j2b9mG1gVYhjPWVjiHA3NnV
ySi+bdRAfZxcD/XQ8kVX7vMclsj/CWkQZfqQelbMmwgnlYj+V+Dy+PmGXMoFoH0x
/fw89Taui+SOwIwGyAA9Umc24dhDn5qHn5pg4nQKKsEP5lG1SVuSL3B5Yj5NGMg4
dF7jEYyZ4NnkfCPn
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:49:05 2025 by rpki-client