Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/1CLAF2YZcVbPXu3dvXseNFcC89A.roa
File: 1CLAF2YZcVbPXu3dvXseNFcC89A.roa (raw, json)
Hash identifier: Ic4XaFcHCkcpp6FuOwAkL+6H/ya0ZemjEkRy/d1fPmA=
Subject key identifier: D4:22:C0:17:66:19:71:56:CF:5E:ED:DD:BD:7B:1E:34:57:02:F3:D0
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 0193A58736ECBC8F7C8D2A957CCB229822D6
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/1CLAF2YZcVbPXu3dvXseNFcC89A.roa
Signing time: Sun 08 Dec 2024 09:08:42 +0000
ROA not before: Sun 08 Dec 2024 09:08:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198160
IP address blocks: 89.36.32.0/24 maxlen: 24
89.36.33.0/24 maxlen: 24
185.121.132.0/24 maxlen: 24
185.121.133.0/24 maxlen: 24
185.121.135.0/24 maxlen: 24
212.232.18.0/24 maxlen: 24
212.232.19.0/24 maxlen: 24
2a14:6780::/29 maxlen: 48
2a14:6780::/32 maxlen: 32
2a14:6781::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 09 Dec 2024 21:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a5:87:36:ec:bc:8f:7c:8d:2a:95:7c:cb:22:98:22:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Dec 8 09:08:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d422c01766197156cf5eedddbd7b1e345702f3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:29:68:8c:7d:e1:37:b3:e4:5c:e9:91:9f:b4:
77:9f:03:f3:11:23:83:f9:f5:55:b6:4d:13:61:3d:
28:c2:8d:7d:57:bc:a0:d7:1e:0c:ed:be:fc:e9:72:
65:07:59:2d:41:72:60:01:33:2e:82:ee:f5:e0:07:
01:bc:f5:e6:db:3f:45:87:bf:35:d4:ef:c4:b5:cb:
ec:e0:f4:1f:25:dd:74:7e:66:d6:cf:35:1c:a8:7a:
a1:56:88:01:4d:0a:90:a1:6a:c4:c7:6a:7d:27:6f:
10:72:35:02:0c:9a:20:a2:e6:20:13:b6:b6:5c:16:
b3:15:d1:a0:42:a4:e3:1b:42:06:47:ea:d3:95:86:
9a:b3:24:2c:8b:6d:69:83:2e:2b:c5:3c:9f:75:38:
d8:9b:d1:67:5f:ff:1b:2e:ac:ed:10:c4:81:ee:6d:
bb:9f:5a:ab:98:68:b5:b7:14:d2:8b:a7:7e:fb:08:
53:bc:ac:e3:60:f9:28:ba:26:b8:08:62:2d:be:b1:
ae:cb:7c:9c:6f:59:a7:b0:95:46:38:9b:39:6d:60:
e2:53:93:d9:ee:b8:ad:69:5d:a2:ec:7f:9b:4c:59:
7c:3e:59:94:71:0f:39:47:bc:c3:71:fa:39:c1:9a:
1f:83:86:12:55:a1:4f:7e:e8:99:c6:6d:50:48:1e:
0b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:22:C0:17:66:19:71:56:CF:5E:ED:DD:BD:7B:1E:34:57:02:F3:D0
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/1CLAF2YZcVbPXu3dvXseNFcC89A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.32.0/23
185.121.132.0/23
185.121.135.0/24
212.232.18.0/23
IPv6:
2a14:6780::/29
Signature Algorithm: sha256WithRSAEncryption
88:0d:61:56:d4:97:8b:16:0e:33:cb:ca:35:18:2a:5f:52:c3:
20:b9:63:26:92:62:63:c9:70:14:58:a2:b8:26:bb:7c:04:e6:
bf:e7:b0:f2:5f:d9:af:a4:04:6f:9d:1a:3d:f7:b8:d3:7e:e3:
aa:9f:8c:4f:be:bd:e7:37:e1:da:bd:1e:a6:e6:5c:48:d2:cd:
1f:7e:5f:cb:d3:86:56:90:c0:12:d5:f1:b8:09:4b:43:09:df:
89:65:98:0d:ca:31:dd:f8:bf:d0:f5:3f:77:d2:52:d9:00:a4:
d3:73:ac:3e:26:be:4a:f7:90:71:aa:dc:ba:12:b9:3f:27:42:
8e:2d:1a:24:b0:49:32:f1:5c:1c:c9:86:10:b0:1d:e5:d7:71:
ea:b2:37:e6:26:b9:5c:a1:91:73:1d:38:69:ad:60:b0:e2:fa:
fd:4b:8b:ff:1d:c3:71:6b:0d:00:8a:6b:f3:1f:d9:5a:37:2b:
f7:82:b6:8b:72:70:7a:a6:6e:ff:be:e0:6e:1e:7b:bf:2a:ed:
d0:c5:10:aa:67:23:ce:de:fe:08:fa:16:8d:26:a6:da:aa:33:
2d:93:26:a5:72:ff:e9:a6:69:50:28:6e:50:0b:98:e1:b9:d7:
bc:d8:63:ca:a3:fe:97:92:25:90:ba:2c:f2:d6:c9:62:b8:e3:
f3:40:f6:68
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZOlhzbsvI98jSqVfMsimCLWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx
YmM3N2YwHhcNMjQxMjA4MDkwODQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDIyYzAxNzY2MTk3MTU2Y2Y1ZWVkZGRiZDdiMWUzNDU3MDJmM2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnClojH3hN7PkXOmRn7R3nwPzESOD
+fVVtk0TYT0owo19V7yg1x4M7b786XJlB1ktQXJgATMugu714AcBvPXm2z9Fh781
1O/Etcvs4PQfJd10fmbWzzUcqHqhVogBTQqQoWrEx2p9J28QcjUCDJogouYgE7a2
XBazFdGgQqTjG0IGR+rTlYaasyQsi21pgy4rxTyfdTjYm9FnX/8bLqztEMSB7m27
n1qrmGi1txTSi6d++whTvKzjYPkouia4CGItvrGuy3ycb1mnsJVGOJs5bWDiU5PZ
7ritaV2i7H+bTFl8PlmUcQ85R7zDcfo5wZofg4YSVaFPfuiZxm1QSB4LEQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFNQiwBdmGXFWz17t3b17HjRXAvPQMB8GA1UdIwQY
MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt
YWE2ZWQ0ZGFmYjNiLzEvMUNMQUYyWVpjVmJQWHUzZHZYc2VORmNDODlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi
LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBWSQgAwQB
uXmEAwQAuXmHAwQB1OgSMA0EAgACMAcDBQMqFGeAMA0GCSqGSIb3DQEBCwUAA4IB
AQCIDWFW1JeLFg4zy8o1GCpfUsMguWMmkmJjyXAUWKK4Jrt8BOa/57DyX9mvpARv
nRo997jTfuOqn4xPvr3nN+HavR6m5lxI0s0ffl/L04ZWkMAS1fG4CUtDCd+JZZgN
yjHd+L/Q9T930lLZAKTTc6w+Jr5K95Bxqty6Erk/J0KOLRoksEky8VwcyYYQsB3l
13HqsjfmJrlcoZFzHThprWCw4vr9S4v/HcNxaw0AimvzH9laNyv3graLcnB6pm7/
vuBuHnu/Ku3QxRCqZyPO3v4I+haNJqbaqjMtkyalcv/ppmlQKG5QC5jhude82GPK
o/6XkiWQuizy1sliuOPzQPZo
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:22:19 2025 by rpki-client