Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/1vLG7_Jb2_-Gu4zb1ycEmXrZYic.roa
File: 1vLG7_Jb2_-Gu4zb1ycEmXrZYic.roa (raw, json)
Hash identifier: oC8/w1L9tWUnwFyPI08y4hAKHKjpa/MC+sZGTxfBsoA=
Subject key identifier: D6:F2:C6:EF:F2:5B:DB:FF:86:BB:8C:DB:D7:27:04:99:7A:D9:62:27
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019515BF23EA1E3CE2EC3446C71F5909512B
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/1vLG7_Jb2_-Gu4zb1ycEmXrZYic.roa
Signing time: Mon 17 Feb 2025 21:10:02 +0000
ROA not before: Mon 17 Feb 2025 21:10:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215245
IP address blocks: 46.247.108.0/24 maxlen: 24
46.247.109.0/24 maxlen: 24
86.54.5.0/24 maxlen: 24
185.144.70.0/24 maxlen: 24
185.144.71.0/24 maxlen: 24
194.46.60.0/24 maxlen: 24
194.117.225.0/24 maxlen: 24
2a14:6780:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Feb 2025 08:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:15:bf:23:ea:1e:3c:e2:ec:34:46:c7:1f:59:09:51:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Feb 17 21:10:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6f2c6eff25bdbff86bb8cdbd72704997ad96227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:85:b3:6b:12:a1:75:54:d0:b2:36:da:4b:
c3:36:11:3e:57:c6:0d:6a:9a:0e:51:7f:7e:08:0c:
0f:e0:1f:9d:b9:0c:c8:d8:70:70:ff:e3:03:1b:4c:
d4:a9:2e:c7:db:8d:b9:98:24:33:ef:50:28:93:bd:
24:31:10:5c:04:e8:b0:70:95:f1:30:76:97:8f:62:
c1:ce:23:10:cc:ec:a8:a6:d6:8e:25:9d:20:bd:d1:
e9:55:2a:dd:36:83:34:8f:5a:28:6b:c6:b8:5a:ea:
c7:cc:58:51:ad:b2:56:44:41:c8:fb:83:ff:4b:50:
42:e4:27:8e:96:46:68:6e:ae:d9:d3:53:d5:a7:c9:
eb:4d:5e:a6:6c:e4:64:51:91:45:dc:64:aa:23:27:
73:ac:44:c8:9a:84:c1:6c:fd:77:bc:16:b5:0f:b3:
f6:b9:4d:0c:f4:5f:2a:ce:c2:55:f0:73:07:b8:79:
b4:92:62:6d:06:62:26:56:51:4a:ea:29:5d:e0:2b:
60:83:c1:9a:d5:02:ab:43:06:f9:1f:a1:c3:72:07:
17:ee:59:6c:55:b4:9e:f0:07:47:e0:c5:0d:e1:4b:
27:6a:11:a1:38:f9:aa:62:00:c2:a1:c9:85:cb:f1:
3c:c5:f8:d1:29:68:91:35:29:fe:b2:56:fe:04:06:
8f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F2:C6:EF:F2:5B:DB:FF:86:BB:8C:DB:D7:27:04:99:7A:D9:62:27
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/1vLG7_Jb2_-Gu4zb1ycEmXrZYic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.247.108.0/23
86.54.5.0/24
185.144.70.0/23
194.46.60.0/24
194.117.225.0/24
IPv6:
2a14:6780:4::/48
Signature Algorithm: sha256WithRSAEncryption
12:2f:25:58:4a:c6:e2:d4:c7:45:aa:d0:9c:53:1a:73:2b:46:
9e:ec:bf:47:24:a4:fe:aa:75:9d:12:52:66:19:2a:91:20:29:
5c:99:04:c1:40:e9:ed:20:71:ef:30:61:0d:ec:e9:ea:a3:c6:
b8:74:8e:af:0f:79:d5:e0:90:ea:f8:f1:ff:a5:de:43:88:d7:
08:12:cb:fe:a2:75:9c:50:d9:1a:96:87:7b:19:a7:04:d7:28:
eb:c0:80:b3:33:54:fd:16:52:22:b4:c9:72:37:f1:6a:54:4f:
ff:49:cb:62:91:b5:41:4e:0f:65:8c:64:8f:7f:b5:2d:4c:79:
84:70:20:cc:7b:73:5c:d6:4e:bd:02:a8:63:c3:1d:80:30:e7:
60:98:7a:a9:55:7f:de:cd:8a:d2:3e:83:26:26:13:95:89:39:
9b:c8:f1:52:31:33:f0:5b:2a:ea:be:8f:58:8c:cf:c3:da:78:
00:97:2e:89:f5:cf:83:0b:d0:b9:5a:d7:f5:90:c7:40:80:ed:
ce:65:5d:cc:5f:bb:e6:f4:30:09:a1:37:5f:7d:f9:9a:5e:81:
31:62:c1:02:80:2a:e8:e5:8d:08:33:83:98:4c:e2:14:70:45:
a2:47:1e:d7:33:22:d5:e5:39:5e:2a:64:a0:ab:23:4e:98:cb:
80:58:d0:b6
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAZUVvyPqHjzi7DRGxx9ZCVErMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx
YmM3N2YwHhcNMjUwMjE3MjExMDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmYyYzZlZmYyNWJkYmZmODZiYjhjZGJkNzI3MDQ5OTdhZDk2MjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG+Fs2sSoXVU0LI22kvDNhE+V8YN
apoOUX9+CAwP4B+duQzI2HBw/+MDG0zUqS7H2425mCQz71Aok70kMRBcBOiwcJXx
MHaXj2LBziMQzOyoptaOJZ0gvdHpVSrdNoM0j1ooa8a4WurHzFhRrbJWREHI+4P/
S1BC5CeOlkZobq7Z01PVp8nrTV6mbORkUZFF3GSqIydzrETImoTBbP13vBa1D7P2
uU0M9F8qzsJV8HMHuHm0kmJtBmImVlFK6ild4Ctgg8Ga1QKrQwb5H6HDcgcX7lls
VbSe8AdH4MUN4UsnahGhOPmqYgDCocmFy/E8xfjRKWiRNSn+slb+BAaPdQIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFNbyxu/yW9v/hruM29cnBJl62WInMB8GA1UdIwQY
MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt
YWE2ZWQ0ZGFmYjNiLzEvMXZMRzdfSmIyXy1HdTR6YjF5Y0VtWHJaWWljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi
LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIAATAeAwQBLvdsAwQA
VjYFAwQBuZBGAwQAwi48AwQAwnXhMA8EAgACMAkDBwAqFGeAAAQwDQYJKoZIhvcN
AQELBQADggEBABIvJVhKxuLUx0Wq0JxTGnMrRp7sv0ckpP6qdZ0SUmYZKpEgKVyZ
BMFA6e0gce8wYQ3s6eqjxrh0jq8PedXgkOr48f+l3kOI1wgSy/6idZxQ2RqWh3sZ
pwTXKOvAgLMzVP0WUiK0yXI38WpUT/9Jy2KRtUFOD2WMZI9/tS1MeYRwIMx7c1zW
Tr0CqGPDHYAw52CYeqlVf97NitI+gyYmE5WJOZvI8VIxM/BbKuq+j1iMz8PaeACX
Lon1z4ML0Lla1/WQx0CA7c5lXcxfu+b0MAmhN199+ZpegTFiwQKAKujljQgzg5hM
4hRwRaJHHtczItXlOV4qZKCrI06Yy4BY0LY=
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:41:59 2025 by rpki-client