Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/RFPrAlMXeJdaRFuozhBpv219X2A.roa
File: RFPrAlMXeJdaRFuozhBpv219X2A.roa (raw, json)
Hash identifier: 0StA/zmg5hUBUcZp30gahvdeQKTl6eFY8Ru2tn/ms3U=
Subject key identifier: 44:53:EB:02:53:17:78:97:5A:44:5B:A8:CE:10:69:BF:6D:7D:5F:60
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 0194DB875442077F3D6B18E4BBD79EB1088C
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/RFPrAlMXeJdaRFuozhBpv219X2A.roa
Signing time: Thu 06 Feb 2025 13:51:06 +0000
ROA not before: Thu 06 Feb 2025 13:51:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198160
IP address blocks: 89.36.32.0/24 maxlen: 24
89.36.33.0/24 maxlen: 24
185.121.132.0/24 maxlen: 24
185.121.133.0/24 maxlen: 24
2a14:6780::/29 maxlen: 48
2a14:6780::/32 maxlen: 32
2a14:6781::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 03 Mar 2025 09:49:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:db:87:54:42:07:7f:3d:6b:18:e4:bb:d7:9e:b1:08:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Feb 6 13:51:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4453eb02531778975a445ba8ce1069bf6d7d5f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:f4:80:0b:f3:05:dc:05:15:c4:99:b3:cf:
ea:ae:b6:54:d8:43:6a:ce:a5:48:d3:d9:0e:20:83:
68:ff:e6:1f:24:12:55:a4:18:50:3e:6a:27:ce:34:
8c:cc:b4:ba:f1:98:93:d0:8d:1d:a4:ba:c5:59:da:
28:56:84:5a:b2:a0:ef:57:e3:ef:1d:dc:98:ac:42:
24:39:14:8d:0c:ac:6e:68:27:f6:21:44:b5:95:e7:
20:bb:3b:e6:84:61:40:cb:ac:75:55:e4:51:f6:59:
56:f6:4c:59:32:49:78:44:12:9b:da:6c:87:a6:67:
91:11:09:8f:e7:fb:76:35:81:c3:55:4b:63:39:6c:
f2:ee:9b:f3:24:48:4a:48:68:2c:fb:7a:33:d8:03:
97:f0:14:9c:66:fe:1c:33:80:60:b3:98:a6:dd:34:
4a:1d:3d:71:14:44:f2:19:5d:51:72:c5:2b:59:32:
8a:26:36:7c:b4:c2:16:75:46:e3:a7:b8:47:68:55:
82:3d:35:f4:11:b7:80:f1:81:41:b4:da:6b:12:c8:
5e:5f:b4:20:b7:34:c5:cd:4d:ed:07:91:f1:13:22:
05:db:6f:eb:79:4d:ca:3f:96:8d:35:2e:d7:44:58:
65:3a:0d:20:2b:47:72:7d:c7:b7:1b:6b:c4:5f:79:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:53:EB:02:53:17:78:97:5A:44:5B:A8:CE:10:69:BF:6D:7D:5F:60
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/RFPrAlMXeJdaRFuozhBpv219X2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.32.0/23
185.121.132.0/23
IPv6:
2a14:6780::/29
Signature Algorithm: sha256WithRSAEncryption
32:9d:42:e9:01:5e:5a:a1:39:b9:f1:4b:43:d7:12:4c:f4:c4:
d3:fd:19:8d:2e:c2:52:a6:7a:4f:1b:51:bf:f2:b7:08:8e:f8:
20:b6:97:84:d7:df:c7:46:0f:53:01:ab:0e:02:c8:46:cb:10:
4e:a9:fb:e7:a5:20:79:5c:b9:f7:28:c2:7d:f7:65:94:c6:11:
c5:eb:1c:05:20:51:49:76:7d:c7:7a:6c:cf:68:19:d3:53:59:
86:5d:d5:97:22:e7:7c:08:53:9d:9d:94:21:00:c6:ee:d0:70:
d3:43:30:4a:64:19:09:e1:c3:1e:82:18:a8:68:05:c0:07:1b:
45:10:09:67:c5:e3:66:65:a2:5c:8b:71:6a:72:e2:29:42:b3:
3b:14:90:54:3d:a4:ad:ef:74:cb:68:8c:ed:1e:52:23:ce:3b:
f3:d8:84:4a:00:26:bd:a4:6f:38:1e:f2:ab:65:9e:66:7c:82:
31:d9:00:0a:b0:b7:eb:83:0e:9c:83:75:f5:36:82:a6:cd:09:
43:a7:08:fa:b3:bb:c4:06:05:f1:21:18:52:6c:cb:d1:c6:53:
3a:fe:48:84:50:ec:40:9d:f5:1f:72:24:bb:4a:c1:10:3d:ea:
5b:b7:be:a8:46:22:23:da:73:09:0d:79:bc:3b:b2:e1:8a:07:
d7:f0:7f:11
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZTbh1RCB389axjku9eesQiMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx
YmM3N2YwHhcNMjUwMjA2MTM1MTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDUzZWIwMjUzMTc3ODk3NWE0NDViYThjZTEwNjliZjZkN2Q1ZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyf0gAvzBdwFFcSZs8/qrrZU2ENq
zqVI09kOIINo/+YfJBJVpBhQPmonzjSMzLS68ZiT0I0dpLrFWdooVoRasqDvV+Pv
HdyYrEIkORSNDKxuaCf2IUS1lecguzvmhGFAy6x1VeRR9llW9kxZMkl4RBKb2myH
pmeREQmP5/t2NYHDVUtjOWzy7pvzJEhKSGgs+3oz2AOX8BScZv4cM4Bgs5im3TRK
HT1xFETyGV1RcsUrWTKKJjZ8tMIWdUbjp7hHaFWCPTX0EbeA8YFBtNprEsheX7Qg
tzTFzU3tB5HxEyIF22/reU3KP5aNNS7XRFhlOg0gK0dyfce3G2vEX3mESQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFERT6wJTF3iXWkRbqM4Qab9tfV9gMB8GA1UdIwQY
MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt
YWE2ZWQ0ZGFmYjNiLzEvUkZQckFsTVhlSmRhUkZ1b3poQnB2MjE5WDJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi
LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBWSQgAwQB
uXmEMA0EAgACMAcDBQMqFGeAMA0GCSqGSIb3DQEBCwUAA4IBAQAynULpAV5aoTm5
8UtD1xJM9MTT/RmNLsJSpnpPG1G/8rcIjvggtpeE19/HRg9TAasOAshGyxBOqfvn
pSB5XLn3KMJ992WUxhHF6xwFIFFJdn3HemzPaBnTU1mGXdWXIud8CFOdnZQhAMbu
0HDTQzBKZBkJ4cMeghioaAXABxtFEAlnxeNmZaJci3FqcuIpQrM7FJBUPaSt73TL
aIztHlIjzjvz2IRKACa9pG84HvKrZZ5mfIIx2QAKsLfrgw6cg3X1NoKmzQlDpwj6
s7vEBgXxIRhSbMvRxlM6/kiEUOxAnfUfciS7SsEQPepbt76oRiIj2nMJDXm8O7Lh
igfX8H8R
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:30:36 2025 by rpki-client