Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/l22WEleEgrycWe-0AUQ1j-JxvLc.roa
File: l22WEleEgrycWe-0AUQ1j-JxvLc.roa (raw, json)
Hash identifier: h+QZjvg4EG4XgdaXXl6fDH7YanN18vSpPQyHQykfFoM=
Subject key identifier: 97:6D:96:12:57:84:82:BC:9C:59:EF:B4:01:44:35:8F:E2:71:BC:B7
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A320A6388BA318556DEE4CA0DE99A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/l22WEleEgrycWe-0AUQ1j-JxvLc.roa
Signing time: Tue 02 Jan 2024 12:33:32 +0000
ROA not before: Tue 02 Jan 2024 12:33:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62366
IP address blocks: 146.158.76.0/23 maxlen: 24
95.46.1.0/24 maxlen: 24
93.171.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:32:0a:63:88:ba:31:85:56:de:e4:ca:0d:e9:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=976d9612578482bc9c59efb40144358fe271bcb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7f:48:09:e6:3b:11:9b:b0:60:a8:41:6f:47:
a3:c4:df:cf:9a:81:00:57:fa:68:1b:6c:6d:59:ad:
c9:b9:09:b3:c8:af:d0:3e:4a:3d:58:36:5b:4a:2e:
31:c6:01:ee:74:53:33:2d:45:bf:b3:c8:58:b5:a4:
a2:d6:39:33:0c:30:c7:01:42:d6:bd:57:83:02:e5:
de:53:0a:2b:06:1f:c1:3b:c7:7f:15:c5:c6:5a:3d:
3b:91:42:0c:2d:7d:8f:21:74:d4:1d:06:99:12:b7:
9b:f8:75:d3:7b:4b:63:32:92:27:ed:bc:3c:f8:3c:
82:c2:c2:cd:21:0a:b4:5d:52:ac:9c:f0:9b:74:94:
61:5a:e7:19:0a:fe:b9:b2:46:37:ff:e5:fd:25:37:
55:5e:26:de:b5:16:ed:29:90:5b:86:ce:c2:f0:95:
ca:b5:4c:b1:1d:2a:06:11:41:14:aa:ae:7b:6e:25:
0e:61:54:98:ab:18:61:93:55:fe:4a:a5:f6:65:c0:
8b:f5:d8:14:f2:22:30:de:98:45:1f:b4:ec:40:e5:
0f:84:9c:4a:43:5a:43:32:ab:2b:16:56:8d:a9:ef:
f0:aa:16:ff:d2:43:a8:02:2c:2b:71:da:ab:8c:85:
b0:80:6e:85:91:80:79:b1:b8:5f:03:d4:7a:9c:01:
33:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6D:96:12:57:84:82:BC:9C:59:EF:B4:01:44:35:8F:E2:71:BC:B7
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/l22WEleEgrycWe-0AUQ1j-JxvLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.135.0/24
95.46.1.0/24
146.158.76.0/23
Signature Algorithm: sha256WithRSAEncryption
90:cf:0a:e6:ed:87:16:4b:c4:63:59:9d:e2:15:86:f6:49:37:
66:e2:5d:83:75:c1:56:03:8a:1d:c6:33:17:2f:fa:3a:00:e3:
b3:05:58:72:de:51:45:ee:44:d6:bc:c3:d6:11:29:d0:55:6f:
6a:ee:a3:7b:0f:5c:d4:6b:1e:6c:57:63:4b:61:e4:33:89:a5:
05:a0:8c:59:aa:05:27:b8:52:a4:fc:ce:43:42:92:8c:21:f2:
13:4d:f4:60:1d:40:ac:d5:ad:c9:3a:57:5d:de:f7:f4:2b:83:
c2:6e:20:7d:82:96:fe:72:e1:3e:c6:96:cf:43:43:92:e2:de:
50:85:77:d0:c3:39:5d:4d:04:4a:ea:53:01:18:81:5c:48:16:
97:17:98:ac:79:b9:ef:5f:7a:f1:62:16:fa:76:fd:e5:25:10:
19:35:2e:2c:88:45:c4:b1:0a:f2:35:66:08:a5:04:e7:70:9a:
cb:a4:02:86:ff:b4:59:06:8e:a3:8f:78:ce:c9:ba:b2:10:c4:
3a:6b:7a:ef:9d:dd:22:2c:ce:3c:ac:f4:01:9e:fe:0f:d2:ce:
a1:32:0f:33:56:a5:ab:46:8f:15:55:bb:3d:a8:b8:b7:5b:41:
db:16:df:54:9d:53:e9:25:41:95:be:93:b9:50:7e:0f:91:5e:
3c:fd:b5:a1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzKKjIKY4i6MYVW3uTKDemaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzZkOTYxMjU3ODQ4MmJjOWM1OWVmYjQwMTQ0MzU4ZmUyNzFiY2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX9ICeY7EZuwYKhBb0ejxN/PmoEA
V/poG2xtWa3JuQmzyK/QPko9WDZbSi4xxgHudFMzLUW/s8hYtaSi1jkzDDDHAULW
vVeDAuXeUworBh/BO8d/FcXGWj07kUIMLX2PIXTUHQaZEreb+HXTe0tjMpIn7bw8
+DyCwsLNIQq0XVKsnPCbdJRhWucZCv65skY3/+X9JTdVXibetRbtKZBbhs7C8JXK
tUyxHSoGEUEUqq57biUOYVSYqxhhk1X+SqX2ZcCL9dgU8iIw3phFH7TsQOUPhJxK
Q1pDMqsrFlaNqe/wqhb/0kOoAiwrcdqrjIWwgG6FkYB5sbhfA9R6nAEzdwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJdtlhJXhIK8nFnvtAFENY/icby3MB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvbDIyV0VsZUVncnljV2UtMEFVUTFqLUp4dkxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXauHAwQA
Xy4BAwQBkp5MMA0GCSqGSIb3DQEBCwUAA4IBAQCQzwrm7YcWS8RjWZ3iFYb2STdm
4l2DdcFWA4odxjMXL/o6AOOzBVhy3lFF7kTWvMPWESnQVW9q7qN7D1zUax5sV2NL
YeQziaUFoIxZqgUnuFKk/M5DQpKMIfITTfRgHUCs1a3JOldd3vf0K4PCbiB9gpb+
cuE+xpbPQ0OS4t5QhXfQwzldTQRK6lMBGIFcSBaXF5isebnvX3rxYhb6dv3lJRAZ
NS4siEXEsQryNWYIpQTncJrLpAKG/7RZBo6jj3jOybqyEMQ6a3rvnd0iLM48rPQB
nv4P0s6hMg8zVqWrRo8VVbs9qLi3W0HbFt9UnVPpJUGVvpO5UH4PkV48/bWh
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:19 2025 by rpki-client