Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/f8r1EvBPoezayz449r9nBQqwC4Y.roa
File: f8r1EvBPoezayz449r9nBQqwC4Y.roa (raw, json)
Hash identifier: +jywuESfKqxd5qDW7hv/XHqD4AiSlpi3nWoLd927TRM=
Subject key identifier: 7F:CA:F5:12:F0:4F:A1:EC:DA:CB:3E:38:F6:BF:67:05:0A:B0:0B:86
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01942748324F4A567543B17B61CEA68370AE
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/f8r1EvBPoezayz449r9nBQqwC4Y.roa
Signing time: Thu 02 Jan 2025 13:50:30 +0000
ROA not before: Thu 02 Jan 2025 13:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12541
IP address blocks: 45.10.104.0/22 maxlen: 22
45.83.50.0/23 maxlen: 23
45.83.50.0/24 maxlen: 24
45.83.51.0/24 maxlen: 24
80.66.112.0/23 maxlen: 23
80.66.114.0/24 maxlen: 24
80.66.115.0/24 maxlen: 24
80.66.116.0/24 maxlen: 24
80.66.117.0/24 maxlen: 24
80.66.118.0/24 maxlen: 24
80.66.119.0/24 maxlen: 24
80.66.120.0/23 maxlen: 23
80.66.120.0/24 maxlen: 24
80.66.121.0/24 maxlen: 24
80.66.122.0/24 maxlen: 24
80.66.123.0/24 maxlen: 24
80.66.124.0/24 maxlen: 24
80.66.125.0/24 maxlen: 24
80.66.126.0/24 maxlen: 24
80.66.127.0/24 maxlen: 24
89.42.70.0/24 maxlen: 24
89.44.150.0/24 maxlen: 24
89.44.151.0/24 maxlen: 24
89.45.208.0/24 maxlen: 24
91.132.31.0/24 maxlen: 24
94.198.46.0/24 maxlen: 24
94.198.47.0/24 maxlen: 24
178.19.34.0/24 maxlen: 24
178.19.35.0/24 maxlen: 24
178.19.44.0/24 maxlen: 24
178.19.45.0/24 maxlen: 24
178.19.46.0/24 maxlen: 24
178.19.47.0/24 maxlen: 24
185.71.28.0/24 maxlen: 24
185.203.21.0/24 maxlen: 24
185.203.22.0/24 maxlen: 24
185.203.23.0/24 maxlen: 24
185.229.212.0/24 maxlen: 24
185.229.213.0/24 maxlen: 24
185.229.214.0/24 maxlen: 24
185.229.215.0/24 maxlen: 24
185.242.175.0/24 maxlen: 24
193.178.212.0/24 maxlen: 24
193.178.218.0/24 maxlen: 24
193.186.1.0/24 maxlen: 24
193.186.11.0/24 maxlen: 24
194.15.140.0/24 maxlen: 24
194.15.146.0/24 maxlen: 24
194.15.182.0/24 maxlen: 24
194.15.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:32:4f:4a:56:75:43:b1:7b:61:ce:a6:83:70:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fcaf512f04fa1ecdacb3e38f6bf67050ab00b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2f:15:7c:f9:fd:56:f3:96:b3:c5:29:13:5f:
e5:f8:8d:45:a6:fb:c5:0e:9a:f9:3b:4a:0d:35:37:
68:80:3e:14:76:02:5d:67:e6:3b:23:98:75:0e:10:
f9:ea:7e:f1:d7:ab:ce:b9:c9:bd:52:7d:69:25:6f:
e0:92:67:d8:31:99:71:19:32:f6:27:84:63:d6:14:
3e:45:a2:63:83:f2:92:78:6f:cf:01:c4:cc:b1:59:
8b:df:bc:c6:00:8f:a1:f1:9c:32:e2:1b:70:a8:dd:
1c:f2:9b:1d:f0:34:40:b1:5d:ba:05:50:5d:81:1e:
18:e2:e7:d3:e0:f3:46:05:37:78:7c:2b:52:d8:22:
14:79:c7:1b:ff:4a:49:88:01:84:dc:7b:03:da:37:
47:9a:d9:df:62:8c:f4:06:02:b5:be:9a:fa:b1:6c:
cc:fc:e4:80:c7:56:7b:18:3d:5d:7e:a1:51:5c:f7:
b8:0b:92:8b:a5:9a:5f:24:16:a3:c9:40:4b:67:35:
5f:62:1c:4f:f8:02:bb:f2:48:dc:4d:53:b4:9d:fe:
fd:a3:da:7c:c7:7f:28:bf:d4:d0:9d:f6:a5:4e:88:
07:9b:21:35:4d:45:f3:7c:a8:58:fb:5c:c5:dd:26:
ea:90:04:9c:72:2b:03:a5:19:8a:39:29:77:94:8e:
ae:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CA:F5:12:F0:4F:A1:EC:DA:CB:3E:38:F6:BF:67:05:0A:B0:0B:86
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/f8r1EvBPoezayz449r9nBQqwC4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.104.0/22
45.83.50.0/23
80.66.112.0/20
89.42.70.0/24
89.44.150.0/23
89.45.208.0/24
91.132.31.0/24
94.198.46.0/23
178.19.34.0/23
178.19.44.0/22
185.71.28.0/24
185.203.21.0-185.203.23.255
185.229.212.0/22
185.242.175.0/24
193.178.212.0/24
193.178.218.0/24
193.186.1.0/24
193.186.11.0/24
194.15.140.0/24
194.15.146.0/24
194.15.182.0/24
194.15.195.0/24
Signature Algorithm: sha256WithRSAEncryption
99:78:62:b2:22:bb:c2:bd:0e:a5:ca:3a:e2:a0:25:0d:3b:db:
36:b7:6c:de:7c:44:d2:1f:71:0f:9f:b3:2b:46:80:53:fb:83:
ff:be:4d:b8:f7:e3:ec:e5:09:6a:dc:7a:7a:ea:bd:71:2a:ee:
c5:f2:01:ed:6c:50:74:00:54:d5:cf:8e:99:2d:6e:5d:8a:dd:
a5:f6:0a:df:4f:c7:24:43:3e:50:06:de:27:6d:9f:86:3d:16:
70:f4:c8:5a:fb:67:43:b8:19:d5:46:45:2d:97:42:d4:4c:e4:
6c:f5:8d:7f:3b:f0:90:b6:05:8b:5d:64:ed:ea:d2:e5:eb:b1:
27:a4:4d:af:6b:ca:03:07:66:92:e9:b9:66:e7:4f:5f:fc:61:
4b:cd:d5:61:ee:64:cd:5d:88:75:75:1c:7a:a9:aa:cd:0b:fb:
b4:46:dc:72:2f:cd:69:16:be:bd:de:86:e9:13:55:6c:0a:d2:
f4:78:a0:5c:d0:38:c0:72:aa:2f:1b:01:97:b2:35:a0:42:ef:
9c:e3:29:04:23:40:e8:57:72:3b:5a:9e:7b:19:4d:5d:78:dc:
21:eb:b7:90:0b:a5:cb:86:09:dc:56:72:ab:ce:ac:f4:36:5b:
4e:1a:04:e9:7f:ba:11:1a:5c:76:ca:f5:3e:1d:d8:72:da:4a:
a3:d9:74:54
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgISAZQnSDJPSlZ1Q7F7Yc6mg3CuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjUwMTAyMTM1MDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmNhZjUxMmYwNGZhMWVjZGFjYjNlMzhmNmJmNjcwNTBhYjAwYjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0y8VfPn9VvOWs8UpE1/l+I1FpvvF
Dpr5O0oNNTdogD4UdgJdZ+Y7I5h1DhD56n7x16vOucm9Un1pJW/gkmfYMZlxGTL2
J4Rj1hQ+RaJjg/KSeG/PAcTMsVmL37zGAI+h8Zwy4htwqN0c8psd8DRAsV26BVBd
gR4Y4ufT4PNGBTd4fCtS2CIUeccb/0pJiAGE3HsD2jdHmtnfYoz0BgK1vpr6sWzM
/OSAx1Z7GD1dfqFRXPe4C5KLpZpfJBajyUBLZzVfYhxP+AK78kjcTVO0nf79o9p8
x38ov9TQnfalTogHmyE1TUXzfKhY+1zF3SbqkASccisDpRmKOSl3lI6u8wIDAQAB
o4IClDCCApAwHQYDVR0OBBYEFH/K9RLwT6Hs2ss+OPa/ZwUKsAuGMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvZjhyMUV2QlBvZXpheXo0NDlyOW5CUXF3QzRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljCBkwQCAAEwgYwDBAIt
CmgDBAEtUzIDBARQQnADBABZKkYDBAFZLJYDBABZLdADBABbhB8DBAFexi4DBAGy
EyIDBAKyEywDBAC5RxwwDAMEALnLFQMEA7nLEAMEArnl1AMEALnyrwMEAMGy1AME
AMGy2gMEAMG6AQMEAMG6CwMEAMIPjAMEAMIPkgMEAMIPtgMEAMIPwzANBgkqhkiG
9w0BAQsFAAOCAQEAmXhisiK7wr0Opco64qAlDTvbNrds3nxE0h9xD5+zK0aAU/uD
/75NuPfj7OUJatx6euq9cSruxfIB7WxQdABU1c+OmS1uXYrdpfYK30/HJEM+UAbe
J22fhj0WcPTIWvtnQ7gZ1UZFLZdC1EzkbPWNfzvwkLYFi11k7erS5euxJ6RNr2vK
Awdmkum5ZudPX/xhS83VYe5kzV2IdXUceqmqzQv7tEbcci/NaRa+vd6G6RNVbArS
9HigXNA4wHKqLxsBl7I1oELvnOMpBCNA6FdyO1qeexlNXXjcIeu3kAuly4YJ3FZy
q86s9DZbThoE6X+6ERpcdsr1Ph3YctpKo9l0VA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 19:32:23 2025 by rpki-client