Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EUwVo-bvl6QLNEfpGFvyKNnBjYc.roa
File: EUwVo-bvl6QLNEfpGFvyKNnBjYc.roa (raw, json)
Hash identifier: 1EPFFeRm+L95q7i+5xCJ4nr7P1U6JFwCK3n96TI6O0c=
Subject key identifier: 11:4C:15:A3:E6:EF:97:A4:0B:34:47:E9:18:5B:F2:28:D9:C1:8D:87
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01942143F5E30FDCE5FE111EDD792E536E5D
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EUwVo-bvl6QLNEfpGFvyKNnBjYc.roa
Signing time: Wed 01 Jan 2025 09:48:09 +0000
ROA not before: Wed 01 Jan 2025 09:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26548
IP address blocks: 91.240.71.0/24 maxlen: 24
194.105.158.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 18 Feb 2025 18:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f5:e3:0f:dc:e5:fe:11:1e:dd:79:2e:53:6e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=114c15a3e6ef97a40b3447e9185bf228d9c18d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:70:e2:8b:23:ee:86:61:ab:a6:d8:48:e4:bd:
f4:9a:ea:f1:d1:52:f9:3f:a5:5f:fb:43:a3:ef:cd:
3a:de:eb:a0:99:e8:68:8b:b4:ff:cb:8d:8e:09:72:
46:40:0d:46:77:41:04:0e:1b:62:44:6a:cf:b3:ee:
24:f8:32:71:e9:8a:59:cb:7c:77:52:bc:b4:d3:63:
e1:1d:d0:d6:e8:a5:38:a8:bb:74:02:85:a9:e2:4b:
19:a7:02:45:a7:72:dd:f6:33:82:6a:ce:2c:77:ca:
9d:7d:46:22:72:3a:4e:f7:bb:9f:12:05:ff:bd:2e:
73:4f:48:a7:03:1b:fe:e6:2b:77:e0:c6:df:89:99:
77:ed:ae:2e:c9:e7:8d:41:40:f7:98:08:37:aa:66:
3e:e3:5b:84:17:f3:2e:1b:34:f6:36:48:14:b9:c0:
28:7b:0e:6e:8d:99:53:19:9e:08:9b:39:20:5a:13:
83:ba:71:f5:70:20:c2:f6:a2:f9:31:e7:af:9b:2e:
7b:37:92:0c:1d:fc:01:f7:34:a1:63:39:38:97:cd:
d9:3e:de:0a:f9:a7:0f:91:4f:f2:ef:cd:4f:6f:94:
42:6a:5e:62:44:9b:c2:b2:7c:f4:de:4e:eb:2a:cd:
97:16:a3:1b:9e:cc:d0:b4:6d:9d:e7:13:97:e4:c5:
f4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4C:15:A3:E6:EF:97:A4:0B:34:47:E9:18:5B:F2:28:D9:C1:8D:87
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EUwVo-bvl6QLNEfpGFvyKNnBjYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.71.0/24
194.105.158.0/23
Signature Algorithm: sha256WithRSAEncryption
52:93:54:d6:f9:01:b4:0f:3d:90:ba:db:33:6f:9d:28:e3:bd:
af:29:06:59:a4:17:46:ad:cb:a4:15:53:6e:e6:7a:8d:61:b0:
fe:ec:85:14:d6:a8:44:86:1a:78:ee:71:66:69:5d:c5:24:9e:
24:1f:f3:ef:9b:48:e0:1e:0c:41:fc:e4:67:c7:17:0b:e7:fd:
e6:c8:6b:39:24:89:8c:40:a0:0d:68:b0:5b:9b:73:81:19:df:
89:39:05:02:3e:92:dc:b7:e8:cd:6e:39:e3:3d:3b:bf:22:85:
91:e3:14:dc:c3:10:d3:08:32:d1:a7:3f:55:55:a5:d1:48:31:
5c:ff:b1:03:e4:1c:9d:61:1f:67:7f:ef:98:1e:ed:96:33:c0:
cd:fe:47:72:44:b1:29:f5:07:aa:bd:6f:f0:a1:2f:3f:35:46:
ea:c5:54:c7:5c:f4:49:b5:83:81:51:8e:0b:04:74:b6:a4:a4:
10:d3:42:54:a5:6c:7e:2e:f4:c1:ab:16:03:e4:ab:66:30:99:
58:3d:56:58:61:69:4e:45:4b:65:fb:f7:0e:1b:a2:55:41:71:
d0:7d:e7:c7:2b:7d:51:f2:43:3f:6e:a3:67:7c:38:0c:90:db:
ca:ed:1f:27:00:bd:31:4e:64:c6:0a:5d:c7:57:be:94:16:b9:
73:37:70:ad
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhQ/XjD9zl/hEe3XkuU25dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjUwMTAxMDk0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTRjMTVhM2U2ZWY5N2E0MGIzNDQ3ZTkxODViZjIyOGQ5YzE4ZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXDiiyPuhmGrpthI5L30murx0VL5
P6Vf+0Oj78063uugmehoi7T/y42OCXJGQA1Gd0EEDhtiRGrPs+4k+DJx6YpZy3x3
Ury002PhHdDW6KU4qLt0AoWp4ksZpwJFp3Ld9jOCas4sd8qdfUYicjpO97ufEgX/
vS5zT0inAxv+5it34MbfiZl37a4uyeeNQUD3mAg3qmY+41uEF/MuGzT2NkgUucAo
ew5ujZlTGZ4ImzkgWhODunH1cCDC9qL5Meevmy57N5IMHfwB9zShYzk4l83ZPt4K
+acPkU/y781Pb5RCal5iRJvCsnz03k7rKs2XFqMbnszQtG2d5xOX5MX04QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBFMFaPm75ekCzRH6Rhb8ijZwY2HMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvRVV3Vm8tYnZsNlFMTkVmcEdGdnlLTm5CalljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW/BHAwQB
wmmeMA0GCSqGSIb3DQEBCwUAA4IBAQBSk1TW+QG0Dz2Qutszb50o472vKQZZpBdG
rcukFVNu5nqNYbD+7IUU1qhEhhp47nFmaV3FJJ4kH/Pvm0jgHgxB/ORnxxcL5/3m
yGs5JImMQKANaLBbm3OBGd+JOQUCPpLct+jNbjnjPTu/IoWR4xTcwxDTCDLRpz9V
VaXRSDFc/7ED5BydYR9nf++YHu2WM8DN/kdyRLEp9QeqvW/woS8/NUbqxVTHXPRJ
tYOBUY4LBHS2pKQQ00JUpWx+LvTBqxYD5KtmMJlYPVZYYWlORUtl+/cOG6JVQXHQ
fefHK31R8kM/bqNnfDgMkNvK7R8nAL0xTmTGCl3HV76UFrlzN3Ct
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:30:39 2025 by rpki-client