Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/eRuD4TEATBw0DjnLmB4hlN7Visk.roa
File: eRuD4TEATBw0DjnLmB4hlN7Visk.roa (raw, json)
Hash identifier: hfJ9eThcb77VR9GryrZ530j7DBn94U3Fj9V9Ccz2Ugs=
Subject key identifier: 79:1B:83:E1:31:00:4C:1C:34:0E:39:CB:98:1E:21:94:DE:D5:8A:C9
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 0193814346A7FF108340275A4DCE2ED5DE8B
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/eRuD4TEATBw0DjnLmB4hlN7Visk.roa
Signing time: Sun 01 Dec 2024 08:08:09 +0000
ROA not before: Sun 01 Dec 2024 08:08:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48347
IP address blocks: 212.22.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:81:43:46:a7:ff:10:83:40:27:5a:4d:ce:2e:d5:de:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Dec 1 08:08:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=791b83e131004c1c340e39cb981e2194ded58ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0b:0d:48:15:f1:2f:4e:b7:ba:8b:7a:4d:74:
9d:9e:b8:86:eb:15:58:e3:69:c7:5f:79:45:69:04:
23:a1:58:9d:58:e8:1c:3d:a1:64:2a:c6:9a:4a:6d:
43:be:3f:4c:b9:ef:d2:71:91:4b:a4:36:ff:b4:96:
fb:bb:b3:1a:d5:9b:ad:1d:9e:a6:54:1f:62:6f:ca:
e2:2e:dc:a1:41:0d:61:c7:6e:86:86:ec:cd:eb:2d:
1a:32:db:40:c4:f8:78:16:82:b6:4f:44:f9:0a:24:
a1:c6:2c:3c:89:2e:41:61:ab:58:48:81:4d:a0:c3:
48:a3:5d:ce:77:e4:45:5d:5e:bf:8c:48:f8:30:b5:
f9:30:41:06:55:d7:00:9a:f4:a3:83:3e:cc:c3:74:
6d:c4:a6:c2:18:a9:17:80:59:16:16:7c:d9:50:25:
0a:e9:da:dc:c7:63:70:da:73:11:85:5f:9f:e8:1d:
cd:80:fc:7e:31:d7:87:56:75:aa:a7:1c:48:b4:fc:
96:ff:7a:03:d7:5a:14:20:3a:9f:3a:2d:1c:68:1f:
bf:ff:90:12:47:f6:da:50:90:e4:93:69:fb:fb:76:
fd:78:b4:d3:13:8d:e1:02:c8:7a:fa:2b:b1:07:92:
3a:f6:67:c8:14:f6:78:10:1f:06:a8:d3:f0:01:c0:
49:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1B:83:E1:31:00:4C:1C:34:0E:39:CB:98:1E:21:94:DE:D5:8A:C9
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/eRuD4TEATBw0DjnLmB4hlN7Visk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.82.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:bb:0c:42:80:f9:14:9e:f4:b1:f3:eb:dc:15:ee:75:21:86:
b1:b8:ae:b1:36:ff:0c:01:5c:6a:51:8b:70:ae:09:e2:77:74:
fa:95:a0:70:a6:c3:4c:1a:1c:e4:00:97:05:69:67:f5:dc:f1:
82:98:44:ce:c5:c3:a4:bd:ed:09:97:45:6a:09:23:56:d6:90:
7e:b0:9d:c0:42:29:bb:ee:8b:0b:b8:97:90:52:b9:c3:19:31:
7e:eb:67:66:7f:7c:c0:a5:e3:59:7c:9a:51:82:64:99:0f:1b:
9a:41:6a:bb:a0:86:a3:fa:83:05:a1:36:58:40:d2:9e:cd:61:
52:f2:d8:64:83:d0:26:3c:3f:d1:90:6d:b0:0d:12:ee:06:39:
5b:da:ce:42:3f:92:19:bc:96:b0:a2:ba:73:06:9d:76:29:21:
41:97:c1:e6:70:05:8c:b3:6d:df:3e:4d:e6:b1:e2:61:54:5c:
b9:53:dc:da:9d:76:04:48:50:c5:52:09:c7:1c:f3:4b:4c:84:
02:53:aa:89:b4:27:ab:c6:99:eb:25:a3:55:97:a0:10:b2:b4:
bf:47:5b:26:e1:85:69:65:9b:9e:85:50:6a:8e:76:ac:49:55:
3b:8f:83:7f:d8:cc:f8:ac:7a:1b:8c:6f:f9:cd:10:df:d7:21:
48:13:b1:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOBQ0an/xCDQCdaTc4u1d6LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjQxMjAxMDgwODA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTFiODNlMTMxMDA0YzFjMzQwZTM5Y2I5ODFlMjE5NGRlZDU4YWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgsNSBXxL063uot6TXSdnriG6xVY
42nHX3lFaQQjoVidWOgcPaFkKsaaSm1Dvj9Mue/ScZFLpDb/tJb7u7Ma1ZutHZ6m
VB9ib8riLtyhQQ1hx26GhuzN6y0aMttAxPh4FoK2T0T5CiShxiw8iS5BYatYSIFN
oMNIo13Od+RFXV6/jEj4MLX5MEEGVdcAmvSjgz7Mw3RtxKbCGKkXgFkWFnzZUCUK
6drcx2Nw2nMRhV+f6B3NgPx+MdeHVnWqpxxItPyW/3oD11oUIDqfOi0caB+//5AS
R/baUJDkk2n7+3b9eLTTE43hAsh6+iuxB5I69mfIFPZ4EB8GqNPwAcBJtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHkbg+ExAEwcNA45y5geIZTe1YrJMB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEvZVJ1RDRURUFUQncwRGpuTG1CNGhsTjdWaXNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BZSMA0G
CSqGSIb3DQEBCwUAA4IBAQCpuwxCgPkUnvSx8+vcFe51IYaxuK6xNv8MAVxqUYtw
rgnid3T6laBwpsNMGhzkAJcFaWf13PGCmETOxcOkve0Jl0VqCSNW1pB+sJ3AQim7
7osLuJeQUrnDGTF+62dmf3zApeNZfJpRgmSZDxuaQWq7oIaj+oMFoTZYQNKezWFS
8thkg9AmPD/RkG2wDRLuBjlb2s5CP5IZvJaworpzBp12KSFBl8HmcAWMs23fPk3m
seJhVFy5U9zanXYESFDFUgnHHPNLTIQCU6qJtCerxpnrJaNVl6AQsrS/R1sm4YVp
ZZuehVBqjnasSVU7j4N/2Mz4rHobjG/5zRDf1yFIE7ET
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:58:21 2025 by rpki-client