Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0az5dc_hIjyFEv8ZQhfrdZjlOc4.roa
File: 0az5dc_hIjyFEv8ZQhfrdZjlOc4.roa (raw, json)
Hash identifier: 1AvPaADd/54E/+oO0WU0f/D4oWq1aY4Cg948/N3eZwI=
Subject key identifier: D1:AC:F9:75:CF:E1:22:3C:85:12:FF:19:42:17:EB:75:98:E5:39:CE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194D55861C239E357A818AE596C6F92EB69
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0az5dc_hIjyFEv8ZQhfrdZjlOc4.roa
Signing time: Wed 05 Feb 2025 09:02:06 +0000
ROA not before: Wed 05 Feb 2025 09:02:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26383
IP address blocks: 45.144.172.0/24 maxlen: 24
45.144.174.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
92.114.54.0/24 maxlen: 24
93.113.171.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
185.141.219.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
212.192.13.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
212.192.20.0/24 maxlen: 24
212.192.23.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 15:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:58:61:c2:39:e3:57:a8:18:ae:59:6c:6f:92:eb:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 5 09:02:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1acf975cfe1223c8512ff194217eb7598e539ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:56:54:6e:af:1b:89:99:2c:a6:16:81:82:70:
01:e8:61:9d:37:1b:71:cb:c2:4a:a7:0a:67:80:3a:
bc:ff:12:17:26:21:0d:2d:ca:83:76:c2:5e:cb:dc:
90:fc:c0:d0:62:31:c5:4b:11:7b:1a:b4:21:57:0b:
28:6b:e9:79:ba:cc:ce:ff:e3:c7:4e:e5:d5:f4:1b:
f8:f8:9a:2d:42:25:19:b0:43:0e:d6:31:87:68:4f:
d6:f2:00:db:a0:6b:89:11:53:58:24:8f:b8:5a:17:
b2:6b:da:ea:c9:38:6d:1c:6e:7f:ae:a8:ea:92:0c:
77:fb:78:f5:90:1e:45:e9:c8:c8:3f:c0:ed:b6:87:
d7:f5:e2:6f:3a:35:e6:7e:05:95:71:76:4a:e5:d3:
c9:41:55:05:13:bf:19:27:bf:19:d0:fb:02:cd:9d:
95:e4:00:65:c3:77:37:f9:25:96:8e:da:c7:1e:86:
45:68:d0:5a:80:ea:25:84:0d:77:cd:ea:b4:4c:2f:
89:07:9e:d2:04:36:ce:52:7b:03:4b:c7:ef:e3:1a:
e4:3a:de:20:92:f6:6b:09:eb:f3:df:68:84:f7:cc:
5c:dd:5a:de:db:79:f4:96:57:d6:7f:5b:8c:d8:94:
87:e1:12:3d:7a:6f:b1:21:2a:48:80:e2:d0:4b:52:
65:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AC:F9:75:CF:E1:22:3C:85:12:FF:19:42:17:EB:75:98:E5:39:CE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0az5dc_hIjyFEv8ZQhfrdZjlOc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.172.0/24
45.144.174.0/24
86.107.100.0/24
92.114.54.0/24
93.113.171.0/24
185.72.8.0/24
185.141.219.0/24
185.198.235.0/24
188.64.142.0/24
193.124.49.0/24
194.58.34.0/24
194.58.44.0-194.58.46.255
195.88.89.0/24
212.192.12.0/23
212.192.15.0/24
212.192.20.0/24
212.192.23.0/24
212.192.214.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:3d:d7:9d:b0:3d:a1:b3:61:7d:b5:09:6a:be:e7:b2:54:cf:
0c:7d:48:68:d7:39:01:39:f0:55:2c:88:5e:9b:00:15:7e:13:
0e:a6:29:6e:26:a9:90:e4:51:4b:7d:c3:f0:28:1c:ef:0a:cb:
03:a7:2f:d6:89:8f:4b:56:98:05:da:1b:df:ea:de:c2:b3:4a:
5f:8f:60:ae:76:f6:49:e2:cf:43:08:aa:70:3c:44:11:cb:c6:
ac:fb:8c:1b:04:40:06:e6:cf:6d:9d:1e:3e:5d:94:a7:ba:17:
14:4d:7b:8f:34:63:9a:d1:2b:81:7b:4f:00:46:41:e9:48:c3:
ed:c2:e7:0c:e6:38:b3:da:c4:43:b4:c4:49:1e:4d:be:93:00:
e8:b8:a4:b9:ed:2b:3f:26:07:b6:7c:17:d1:cc:78:2b:46:a0:
f9:e4:b5:ae:49:17:e3:6b:69:fa:80:22:7a:4b:ba:73:0c:c3:
5b:18:31:37:f5:1f:ed:d7:68:2d:e3:36:0c:96:b0:86:a5:72:
31:43:68:89:d7:76:15:06:95:cf:94:b7:94:60:3e:65:bd:4a:
94:82:65:04:ec:12:8e:12:e4:6a:5a:5d:5c:32:bd:d6:9b:4a:
f3:ac:b8:c8:4b:96:42:60:79:be:7e:ee:8a:30:24:50:fb:53:
09:20:d2:0d
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgISAZTVWGHCOeNXqBiuWWxvkutpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwMjA1MDkwMjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWFjZjk3NWNmZTEyMjNjODUxMmZmMTk0MjE3ZWI3NTk4ZTUzOWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VZUbq8biZksphaBgnAB6GGdNxtx
y8JKpwpngDq8/xIXJiENLcqDdsJey9yQ/MDQYjHFSxF7GrQhVwsoa+l5uszO/+PH
TuXV9Bv4+JotQiUZsEMO1jGHaE/W8gDboGuJEVNYJI+4Wheya9rqyThtHG5/rqjq
kgx3+3j1kB5F6cjIP8DttofX9eJvOjXmfgWVcXZK5dPJQVUFE78ZJ78Z0PsCzZ2V
5ABlw3c3+SWWjtrHHoZFaNBagOolhA13zeq0TC+JB57SBDbOUnsDS8fv4xrkOt4g
kvZrCevz32iE98xc3Vre23n0llfWf1uM2JSH4RI9em+xISpIgOLQS1JlOwIDAQAB
o4ICeDCCAnQwHQYDVR0OBBYEFNGs+XXP4SI8hRL/GUIX63WY5TnOMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvMGF6NWRjX2hJanlGRXY4WlFoZnJkWmpsT2M0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEAC2QrAME
AC2QrgMEAFZrZAMEAFxyNgMEAF1xqwMEALlICAMEALmN2wMEALnG6wMEALxAjgME
AMF8MQMEAMI6IjAMAwQCwjosAwQAwjouAwQAw1hZAwQB1MAMAwQA1MAPAwQA1MAU
AwQA1MAXAwQB1MDWMA0GCSqGSIb3DQEBCwUAA4IBAQA+PdedsD2hs2F9tQlqvuey
VM8MfUho1zkBOfBVLIhemwAVfhMOpiluJqmQ5FFLfcPwKBzvCssDpy/WiY9LVpgF
2hvf6t7Cs0pfj2CudvZJ4s9DCKpwPEQRy8as+4wbBEAG5s9tnR4+XZSnuhcUTXuP
NGOa0SuBe08ARkHpSMPtwucM5jiz2sRDtMRJHk2+kwDouKS57Ss/Jge2fBfRzHgr
RqD55LWuSRfja2n6gCJ6S7pzDMNbGDE39R/t12gt4zYMlrCGpXIxQ2iJ13YVBpXP
lLeUYD5lvUqUgmUE7BKOEuRqWl1cMr3Wm0rzrLjIS5ZCYHm+fu6KMCRQ+1MJININ
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:17 2025 by rpki-client