Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/74s0bfFnfgu2D-NRJ5d0biYpN0E.roa
File: 74s0bfFnfgu2D-NRJ5d0biYpN0E.roa (raw, json)
Hash identifier: BFtZwATPL2ggEdUx834+Tt3WQbUSpcWbzW7gi/lM/9Q=
Subject key identifier: EF:8B:34:6D:F1:67:7E:0B:B6:0F:E3:51:27:97:74:6E:26:29:37:41
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019422F8D058DB175FF9BE8EFDE5EC3DA320
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/74s0bfFnfgu2D-NRJ5d0biYpN0E.roa
Signing time: Wed 01 Jan 2025 17:45:19 +0000
ROA not before: Wed 01 Jan 2025 17:45:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214114
IP address blocks: 45.144.173.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:f8:d0:58:db:17:5f:f9:be:8e:fd:e5:ec:3d:a3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 17:45:19 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef8b346df1677e0bb60fe3512797746e26293741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ee:63:b0:c0:fc:db:de:1d:ec:30:82:a8:4b:
46:c4:56:6f:d4:ee:af:8b:27:93:0b:9a:48:1b:4e:
11:7f:84:08:0f:51:c2:a9:59:ac:60:2c:37:10:b9:
80:0e:cf:7a:f4:f2:ec:83:8e:9f:f8:0d:6d:da:d5:
9e:67:2f:fe:5c:28:ce:0d:a5:da:88:bb:6f:9a:e1:
c9:a4:c6:1c:35:84:9b:15:2a:ba:6e:c1:43:f8:7e:
de:93:41:e1:fe:01:15:08:b8:a4:93:76:8b:9a:24:
fd:7c:f2:0e:f4:bf:d6:88:c7:16:b0:0d:80:05:dc:
ed:08:6f:10:af:32:7f:3a:08:3f:6a:a5:ee:1f:de:
16:d1:62:48:c6:aa:b6:fe:be:dc:94:de:7c:38:ba:
82:01:ca:45:e2:db:10:9e:ba:5a:ba:00:c8:89:7a:
51:a7:e3:6b:b0:b6:8a:f7:f9:85:0e:fe:bd:89:41:
9e:93:6e:07:a3:30:66:c6:01:b3:d3:05:39:02:c2:
b1:31:5a:ea:25:06:9b:79:db:28:50:24:9b:41:42:
74:54:d7:10:cc:93:7c:ca:44:ee:ca:46:dd:be:6a:
4c:24:41:e9:83:cb:d9:d9:60:46:18:40:d3:49:77:
39:52:ed:fa:c3:ae:63:db:34:8f:26:4f:f9:09:d5:
69:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8B:34:6D:F1:67:7E:0B:B6:0F:E3:51:27:97:74:6E:26:29:37:41
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/74s0bfFnfgu2D-NRJ5d0biYpN0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.173.0/24
46.102.237.0/24
188.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
44:fd:a8:fa:2f:cf:9d:16:4f:8c:e5:19:58:d9:d7:97:e2:1b:
cf:57:f7:d7:25:c2:fe:09:19:f8:91:76:9c:a9:53:b1:bb:d9:
a5:79:e1:ad:51:df:20:e6:fc:03:53:1b:30:55:7d:ac:b7:a8:
6e:03:01:1d:d7:e2:5e:94:22:b1:f6:5c:71:6b:4f:4f:fa:22:
9f:f1:99:45:d7:f6:2f:02:d5:9d:d7:7a:0c:53:15:0d:95:e0:
ae:14:fd:d2:13:62:64:7c:a1:4b:1a:f8:d1:05:89:7c:07:15:
8c:54:34:0e:14:a9:01:1a:2c:c9:0b:d5:c1:b8:b2:44:2f:20:
d8:43:c8:14:05:23:f7:26:89:51:4c:95:c1:d6:c4:65:61:ac:
04:09:e5:b9:8b:de:8d:e7:0c:f0:3b:75:71:8a:28:97:03:a7:
30:7c:47:6e:75:a5:5b:b7:ae:83:0b:ff:6a:d6:ad:1d:de:74:
53:f9:7a:63:e1:4a:39:b7:82:47:46:78:b9:5e:0c:d8:81:f9:
fb:58:9d:18:f2:eb:b1:e6:f3:45:14:9e:2f:f3:c0:87:b4:a5:
ba:97:57:f4:f4:5c:45:94:95:61:ec:59:b2:6a:d3:ba:6b:50:
fb:b0:c7:08:f1:18:59:59:71:38:b8:3c:9d:c3:3c:d5:fc:45:
2a:c9:05:94
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQi+NBY2xdf+b6O/eXsPaMgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwMTAxMTc0NTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjhiMzQ2ZGYxNjc3ZTBiYjYwZmUzNTEyNzk3NzQ2ZTI2MjkzNzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu5jsMD8294d7DCCqEtGxFZv1O6v
iyeTC5pIG04Rf4QID1HCqVmsYCw3ELmADs969PLsg46f+A1t2tWeZy/+XCjODaXa
iLtvmuHJpMYcNYSbFSq6bsFD+H7ek0Hh/gEVCLikk3aLmiT9fPIO9L/WiMcWsA2A
BdztCG8QrzJ/Ogg/aqXuH94W0WJIxqq2/r7clN58OLqCAcpF4tsQnrpaugDIiXpR
p+NrsLaK9/mFDv69iUGek24HozBmxgGz0wU5AsKxMVrqJQabedsoUCSbQUJ0VNcQ
zJN8ykTuykbdvmpMJEHpg8vZ2WBGGEDTSXc5Uu36w65j2zSPJk/5CdVpWwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFO+LNG3xZ34Ltg/jUSeXdG4mKTdBMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvNzRzMGJmRm5mZ3UyRC1OUko1ZDBiaVlwTjBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZCtAwQA
LmbtAwQAvNBnMA0GCSqGSIb3DQEBCwUAA4IBAQBE/aj6L8+dFk+M5RlY2deX4hvP
V/fXJcL+CRn4kXacqVOxu9mleeGtUd8g5vwDUxswVX2st6huAwEd1+JelCKx9lxx
a09P+iKf8ZlF1/YvAtWd13oMUxUNleCuFP3SE2JkfKFLGvjRBYl8BxWMVDQOFKkB
GizJC9XBuLJELyDYQ8gUBSP3JolRTJXB1sRlYawECeW5i96N5wzwO3VxiiiXA6cw
fEdudaVbt66DC/9q1q0d3nRT+Xpj4Uo5t4JHRni5XgzYgfn7WJ0Y8uux5vNFFJ4v
88CHtKW6l1f09FxFlJVh7FmyatO6a1D7sMcI8RhZWXE4uDydwzzV/EUqyQWU
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:22 2025 by rpki-client