Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EoE8_5ZohFxRWz-aRLVFX-FATwE.roa
File: EoE8_5ZohFxRWz-aRLVFX-FATwE.roa (raw, json)
Hash identifier: dmfatSxpzyL9iCeJX7RtLMoxhA+yotEIfBihWDat+vs=
Subject key identifier: 12:81:3C:FF:96:68:84:5C:51:5B:3F:9A:44:B5:45:5F:E1:40:4F:01
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019428276E07FA26B69FF04CDE0E9B2D68A8
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EoE8_5ZohFxRWz-aRLVFX-FATwE.roa
Signing time: Thu 02 Jan 2025 17:54:20 +0000
ROA not before: Thu 02 Jan 2025 17:54:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214114
IP address blocks: 45.144.173.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 17:11:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:6e:07:fa:26:b6:9f:f0:4c:de:0e:9b:2d:68:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12813cff9668845c515b3f9a44b5455fe1404f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:0e:1e:1e:ef:52:9e:31:b1:4f:14:86:4b:
3c:ac:c9:07:39:7a:64:5e:b9:4c:da:e6:95:59:65:
c9:d9:30:39:cc:df:9a:7a:70:04:5f:a5:84:8a:f0:
59:f2:78:f2:0f:c9:3c:a9:21:5e:bb:af:cd:32:ae:
22:08:3b:1c:c8:36:11:c0:64:27:50:ce:b7:51:b9:
a1:1c:e8:43:f0:6d:b1:8c:a9:44:2b:8e:61:ed:b7:
60:3d:ce:9f:d4:e8:19:d2:b2:56:ee:6b:21:a5:39:
82:72:71:0b:4a:53:da:46:fd:87:96:1c:8e:57:35:
4d:04:d7:af:65:2f:89:d7:81:ba:8f:0c:af:6a:64:
40:4b:05:52:90:11:e2:e8:13:26:9b:78:35:c6:5c:
a6:b4:60:63:f8:4d:9a:ce:d6:db:52:fd:19:c3:40:
73:f6:9c:e0:e3:27:6f:9c:1d:2b:8a:52:c2:b2:74:
f7:34:f9:34:de:98:45:af:27:58:63:d9:20:ce:2d:
be:a3:83:fb:d1:a4:d4:6c:f8:47:90:e3:0d:95:5c:
8f:95:43:f7:2a:bd:7a:bb:fb:01:ae:eb:a1:b6:aa:
00:28:91:4b:6d:c1:e9:22:b9:0c:9c:06:12:2f:42:
05:4f:41:02:5e:8f:61:64:c1:d3:18:cd:e1:d4:e8:
e2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:81:3C:FF:96:68:84:5C:51:5B:3F:9A:44:B5:45:5F:E1:40:4F:01
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EoE8_5ZohFxRWz-aRLVFX-FATwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.173.0/24
46.102.237.0/24
188.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:e2:9d:4f:cf:bd:e5:d8:37:b0:12:32:d0:ea:82:ae:c8:01:
d3:b1:be:14:da:4e:94:22:e4:44:5e:5f:f7:3f:21:35:4d:4c:
7d:69:e5:f0:84:a0:e6:8b:c0:e8:13:27:b5:54:a2:c0:d4:46:
99:71:26:be:e2:20:38:f8:41:e1:a1:33:5e:3b:89:3c:46:bb:
73:d6:91:5a:ef:2c:91:1f:1b:7f:2b:72:d8:ba:d2:0a:64:f1:
c0:1c:e9:a4:1e:80:74:92:b5:51:85:d8:5c:7b:16:95:ab:e9:
b2:81:0f:52:05:25:64:88:f0:1f:20:30:78:bf:84:6e:10:d5:
ee:35:63:87:78:66:83:bd:b3:2d:ec:13:ff:75:ef:3e:9d:e4:
72:ba:2b:bd:0f:27:16:a0:49:a5:22:11:33:98:50:97:fb:35:
74:4f:72:d8:63:f9:d5:4a:9b:81:27:65:69:b0:f3:1b:8b:88:
d6:ad:99:fb:0e:85:9f:e3:fa:26:f3:93:6b:9d:22:63:4e:a6:
43:65:22:dd:2f:97:0c:e2:22:7f:12:ec:13:a1:b2:2c:45:e5:
1b:7a:48:1f:d5:06:0e:bd:bf:5b:b7:e6:1d:7f:5c:cb:2f:d0:
50:12:e4:9f:1a:2e:10:b2:e8:81:b3:e4:c8:69:72:e2:2b:90:
0d:ae:e6:c7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQoJ24H+ia2n/BM3g6bLWioMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwMTAyMTc1NDIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjgxM2NmZjk2Njg4NDVjNTE1YjNmOWE0NGI1NDU1ZmUxNDA0ZjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFwOHh7vUp4xsU8Uhks8rMkHOXpk
XrlM2uaVWWXJ2TA5zN+aenAEX6WEivBZ8njyD8k8qSFeu6/NMq4iCDscyDYRwGQn
UM63UbmhHOhD8G2xjKlEK45h7bdgPc6f1OgZ0rJW7mshpTmCcnELSlPaRv2HlhyO
VzVNBNevZS+J14G6jwyvamRASwVSkBHi6BMmm3g1xlymtGBj+E2aztbbUv0Zw0Bz
9pzg4ydvnB0rilLCsnT3NPk03phFrydYY9kgzi2+o4P70aTUbPhHkOMNlVyPlUP3
Kr16u/sBruuhtqoAKJFLbcHpIrkMnAYSL0IFT0ECXo9hZMHTGM3h1Oji8wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBKBPP+WaIRcUVs/mkS1RV/hQE8BMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvRW9FOF81Wm9oRnhSV3otYVJMVkZYLUZBVHdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZCtAwQA
LmbtAwQAvNBnMA0GCSqGSIb3DQEBCwUAA4IBAQB84p1Pz73l2DewEjLQ6oKuyAHT
sb4U2k6UIuREXl/3PyE1TUx9aeXwhKDmi8DoEye1VKLA1EaZcSa+4iA4+EHhoTNe
O4k8Rrtz1pFa7yyRHxt/K3LYutIKZPHAHOmkHoB0krVRhdhcexaVq+mygQ9SBSVk
iPAfIDB4v4RuENXuNWOHeGaDvbMt7BP/de8+neRyuiu9DycWoEmlIhEzmFCX+zV0
T3LYY/nVSpuBJ2VpsPMbi4jWrZn7DoWf4/om85NrnSJjTqZDZSLdL5cM4iJ/EuwT
obIsReUbekgf1QYOvb9bt+Ydf1zLL9BQEuSfGi4QsuiBs+TIaXLiK5ANrubH
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:19 2025 by rpki-client