Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HaRFaNYeasRK0wKHAiCM3Q50wFw.roa
File: HaRFaNYeasRK0wKHAiCM3Q50wFw.roa (raw, json)
Hash identifier: cK3FHAcIbBCI5fnVaeafQk3ehSAdCijOK32XGzSO27k=
Subject key identifier: 1D:A4:45:68:D6:1E:6A:C4:4A:D3:02:87:02:20:8C:DD:0E:74:C0:5C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019428275F30AC6D19727EE60F46F9AD404A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HaRFaNYeasRK0wKHAiCM3Q50wFw.roa
Signing time: Thu 02 Jan 2025 17:54:16 +0000
ROA not before: Thu 02 Jan 2025 17:54:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 45.88.14.0/24 maxlen: 24
45.88.15.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
77.81.182.0/24 maxlen: 24
79.110.227.0/24 maxlen: 24
85.204.18.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.37.192.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
93.115.107.0/24 maxlen: 24
93.118.36.0/24 maxlen: 24
93.119.154.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
128.0.41.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
185.198.233.0/24 maxlen: 24
188.212.121.0/24 maxlen: 24
188.215.31.0/24 maxlen: 24
188.241.221.0/24 maxlen: 24
193.178.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 12:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:5f:30:ac:6d:19:72:7e:e6:0f:46:f9:ad:40:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1da44568d61e6ac44ad3028702208cdd0e74c05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:38:29:ab:f6:06:b0:96:06:c9:3d:6c:6a:
da:fc:c5:2a:29:24:52:19:ec:3d:f6:b6:9e:f8:87:
91:ff:4d:67:57:10:cc:3b:c2:db:76:53:c3:0a:79:
dc:79:f1:c7:1b:9c:d7:ef:3e:c3:11:03:2e:5a:b1:
56:f2:11:c1:d8:92:f0:7b:b6:1a:46:ff:45:65:32:
3c:fd:ee:85:44:17:74:d7:5b:fe:fd:41:21:47:02:
2a:74:2e:b4:bb:25:c3:6b:b7:00:2e:25:c8:43:7a:
df:fd:a7:29:5e:46:75:06:37:d6:0c:5f:48:b7:71:
59:8e:9d:90:df:2f:1e:87:d8:bb:2d:90:4f:eb:64:
37:eb:aa:2f:21:3e:34:78:7c:40:44:9e:e4:ae:e0:
9e:d6:b2:7e:b8:d7:1d:cf:67:6d:3a:76:64:a7:3d:
1c:c0:ba:be:a9:91:7e:c6:43:98:c6:3e:88:d2:61:
0e:ec:70:f1:03:7b:ec:d1:7f:ce:5b:cf:15:bf:53:
b9:1a:cd:61:b0:f1:49:82:49:93:83:d0:13:61:e2:
af:df:91:3c:33:e9:b4:ef:36:bd:5c:d8:77:83:60:
37:bc:d1:00:55:3d:4f:14:aa:fc:e1:65:95:d2:3d:
a0:78:99:2b:c8:65:16:38:96:4e:21:16:4a:b2:25:
12:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A4:45:68:D6:1E:6A:C4:4A:D3:02:87:02:20:8C:DD:0E:74:C0:5C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HaRFaNYeasRK0wKHAiCM3Q50wFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.14.0/23
62.192.152.0/24
77.81.182.0/24
79.110.227.0/24
85.204.18.0/24
89.34.106.0/24
89.35.129.0/24
89.37.192.0/24
89.40.36.0/24
89.40.215.0/24
89.45.35.0/24
89.47.36.0/24
93.115.106.0/23
93.118.36.0/24
93.119.154.0/24
94.198.171.0/24
128.0.41.0/24
176.223.188.0/24
185.198.233.0/24
188.212.121.0/24
188.215.31.0/24
188.241.221.0/24
193.178.134.0/24
Signature Algorithm: sha256WithRSAEncryption
70:c6:58:94:af:1c:0d:96:9a:30:e6:8c:c7:5c:12:c0:bb:90:
48:b2:b9:80:3a:fc:02:2b:92:80:06:9e:9b:75:85:3d:b0:3f:
b6:5e:4c:c6:af:52:67:54:a0:79:33:b9:60:4a:3e:be:d7:82:
ed:96:b0:88:7b:17:9f:c9:ec:43:e4:ee:7d:4e:ca:a4:69:37:
6b:8e:50:4b:be:6a:69:5f:50:e4:05:6a:74:c1:8b:50:55:63:
2a:64:8a:16:14:2c:8d:77:69:48:1a:6c:8f:db:c5:9f:15:41:
aa:e7:42:a1:22:54:09:cb:50:af:13:fb:f6:2e:75:f5:a2:38:
be:48:77:83:2f:2a:c5:75:f3:61:e6:01:21:cb:e8:36:7f:21:
6b:1e:6b:09:9d:ea:93:73:9e:7a:16:e9:86:53:a0:8c:4f:f4:
b3:9f:c8:83:5d:b5:23:06:39:0f:e5:8d:32:12:bb:bc:65:14:
bc:5f:db:3f:67:b6:15:95:11:e8:f8:d4:22:71:d0:ee:99:60:
31:48:c9:ca:59:3e:60:2a:97:15:e4:bc:20:82:4a:6f:44:c0:
ad:43:5b:4b:b2:36:1f:62:eb:4b:cb:8c:07:50:88:f5:b7:f1:
99:4f:12:8d:6e:46:70:62:fe:b8:20:49:f5:89:23:b4:07:3a:
10:d5:ff:71
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgISAZQoJ18wrG0Zcn7mD0b5rUBKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwMTAyMTc1NDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGE0NDU2OGQ2MWU2YWM0NGFkMzAyODcwMjIwOGNkZDBlNzRjMDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLA4Kav2BrCWBsk9bGra/MUqKSRS
Gew99rae+IeR/01nVxDMO8LbdlPDCnncefHHG5zX7z7DEQMuWrFW8hHB2JLwe7Ya
Rv9FZTI8/e6FRBd011v+/UEhRwIqdC60uyXDa7cALiXIQ3rf/acpXkZ1BjfWDF9I
t3FZjp2Q3y8eh9i7LZBP62Q366ovIT40eHxARJ7kruCe1rJ+uNcdz2dtOnZkpz0c
wLq+qZF+xkOYxj6I0mEO7HDxA3vs0X/OW88Vv1O5Gs1hsPFJgkmTg9ATYeKv35E8
M+m07za9XNh3g2A3vNEAVT1PFKr84WWV0j2geJkryGUWOJZOIRZKsiUSLwIDAQAB
o4ICkjCCAo4wHQYDVR0OBBYEFB2kRWjWHmrEStMChwIgjN0OdMBcMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvSGFSRmFOWWVhc1JLMHdLSEFpQ00zUTUwd0Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBkQQCAAEwgYoDBAEt
WA4DBAA+wJgDBABNUbYDBABPbuMDBABVzBIDBABZImoDBABZI4EDBABZJcADBABZ
KCQDBABZKNcDBABZLSMDBABZLyQDBAFdc2oDBABddiQDBABdd5oDBABexqsDBACA
ACkDBACw37wDBAC5xukDBAC81HkDBAC81x8DBAC88d0DBADBsoYwDQYJKoZIhvcN
AQELBQADggEBAHDGWJSvHA2WmjDmjMdcEsC7kEiyuYA6/AIrkoAGnpt1hT2wP7Ze
TMavUmdUoHkzuWBKPr7Xgu2WsIh7F5/J7EPk7n1OyqRpN2uOUEu+amlfUOQFanTB
i1BVYypkihYULI13aUgabI/bxZ8VQarnQqEiVAnLUK8T+/YudfWiOL5Id4MvKsV1
82HmASHL6DZ/IWseawmd6pNznnoW6YZToIxP9LOfyINdtSMGOQ/ljTISu7xlFLxf
2z9nthWVEej41CJx0O6ZYDFIycpZPmAqlxXkvCCCSm9EwK1DW0uyNh9i60vLjAdQ
iPW38ZlPEo1uRnBi/rggSfWJI7QHOhDV/3E=
-----END CERTIFICATE-----
Generated at Wed Feb 5 12:56:29 2025 by rpki-client