Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XobK3kv4kNlvQKS8V_eZhaf-cyw.roa
File: XobK3kv4kNlvQKS8V_eZhaf-cyw.roa (raw, json)
Hash identifier: YkSMzgaC2Lf/tqJVZg6FRDjNDy9OuSxw7lxwOlZ4rkE=
Subject key identifier: 5E:86:CA:DE:4B:F8:90:D9:6F:40:A4:BC:57:F7:99:85:A7:FE:73:2C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01963E7310FC66C2F64B55B867E2A72BEE5D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XobK3kv4kNlvQKS8V_eZhaf-cyw.roa
Signing time: Wed 16 Apr 2025 11:54:10 +0000
ROA not before: Wed 16 Apr 2025 11:54:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
93.115.203.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
185.34.101.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 09:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:73:10:fc:66:c2:f6:4b:55:b8:67:e2:a7:2b:ee:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 16 11:54:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e86cade4bf890d96f40a4bc57f79985a7fe732c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1c:5f:f0:83:9c:8f:20:80:e0:03:fd:d4:90:
83:22:5c:74:50:61:45:0a:99:79:11:87:d0:ee:4d:
b3:57:53:04:98:c5:cc:8d:43:f1:c9:0f:40:39:61:
87:79:9e:81:6d:3b:87:80:b5:46:6b:02:ac:8a:38:
55:f4:f0:68:38:11:95:7a:76:b4:de:a7:ea:5a:3a:
4f:88:65:6f:eb:ab:af:fd:33:28:9f:8d:5b:45:98:
1a:9e:47:90:ec:9b:b6:fe:21:6e:16:7a:8f:ec:3b:
cf:e1:30:62:d1:b4:f1:a9:5d:c3:f2:d5:19:a1:17:
6e:61:f1:fb:d1:f7:7b:19:69:f4:db:da:95:a2:42:
14:70:23:be:d1:7a:76:fa:f7:8a:66:98:ea:bb:7c:
4a:86:91:56:be:49:b2:cf:ee:14:21:21:58:91:a1:
4a:88:8d:5d:7c:4a:d9:16:16:3d:f9:62:da:2a:14:
ab:fb:7f:6b:2d:7c:bd:4a:40:a8:65:f8:8d:7b:67:
e7:52:cc:aa:68:7e:3c:94:4b:86:41:71:9b:6e:78:
76:f4:75:31:41:a5:13:6f:73:06:e5:64:59:43:9d:
7f:74:70:9b:b8:0e:10:26:7a:ea:27:de:fe:8c:6a:
3a:d8:9a:d8:31:8b:b8:99:32:55:39:cb:60:91:ae:
5e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:86:CA:DE:4B:F8:90:D9:6F:40:A4:BC:57:F7:99:85:A7:FE:73:2C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XobK3kv4kNlvQKS8V_eZhaf-cyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
46.102.237.0/24
89.34.106.0/24
93.114.183.0/24
93.115.106.0/24
93.115.203.0/24
94.177.106.0/24
185.34.101.0/24
194.85.251.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:fb:81:1a:a1:5c:4f:28:4b:85:8b:35:61:61:6a:c6:ef:91:
9d:1d:56:f0:25:1a:1f:52:be:67:6e:24:a4:02:c5:e0:4c:1b:
6d:b0:b3:5b:e6:f5:12:05:82:ba:a3:2b:c3:07:96:4d:5c:32:
5c:a5:b4:e5:55:13:aa:b0:9f:9c:10:d8:e4:40:ab:64:15:e3:
f6:49:fe:f4:85:e8:48:8b:d5:ef:7d:f2:9e:e9:62:35:7b:cf:
1c:4a:d0:1f:0f:c0:ec:47:85:d0:6f:e5:d4:fc:06:5d:4a:17:
92:19:18:a7:1f:68:67:af:ee:de:dd:60:3e:d5:41:00:82:e0:
15:5a:9c:4e:55:5d:7d:cc:93:7e:20:8a:74:13:08:35:fb:70:
a3:ef:cf:3b:32:fc:26:2b:2d:dc:14:27:39:11:77:ba:11:65:
86:9c:7f:20:82:74:46:81:8c:31:38:bc:bb:24:c5:77:fe:8e:
05:f0:a2:63:20:44:5d:ca:ae:58:3f:58:36:a2:41:07:d8:93:
ea:af:6f:63:a5:d6:54:d4:80:26:27:cd:4b:69:d2:c1:9d:0e:
4d:9c:5d:6c:f2:e9:a0:7e:2e:bf:17:9b:35:ad:71:cf:7e:78:
86:ac:e7:30:e5:67:1b:09:9e:d3:46:39:5b:9a:22:10:26:fe:
dc:98:72:3b
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZY+cxD8ZsL2S1W4Z+KnK+5dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwNDE2MTE1NDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTg2Y2FkZTRiZjg5MGQ5NmY0MGE0YmM1N2Y3OTk4NWE3ZmU3MzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBxf8IOcjyCA4AP91JCDIlx0UGFF
Cpl5EYfQ7k2zV1MEmMXMjUPxyQ9AOWGHeZ6BbTuHgLVGawKsijhV9PBoOBGVena0
3qfqWjpPiGVv66uv/TMon41bRZgankeQ7Ju2/iFuFnqP7DvP4TBi0bTxqV3D8tUZ
oRduYfH70fd7GWn029qVokIUcCO+0Xp2+veKZpjqu3xKhpFWvkmyz+4UISFYkaFK
iI1dfErZFhY9+WLaKhSr+39rLXy9SkCoZfiNe2fnUsyqaH48lEuGQXGbbnh29HUx
QaUTb3MG5WRZQ51/dHCbuA4QJnrqJ97+jGo62JrYMYu4mTJVOctgka5e3QIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFF6Gyt5L+JDZb0CkvFf3mYWn/nMsMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvWG9iSzNrdjRrTmx2UUtTOFZfZVpoYWYtY3l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQBLYe2AwQA
LmbtAwQAWSJqAwQAXXK3AwQAXXNqAwQAXXPLAwQAXrFqAwQAuSJlAwQAwlX7MA0G
CSqGSIb3DQEBCwUAA4IBAQAa+4EaoVxPKEuFizVhYWrG75GdHVbwJRofUr5nbiSk
AsXgTBttsLNb5vUSBYK6oyvDB5ZNXDJcpbTlVROqsJ+cENjkQKtkFeP2Sf70hehI
i9XvffKe6WI1e88cStAfD8DsR4XQb+XU/AZdSheSGRinH2hnr+7e3WA+1UEAguAV
WpxOVV19zJN+IIp0Ewg1+3Cj7887MvwmKy3cFCc5EXe6EWWGnH8ggnRGgYwxOLy7
JMV3/o4F8KJjIERdyq5YP1g2okEH2JPqr29jpdZU1IAmJ81LadLBnQ5NnF1s8umg
fi6/F5s1rXHPfniGrOcw5WcbCZ7TRjlbmiIQJv7cmHI7
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:34 2025 by rpki-client