Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/e5zIdylNuN1sn4ES3rSOkUI7yfM.roa
File: e5zIdylNuN1sn4ES3rSOkUI7yfM.roa (raw, json)
Hash identifier: gPqT1fDk7KHCkcdVYiIWGhucIQ+2Qj+1uTYW7JR7ebc=
Subject key identifier: 7B:9C:C8:77:29:4D:B8:DD:6C:9F:81:12:DE:B4:8E:91:42:3B:C9:F3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193C0F1590CBE6B11421BDF271989794B65
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/e5zIdylNuN1sn4ES3rSOkUI7yfM.roa
Signing time: Fri 13 Dec 2024 16:54:22 +0000
ROA not before: Fri 13 Dec 2024 16:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.212.119.0/24 maxlen: 24
193.228.139.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Dec 2024 07:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c0:f1:59:0c:be:6b:11:42:1b:df:27:19:89:79:4b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 13 16:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b9cc877294db8dd6c9f8112deb48e91423bc9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:43:44:40:3b:97:82:03:78:4f:40:16:99:d9:
1e:48:18:25:3c:ce:fd:1c:32:db:fb:02:24:72:ee:
26:7d:2e:b5:03:6b:12:c1:12:90:d6:6a:09:ce:06:
b3:8f:c8:3d:93:de:99:9b:47:e3:52:97:c1:8d:3f:
f5:ea:62:02:60:ef:af:3e:27:c3:e0:3a:55:f3:5c:
f7:18:a3:b8:8b:58:39:76:b8:aa:d6:a4:a4:86:6f:
ec:ec:55:a6:a1:37:7e:b0:d7:54:27:9f:87:40:d0:
06:f8:24:b1:46:3c:86:7a:42:03:8e:19:d5:8b:75:
65:5e:7c:a4:31:cf:ce:cf:53:39:a0:ed:a2:31:7d:
47:32:76:d7:48:01:d0:18:c5:62:9b:6f:9c:d4:05:
70:51:6d:51:97:b6:cf:f8:e2:7d:64:23:41:52:cd:
77:66:16:3e:ca:d2:17:da:e8:5a:0b:8d:38:08:3e:
e0:a8:cf:b2:b9:55:a1:ee:72:6c:19:6e:93:ae:72:
52:e2:6e:02:9d:ec:1b:12:7c:b0:76:10:85:e2:42:
43:74:f3:cc:89:48:77:a4:9c:41:03:57:21:fc:13:
bb:81:bd:d5:e4:f0:20:97:ed:55:ff:ff:90:af:cf:
83:5a:03:87:6a:4c:49:a9:11:b8:50:c1:9b:f1:05:
9d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9C:C8:77:29:4D:B8:DD:6C:9F:81:12:DE:B4:8E:91:42:3B:C9:F3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/e5zIdylNuN1sn4ES3rSOkUI7yfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
185.212.119.0/24
193.228.139.0/24
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:2c:4a:8f:d3:68:0f:d5:11:f5:d2:62:c3:d4:be:05:83:fa:
0e:27:9a:2d:a0:3f:5e:88:c8:ec:2a:30:4e:58:15:82:ae:ef:
f1:f9:02:e4:15:26:97:6a:8c:e7:fb:13:c6:92:d7:0a:4a:97:
34:19:c2:a9:b5:31:33:92:f5:3b:76:de:31:84:2a:7c:cf:96:
dd:b7:0b:7c:f8:99:c7:a9:40:c6:f7:c0:68:70:e3:33:7d:57:
91:fa:d0:fa:a3:29:46:d5:2f:91:a5:ab:7d:0a:c4:0f:ec:b4:
39:cc:4a:5a:81:34:56:8f:a9:2a:17:1c:7f:76:cb:9a:16:b2:
59:8c:87:51:ea:0e:99:41:c8:e2:0a:bf:46:25:ca:48:8e:95:
4f:ce:ce:fd:37:0d:a6:75:cf:22:85:1d:a8:94:d7:2b:f7:ba:
76:a5:5b:9f:13:03:ce:14:76:fc:31:57:0c:c0:56:fb:72:89:
21:75:e2:40:64:ef:f9:01:06:ba:4f:d1:23:e2:59:5c:f0:e2:
da:30:e0:2d:ff:c4:b2:aa:bf:89:d3:51:1d:fd:9c:76:21:32:
3c:53:c5:51:f2:5f:ff:ee:a3:2a:00:1a:58:f1:10:62:a3:5d:
1f:f7:09:42:90:ba:a9:84:df:d7:8b:41:5b:18:4d:b0:65:f8:
d5:f3:f6:a5
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZPA8VkMvmsRQhvfJxmJeUtlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQxMjEzMTY1NDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjljYzg3NzI5NGRiOGRkNmM5ZjgxMTJkZWI0OGU5MTQyM2JjOWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUNEQDuXggN4T0AWmdkeSBglPM79
HDLb+wIkcu4mfS61A2sSwRKQ1moJzgazj8g9k96Zm0fjUpfBjT/16mICYO+vPifD
4DpV81z3GKO4i1g5driq1qSkhm/s7FWmoTd+sNdUJ5+HQNAG+CSxRjyGekIDjhnV
i3VlXnykMc/Oz1M5oO2iMX1HMnbXSAHQGMVim2+c1AVwUW1Rl7bP+OJ9ZCNBUs13
ZhY+ytIX2uhaC404CD7gqM+yuVWh7nJsGW6TrnJS4m4CnewbEnywdhCF4kJDdPPM
iUh3pJxBA1ch/BO7gb3V5PAgl+1V//+Qr8+DWgOHakxJqRG4UMGb8QWd8QIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFHucyHcpTbjdbJ+BEt60jpFCO8nzMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvZTV6SWR5bE51TjFzbjRFUzNyU09rVUk3eWZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBLYe2AwQA
WSJqAwQAXXK3AwQAudR3AwQAweSLAwQAw1hZMA0GCSqGSIb3DQEBCwUAA4IBAQBb
LEqP02gP1RH10mLD1L4Fg/oOJ5otoD9eiMjsKjBOWBWCru/x+QLkFSaXaozn+xPG
ktcKSpc0GcKptTEzkvU7dt4xhCp8z5bdtwt8+JnHqUDG98BocOMzfVeR+tD6oylG
1S+Rpat9CsQP7LQ5zEpagTRWj6kqFxx/dsuaFrJZjIdR6g6ZQcjiCr9GJcpIjpVP
zs79Nw2mdc8ihR2olNcr97p2pVufEwPOFHb8MVcMwFb7cokhdeJAZO/5AQa6T9Ej
4llc8OLaMOAt/8Syqr+J01Ed/Zx2ITI8U8VR8l//7qMqABpY8RBio10f9wlCkLqp
hN/Xi0FbGE2wZfjV8/al
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:16 2025 by rpki-client