Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hrs5IMYzwniFBuiSb2aP605VVWY.roa
File: hrs5IMYzwniFBuiSb2aP605VVWY.roa (raw, json)
Hash identifier: JqNAkjxOTvOqMwvTG0ZT3LTzNOCzjERYRBUI1Yxr/cQ=
Subject key identifier: 86:BB:39:20:C6:33:C2:78:85:06:E8:92:6F:66:8F:EB:4E:55:55:66
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01943351B021C5F64792AA3F54A07D95813A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hrs5IMYzwniFBuiSb2aP605VVWY.roa
Signing time: Sat 04 Jan 2025 21:56:19 +0000
ROA not before: Sat 04 Jan 2025 21:56:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26383
IP address blocks: 45.144.172.0/24 maxlen: 24
45.144.174.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
92.114.54.0/24 maxlen: 24
93.113.171.0/24 maxlen: 24
185.141.219.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
188.208.110.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
212.192.13.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
212.192.20.0/24 maxlen: 24
212.192.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Jan 2025 11:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:33:51:b0:21:c5:f6:47:92:aa:3f:54:a0:7d:95:81:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 4 21:56:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86bb3920c633c2788506e8926f668feb4e555566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:06:43:d2:d6:ad:bf:ad:38:50:1f:6f:ba:a0:
2c:e2:37:84:4a:8d:ed:8e:ae:bc:f5:0b:9b:15:f7:
2f:7f:73:ea:b0:17:91:51:28:d4:ec:c7:4a:33:bb:
fb:d9:1a:2f:85:61:5d:3a:1d:9d:60:ed:09:72:be:
bd:84:f7:61:e4:45:a4:80:4a:11:96:81:99:83:27:
68:4a:1d:51:82:e5:88:89:44:db:da:42:13:9a:2b:
64:6f:df:b0:bf:ff:5a:b3:88:6e:39:5c:eb:c0:1f:
e6:75:eb:1e:53:6f:da:98:16:ef:c6:52:c2:64:92:
35:ef:95:29:db:d2:6d:20:4f:1d:a3:33:a5:f7:ee:
3b:ef:b0:a2:75:3f:03:6d:a2:84:a9:6f:f4:ac:56:
24:82:91:1c:45:32:f0:86:f2:cb:4d:a0:57:98:88:
d8:98:7d:21:6c:7e:0b:58:da:9a:ad:0c:78:88:06:
4c:76:c0:c7:32:a4:8a:9c:36:4f:ed:86:e5:01:fb:
6c:37:2c:1a:8c:79:61:fe:b9:0a:7f:5e:42:58:28:
88:ee:4a:5f:47:4c:c1:77:14:3a:a6:6b:c0:99:64:
ad:18:96:a1:ab:53:92:96:70:a5:5c:86:8c:69:c9:
57:cf:96:bf:ce:6a:1f:18:e4:95:20:a9:ce:8d:34:
31:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BB:39:20:C6:33:C2:78:85:06:E8:92:6F:66:8F:EB:4E:55:55:66
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hrs5IMYzwniFBuiSb2aP605VVWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.172.0/24
45.144.174.0/24
86.107.100.0/24
92.114.54.0/24
93.113.171.0/24
185.141.219.0/24
185.198.235.0/24
188.208.110.0/24
212.192.12.0/23
212.192.15.0/24
212.192.20.0/24
212.192.23.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:7d:4c:b5:ed:e4:b2:9b:20:a7:a5:1d:ae:c3:e8:bd:97:cd:
d2:59:76:e5:94:4c:6c:dd:aa:39:d0:47:39:d8:5c:4c:55:f7:
61:e0:e5:75:d6:36:e1:0b:04:4a:ce:66:85:f4:9e:23:23:b6:
f3:87:52:96:a4:2d:c3:b6:85:0a:9c:de:13:13:41:50:8e:8d:
8d:02:c4:e5:00:ea:8d:44:a8:4a:18:37:e4:b3:b8:96:19:34:
a6:77:2d:9a:39:1c:77:29:f3:37:2d:7f:16:cd:78:2c:07:12:
85:9e:72:f3:eb:03:5d:11:89:f8:1c:fe:06:c5:91:6f:d5:2e:
be:d8:09:9c:71:d7:6b:f8:fa:2c:77:e3:91:11:fe:fc:90:e2:
d2:6b:16:d9:82:0e:b9:07:16:fe:0c:d8:d4:38:a7:c2:06:ae:
85:bb:70:85:e2:7e:91:52:8e:83:56:cc:3b:58:e2:60:9c:1d:
06:e3:d1:35:e2:5e:1f:c8:9c:dd:46:fe:74:eb:2c:11:dc:20:
17:41:8f:b2:ce:dc:d2:32:7e:5e:5c:e6:cd:19:3f:bf:58:45:
92:5f:cf:a1:64:ed:b3:a7:78:05:73:7a:3a:54:75:f2:b3:43:
cc:6d:24:8c:72:54:7b:34:c3:ac:8d:b2:ee:c3:49:28:15:b2:
e2:77:98:14
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZQzUbAhxfZHkqo/VKB9lYE6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwMTA0MjE1NjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmJiMzkyMGM2MzNjMjc4ODUwNmU4OTI2ZjY2OGZlYjRlNTU1NTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AZD0tatv604UB9vuqAs4jeESo3t
jq689QubFfcvf3PqsBeRUSjU7MdKM7v72RovhWFdOh2dYO0Jcr69hPdh5EWkgEoR
loGZgydoSh1RguWIiUTb2kITmitkb9+wv/9as4huOVzrwB/mdeseU2/amBbvxlLC
ZJI175Up29JtIE8dozOl9+4777CidT8DbaKEqW/0rFYkgpEcRTLwhvLLTaBXmIjY
mH0hbH4LWNqarQx4iAZMdsDHMqSKnDZP7YblAftsNywajHlh/rkKf15CWCiI7kpf
R0zBdxQ6pmvAmWStGJahq1OSlnClXIaMaclXz5a/zmofGOSVIKnOjTQx6QIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFIa7OSDGM8J4hQbokm9mj+tOVVVmMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvaHJzNUlNWXp3bmlGQnVpU2IyYVA2MDVWVldZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQALZCsAwQA
LZCuAwQAVmtkAwQAXHI2AwQAXXGrAwQAuY3bAwQAucbrAwQAvNBuAwQB1MAMAwQA
1MAPAwQA1MAUAwQA1MAXMA0GCSqGSIb3DQEBCwUAA4IBAQBKfUy17eSymyCnpR2u
w+i9l83SWXbllExs3ao50Ec52FxMVfdh4OV11jbhCwRKzmaF9J4jI7bzh1KWpC3D
toUKnN4TE0FQjo2NAsTlAOqNRKhKGDfks7iWGTSmdy2aORx3KfM3LX8WzXgsBxKF
nnLz6wNdEYn4HP4GxZFv1S6+2Amccddr+Posd+OREf78kOLSaxbZgg65Bxb+DNjU
OKfCBq6Fu3CF4n6RUo6DVsw7WOJgnB0G49E14l4fyJzdRv506ywR3CAXQY+yztzS
Mn5eXObNGT+/WEWSX8+hZO2zp3gFc3o6VHXys0PMbSSMclR7NMOsjbLuw0koFbLi
d5gU
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:19 2025 by rpki-client