Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lt4NVU2ReBA1mNb51oMr6hNMXAk.roa
File: lt4NVU2ReBA1mNb51oMr6hNMXAk.roa (raw, json)
Hash identifier: 9Lje6gZeQtgdkn+i1CaZwoBPUr8f7FYTIRayFYDkSSI=
Subject key identifier: 96:DE:0D:55:4D:91:78:10:35:98:D6:F9:D6:83:2B:EA:13:4C:5C:09
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019428277545D3242A08BEDCAC8A2612E31F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lt4NVU2ReBA1mNb51oMr6hNMXAk.roa
Signing time: Thu 02 Jan 2025 17:54:21 +0000
ROA not before: Thu 02 Jan 2025 17:54:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215433
IP address blocks: 77.81.101.0/24 maxlen: 24
89.37.185.0/24 maxlen: 24
89.44.76.0/24 maxlen: 24
93.119.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 12:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:75:45:d3:24:2a:08:be:dc:ac:8a:26:12:e3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96de0d554d9178103598d6f9d6832bea134c5c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:08:3c:8f:89:f4:02:5a:83:26:62:7c:1f:
e5:17:4b:f3:ff:22:8d:b4:cc:08:6c:97:66:f7:1b:
cb:2e:84:57:08:3e:e8:e0:d4:d0:f2:9b:16:c1:6c:
ae:b4:83:4c:da:5d:f0:83:0f:c7:5f:7f:40:15:99:
8e:ad:c9:41:3f:a5:65:45:20:a3:83:4b:86:a3:13:
51:69:65:9f:a1:7f:e4:6a:70:1e:47:18:d4:f5:7f:
98:ee:be:17:ed:0c:86:1c:09:77:51:b5:44:30:ef:
a9:89:0b:28:03:54:24:6b:a7:70:1d:d2:b7:02:03:
de:de:30:01:af:0d:06:1b:f9:20:c1:19:b0:3b:08:
d1:55:a2:43:01:f6:36:a0:bd:c7:06:2e:d1:46:2b:
34:e9:30:9a:e2:82:b7:4a:4c:47:37:88:7a:a1:2f:
60:61:31:36:e0:53:e8:fc:4c:2c:11:f3:86:64:d1:
c4:c0:bc:95:e2:21:d8:a5:37:45:c5:fa:bb:c5:68:
b3:7a:a6:48:8d:ef:7e:01:cf:32:bb:44:8d:b6:66:
eb:00:bd:28:6a:3c:fa:45:7b:04:90:2f:95:00:2a:
25:c7:0d:4f:5d:a6:8a:e4:bb:7c:c2:31:ca:1e:4a:
c7:b9:d1:bd:6f:cc:45:88:35:41:ec:db:cb:e1:ec:
22:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DE:0D:55:4D:91:78:10:35:98:D6:F9:D6:83:2B:EA:13:4C:5C:09
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lt4NVU2ReBA1mNb51oMr6hNMXAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.101.0/24
89.37.185.0/24
89.44.76.0/24
93.119.195.0/24
Signature Algorithm: sha256WithRSAEncryption
28:87:c0:cc:1f:b6:cd:20:c8:a2:35:f1:0e:9d:77:45:c1:b4:
0b:36:4b:70:a7:31:b5:1d:bc:8a:bc:4e:dd:e7:17:5b:52:6f:
ff:2d:95:79:42:76:46:77:82:6a:5c:e3:fc:ae:e1:14:3e:5f:
2d:75:f3:8b:f6:a6:c2:6c:9a:3c:16:58:d9:fb:f5:ec:57:e5:
99:5e:d4:ab:2c:e4:ba:f1:a2:24:4f:7f:56:47:3e:c9:d7:fe:
4a:25:90:3c:e6:79:89:e5:13:74:ff:d6:86:8b:f6:61:08:5d:
43:6d:14:de:6d:1f:8f:95:c7:38:14:07:cf:90:e8:26:c8:75:
b3:54:37:bb:05:e1:2c:1e:e5:bf:88:af:41:eb:65:a2:e7:08:
a7:88:f0:e5:9d:8c:8d:b8:b5:bb:dd:70:35:db:ec:78:7c:a0:
3f:b7:f8:c4:db:ee:99:ef:73:54:23:66:7f:68:77:fb:d1:61:
02:71:93:b9:f9:29:86:a1:eb:78:b6:ec:d4:ee:4b:28:45:27:
f0:4f:f8:48:6f:87:af:e0:e4:b0:e2:d9:af:c9:aa:c5:6e:28:
23:47:75:c2:77:06:e0:5c:6a:a3:d4:7c:a4:32:90:70:52:e2:
cb:11:8b:2d:75:b9:cc:c8:29:ea:57:51:de:3f:42:b6:71:ba:
3a:88:4c:1b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQoJ3VF0yQqCL7crIomEuMfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwMTAyMTc1NDIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmRlMGQ1NTRkOTE3ODEwMzU5OGQ2ZjlkNjgzMmJlYTEzNGM1YzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWIIPI+J9AJagyZifB/lF0vz/yKN
tMwIbJdm9xvLLoRXCD7o4NTQ8psWwWyutINM2l3wgw/HX39AFZmOrclBP6VlRSCj
g0uGoxNRaWWfoX/kanAeRxjU9X+Y7r4X7QyGHAl3UbVEMO+piQsoA1Qka6dwHdK3
AgPe3jABrw0GG/kgwRmwOwjRVaJDAfY2oL3HBi7RRis06TCa4oK3SkxHN4h6oS9g
YTE24FPo/EwsEfOGZNHEwLyV4iHYpTdFxfq7xWizeqZIje9+Ac8yu0SNtmbrAL0o
ajz6RXsEkC+VAColxw1PXaaK5Lt8wjHKHkrHudG9b8xFiDVB7NvL4ewi3wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJbeDVVNkXgQNZjW+daDK+oTTFwJMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvbHQ0TlZVMlJlQkExbU5iNTFvTXI2aE5NWEFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATVFlAwQA
WSW5AwQAWSxMAwQAXXfDMA0GCSqGSIb3DQEBCwUAA4IBAQAoh8DMH7bNIMiiNfEO
nXdFwbQLNktwpzG1HbyKvE7d5xdbUm//LZV5QnZGd4JqXOP8ruEUPl8tdfOL9qbC
bJo8FljZ+/XsV+WZXtSrLOS68aIkT39WRz7J1/5KJZA85nmJ5RN0/9aGi/ZhCF1D
bRTebR+Plcc4FAfPkOgmyHWzVDe7BeEsHuW/iK9B62Wi5winiPDlnYyNuLW73XA1
2+x4fKA/t/jE2+6Z73NUI2Z/aHf70WECcZO5+SmGoet4tuzU7ksoRSfwT/hIb4ev
4OSw4tmvyarFbigjR3XCdwbgXGqj1HykMpBwUuLLEYstdbnMyCnqV1HeP0K2cbo6
iEwb
-----END CERTIFICATE-----
Generated at Wed Feb 5 12:46:43 2025 by rpki-client