Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vKm15glWqqIz-NOJc4p6Abr-qIc.roa
File: vKm15glWqqIz-NOJc4p6Abr-qIc.roa (raw, json)
Hash identifier: noIVsfbUhF3CA7J/tby6crGjwDUXGjLH3zaYU9AVo6Q=
Subject key identifier: BC:A9:B5:E6:09:56:AA:A2:33:F8:D3:89:73:8A:7A:01:BA:FE:A8:87
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193F2A9F7B2B148D81019F87280891327D1
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vKm15glWqqIz-NOJc4p6Abr-qIc.roa
Signing time: Mon 23 Dec 2024 08:37:25 +0000
ROA not before: Mon 23 Dec 2024 08:37:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43641
IP address blocks: 45.135.180.0/24 maxlen: 24
89.35.131.0/24 maxlen: 24
93.115.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f2:a9:f7:b2:b1:48:d8:10:19:f8:72:80:89:13:27:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 23 08:37:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bca9b5e60956aaa233f8d389738a7a01bafea887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b1:6d:2f:1c:58:af:19:20:90:2a:4b:b7:fd:
55:e3:54:48:6f:36:dd:b9:21:e3:b1:24:cc:33:fb:
e8:3b:33:2e:67:fe:59:fe:ec:ec:09:a0:36:f8:9e:
fc:82:06:e3:d8:6d:b7:a3:41:42:a3:5c:3e:51:18:
fa:69:c2:a1:26:8b:cc:d1:39:30:d1:5b:0d:f9:aa:
b7:9b:61:5c:a5:f2:a6:b9:81:14:7d:b2:7a:cf:d9:
35:b0:2e:0b:d8:e3:b3:36:f0:bc:bc:bf:35:66:47:
27:f6:22:af:28:e1:7a:d1:18:60:2b:10:44:e7:ab:
fd:91:ee:fc:38:a4:89:80:31:d9:1c:bd:a3:77:0e:
c6:b0:c3:65:87:b8:18:0c:72:6d:b0:cd:77:28:fa:
54:eb:80:c3:20:cf:77:b1:55:d6:4a:b9:0c:1b:d3:
45:3e:a1:d3:df:3c:09:65:76:2a:9e:2c:ec:ce:f2:
42:83:ad:9a:de:8a:ff:c5:d2:34:eb:20:76:ff:68:
9e:22:ec:d3:a0:05:95:63:a1:a1:24:95:ef:9a:43:
6f:13:5f:0c:52:97:36:25:04:ef:4e:86:7a:88:e3:
52:de:8a:58:49:9a:f2:dd:b5:11:06:eb:88:c3:e7:
ca:07:01:f7:48:ed:d0:fa:98:93:34:5f:d8:37:90:
d1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A9:B5:E6:09:56:AA:A2:33:F8:D3:89:73:8A:7A:01:BA:FE:A8:87
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vKm15glWqqIz-NOJc4p6Abr-qIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.180.0/24
89.35.131.0/24
93.115.172.0/24
Signature Algorithm: sha256WithRSAEncryption
78:bb:7a:ae:2a:c0:2f:fb:ef:21:1f:ac:84:b3:46:56:f4:9c:
e4:28:88:be:f0:f5:6e:38:28:bf:7e:6b:41:09:cd:bb:a1:14:
d5:d5:0f:63:f4:10:67:dc:76:8b:db:b6:d9:47:b6:b1:d5:e6:
3a:b4:1b:a7:e0:50:cc:f3:37:dd:d6:5e:c8:6d:c7:6c:6e:a4:
24:a5:1e:54:40:e4:f0:2d:36:aa:25:16:de:42:36:da:6d:46:
5c:1d:d8:60:3a:2c:74:79:18:3c:d7:0f:31:a5:a1:d8:b7:c1:
3c:8a:e7:84:43:53:5a:7c:1c:be:fa:a3:60:9b:6a:f3:d4:dd:
a8:6c:fd:b0:f2:ce:24:cd:a0:37:1a:f9:b4:f4:18:e4:58:19:
3e:05:56:e0:65:29:e2:dc:95:62:f1:a1:4c:2c:a2:84:14:65:
10:c2:bd:4e:1b:88:51:60:96:22:3f:54:6a:8f:95:2d:bc:8f:
2d:09:66:1b:28:54:d5:fd:d9:58:cf:c3:33:87:33:56:8a:58:
e1:c6:39:14:91:70:c9:73:25:48:f8:99:60:6c:9e:14:51:6a:
f9:68:3b:7c:52:f3:36:5f:28:12:b0:1f:4c:65:48:c2:17:8f:
5c:27:1a:00:7c:37:18:2e:a3:e4:a3:ba:6a:84:24:dc:a6:0a:
69:5e:cf:9e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZPyqfeysUjYEBn4coCJEyfRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQxMjIzMDgzNzI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2E5YjVlNjA5NTZhYWEyMzNmOGQzODk3MzhhN2EwMWJhZmVhODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubFtLxxYrxkgkCpLt/1V41RIbzbd
uSHjsSTMM/voOzMuZ/5Z/uzsCaA2+J78ggbj2G23o0FCo1w+URj6acKhJovM0Tkw
0VsN+aq3m2FcpfKmuYEUfbJ6z9k1sC4L2OOzNvC8vL81Zkcn9iKvKOF60RhgKxBE
56v9ke78OKSJgDHZHL2jdw7GsMNlh7gYDHJtsM13KPpU64DDIM93sVXWSrkMG9NF
PqHT3zwJZXYqnizszvJCg62a3or/xdI06yB2/2ieIuzToAWVY6GhJJXvmkNvE18M
Upc2JQTvToZ6iONS3opYSZry3bURBuuIw+fKBwH3SO3Q+piTNF/YN5DRfQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLypteYJVqqiM/jTiXOKegG6/qiHMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvdkttMTVnbFdxcUl6LU5PSmM0cDZBYnItcUljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYe0AwQA
WSODAwQAXXOsMA0GCSqGSIb3DQEBCwUAA4IBAQB4u3quKsAv++8hH6yEs0ZW9Jzk
KIi+8PVuOCi/fmtBCc27oRTV1Q9j9BBn3HaL27bZR7ax1eY6tBun4FDM8zfd1l7I
bcdsbqQkpR5UQOTwLTaqJRbeQjbabUZcHdhgOix0eRg81w8xpaHYt8E8iueEQ1Na
fBy++qNgm2rz1N2obP2w8s4kzaA3Gvm09BjkWBk+BVbgZSni3JVi8aFMLKKEFGUQ
wr1OG4hRYJYiP1Rqj5UtvI8tCWYbKFTV/dlYz8MzhzNWiljhxjkUkXDJcyVI+Jlg
bJ4UUWr5aDt8UvM2XygSsB9MZUjCF49cJxoAfDcYLqPko7pqhCTcpgppXs+e
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:24 2025 by rpki-client