Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xlpRdwlRSwBrOYf9Ee3WNOMS8z0.roa
File: xlpRdwlRSwBrOYf9Ee3WNOMS8z0.roa (raw, json)
Hash identifier: 6sn/D8BQXN5qLYOXyNYrv6g7lovZ0z2JxOkfEQVkpQ4=
Subject key identifier: C6:5A:51:77:09:51:4B:00:6B:39:87:FD:11:ED:D6:34:E3:12:F3:3D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019428277422CAC94AC7320E19F87D97E53C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xlpRdwlRSwBrOYf9Ee3WNOMS8z0.roa
Signing time: Thu 02 Jan 2025 17:54:21 +0000
ROA not before: Thu 02 Jan 2025 17:54:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215224
IP address blocks: 89.40.70.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 04:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:74:22:ca:c9:4a:c7:32:0e:19:f8:7d:97:e5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c65a517709514b006b3987fd11edd634e312f33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:33:b7:00:84:86:c8:92:79:99:2b:4e:c8:
96:0a:2f:57:85:b3:49:0c:4b:ad:7e:4b:3d:bf:93:
c9:42:a9:7e:74:ff:01:99:d7:e3:2a:7d:91:25:96:
d8:c8:ad:f8:6d:97:6b:ae:c3:a1:dc:96:65:9a:39:
b3:8a:e1:63:41:5e:6b:0f:23:06:2a:61:e0:e7:51:
1a:80:49:0e:28:1a:a0:17:d5:51:55:fa:4b:81:cb:
62:9a:10:49:d0:8c:2d:79:b9:f0:0e:c7:40:06:20:
5c:9f:a8:e1:f7:e6:32:11:07:de:0e:d9:40:0b:20:
85:3b:80:0d:d6:dd:7d:cc:b8:d0:aa:e5:94:ec:8f:
12:59:75:69:5c:0e:a7:20:42:b1:d1:3d:39:d4:4e:
9c:df:c8:3c:53:4e:d4:be:fc:a0:e6:d5:e0:c7:51:
5c:c2:be:9c:45:43:3a:ba:71:b5:6d:af:35:fa:39:
7d:bd:14:ff:a5:e0:cc:d3:23:aa:5d:49:82:6d:15:
3d:bc:ec:b1:bc:f1:68:75:a1:60:a4:dd:5e:1d:e9:
e4:84:95:af:20:7d:17:2c:66:46:df:92:b6:79:7b:
be:d6:91:f7:9e:96:45:b1:2c:8b:89:2f:1e:1b:0f:
5e:e4:d3:6a:52:7b:1e:a2:65:74:1e:19:8a:0c:6f:
79:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5A:51:77:09:51:4B:00:6B:39:87:FD:11:ED:D6:34:E3:12:F3:3D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xlpRdwlRSwBrOYf9Ee3WNOMS8z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.70.0/24
188.64.142.0/24
Signature Algorithm: sha256WithRSAEncryption
51:8c:df:b2:72:98:7f:b4:6c:99:16:d7:99:55:26:4a:55:14:
a3:89:93:33:9f:40:43:0d:29:fd:04:4b:ce:9e:39:fd:65:28:
23:13:69:d9:6e:e1:d8:05:de:22:a0:a5:bc:28:54:cf:3c:4b:
df:72:b5:c7:06:8f:10:74:a8:9d:a4:37:17:5f:8a:d8:67:ad:
a0:a9:68:55:75:f1:6b:75:ed:23:81:ca:65:ad:98:67:63:24:
b3:79:ad:1e:01:1d:2a:95:d8:23:22:26:79:45:50:ca:91:ff:
fa:59:c8:f3:fd:a8:7e:17:3c:1b:4f:df:d1:f3:4b:85:1c:ba:
0c:9c:ee:e2:a2:23:f6:4c:b9:dc:47:1d:a4:2e:c6:c1:5d:2f:
6f:fd:60:8a:81:c8:11:3f:c0:1c:e6:38:f7:fa:a3:98:a4:fd:
0e:a9:54:c2:2e:dd:9f:cd:de:9a:4a:b1:b8:1d:3a:31:11:18:
04:fe:7b:4d:f8:ec:75:07:d4:48:2c:ca:11:fc:76:2f:a4:df:
8b:36:93:be:ca:f6:ff:a5:51:6f:1f:7a:6c:53:b7:94:49:24:
27:31:37:0e:1e:b9:85:11:7d:41:5c:9d:88:c0:d3:fe:25:5b:
6a:f5:79:3c:57:99:5a:41:16:50:11:21:8d:1d:ef:da:49:3a:
6b:d5:8b:8a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoJ3QiyslKxzIOGfh9l+U8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwMTAyMTc1NDIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjVhNTE3NzA5NTE0YjAwNmIzOTg3ZmQxMWVkZDYzNGUzMTJmMzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X0ztwCEhsiSeZkrTsiWCi9XhbNJ
DEutfks9v5PJQql+dP8BmdfjKn2RJZbYyK34bZdrrsOh3JZlmjmziuFjQV5rDyMG
KmHg51EagEkOKBqgF9VRVfpLgctimhBJ0IwtebnwDsdABiBcn6jh9+YyEQfeDtlA
CyCFO4AN1t19zLjQquWU7I8SWXVpXA6nIEKx0T051E6c38g8U07Uvvyg5tXgx1Fc
wr6cRUM6unG1ba81+jl9vRT/peDM0yOqXUmCbRU9vOyxvPFodaFgpN1eHenkhJWv
IH0XLGZG35K2eXu+1pH3npZFsSyLiS8eGw9e5NNqUnseomV0HhmKDG951QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMZaUXcJUUsAazmH/RHt1jTjEvM9MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEveGxwUmR3bFJTd0JyT1lmOUVlM1dOT01TOHowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWShGAwQA
vECOMA0GCSqGSIb3DQEBCwUAA4IBAQBRjN+ycph/tGyZFteZVSZKVRSjiZMzn0BD
DSn9BEvOnjn9ZSgjE2nZbuHYBd4ioKW8KFTPPEvfcrXHBo8QdKidpDcXX4rYZ62g
qWhVdfFrde0jgcplrZhnYySzea0eAR0qldgjIiZ5RVDKkf/6Wcjz/ah+FzwbT9/R
80uFHLoMnO7ioiP2TLncRx2kLsbBXS9v/WCKgcgRP8Ac5jj3+qOYpP0OqVTCLt2f
zd6aSrG4HToxERgE/ntN+Ox1B9RILMoR/HYvpN+LNpO+yvb/pVFvH3psU7eUSSQn
MTcOHrmFEX1BXJ2IwNP+JVtq9Xk8V5laQRZQESGNHe/aSTpr1YuK
-----END CERTIFICATE-----
Generated at Wed Feb 5 12:56:10 2025 by rpki-client