Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Dx3PunT9g_2ZOIF47SZ2MVFPjGE.roa
File: Dx3PunT9g_2ZOIF47SZ2MVFPjGE.roa (raw, json)
Hash identifier: 1+m+Wwh4GBFIhOScoM09aA+xHZp8GAdqxD0WrgB0dMU=
Subject key identifier: 0F:1D:CF:BA:74:FD:83:FD:99:38:81:78:ED:26:76:31:51:4F:8C:61
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019429BED1CBE31162F0CC1B21305F94A469
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Dx3PunT9g_2ZOIF47SZ2MVFPjGE.roa
Signing time: Fri 03 Jan 2025 01:19:18 +0000
ROA not before: Fri 03 Jan 2025 01:19:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 188.209.156.0/22 maxlen: 24
213.173.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 23:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:29:be:d1:cb:e3:11:62:f0:cc:1b:21:30:5f:94:a4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 3 01:19:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f1dcfba74fd83fd99388178ed267631514f8c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8b:b9:f5:fd:8e:58:32:4b:19:44:59:4c:b2:
6c:1b:66:ac:72:26:c6:3f:8d:27:a4:99:b5:2c:7f:
6d:00:87:ea:05:b4:9d:13:b3:66:40:c7:3e:07:7e:
90:1d:c7:d6:89:be:7d:8d:5d:de:bb:d1:d9:3e:03:
85:c6:9e:07:61:b8:62:5c:10:24:17:3a:21:d9:0d:
09:40:42:5a:f6:f5:c5:06:a4:02:2a:d2:65:84:49:
ef:06:7f:09:13:b0:c7:da:6a:27:af:da:ca:e2:1c:
b2:ac:ca:b4:c6:3a:e6:e8:7e:83:7d:0a:02:eb:35:
4e:1a:a2:43:95:78:6a:60:51:42:cf:e7:c7:0a:8a:
0e:1a:6e:4f:dc:b1:fe:d2:f2:40:16:6f:44:4c:5d:
2e:f2:e7:25:6e:fc:5a:32:d5:d1:2c:0d:73:62:5a:
cb:4b:a9:e2:28:26:d6:f6:30:73:6c:b7:07:49:37:
24:0e:0c:60:7c:82:7a:83:4e:55:97:7d:72:f9:72:
f4:de:3d:62:a4:14:50:10:9d:38:18:29:d6:c3:95:
1d:65:ba:c1:1b:90:2f:25:32:f1:4b:5d:32:39:f4:
7e:ac:d8:1a:b0:c1:0e:5c:54:4a:44:87:3a:a9:73:
de:ea:c6:94:76:88:c2:78:05:ed:21:0a:fd:b4:35:
49:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1D:CF:BA:74:FD:83:FD:99:38:81:78:ED:26:76:31:51:4F:8C:61
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Dx3PunT9g_2ZOIF47SZ2MVFPjGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.156.0/22
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
45:25:b3:07:83:d2:2a:dc:ea:ab:cb:18:a9:a5:d3:fb:e7:74:
b1:0f:94:58:9d:27:29:ff:4a:57:16:7d:0b:de:c8:17:85:52:
fb:f8:0f:bd:dc:65:b5:a0:d5:27:2a:9b:9a:19:e2:09:be:6e:
b7:c1:13:9b:0e:6e:29:38:75:7b:45:87:d0:7e:11:d2:62:cd:
fd:2f:4b:ac:2d:61:c2:a4:69:b9:f1:e6:0b:98:25:19:02:71:
bd:75:e5:36:a0:67:ae:ce:7d:2b:2b:11:ae:58:32:d2:97:5b:
49:e0:4e:a1:a8:ff:66:26:2d:b0:71:1e:de:0c:cd:e0:5b:38:
8b:88:ab:3e:ae:44:6d:9b:f9:71:7d:58:0d:49:e8:3f:71:ff:
04:87:0e:b6:d6:bb:ec:6d:f2:3e:90:f9:5f:af:c4:5c:60:bc:
9a:6b:a0:ea:ae:ee:08:b2:dc:ad:4a:d6:49:53:e8:16:dd:ff:
b7:58:83:00:6b:14:87:3d:c8:d4:ab:3e:ab:d4:09:90:2f:d3:
9a:dc:7b:9b:54:7a:46:d3:98:59:ed:52:db:f2:ed:4b:f2:e1:
07:ca:f1:35:c8:ed:cd:36:a5:c8:62:d0:00:43:ef:61:74:b6:
50:51:ff:6f:2a:69:59:e8:0d:d4:07:11:a1:7d:2b:34:24:78:
cd:5d:80:7c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQpvtHL4xFi8MwbITBflKRpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjUwMTAzMDExOTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjFkY2ZiYTc0ZmQ4M2ZkOTkzODgxNzhlZDI2NzYzMTUxNGY4YzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYu59f2OWDJLGURZTLJsG2ascibG
P40npJm1LH9tAIfqBbSdE7NmQMc+B36QHcfWib59jV3eu9HZPgOFxp4HYbhiXBAk
Fzoh2Q0JQEJa9vXFBqQCKtJlhEnvBn8JE7DH2monr9rK4hyyrMq0xjrm6H6DfQoC
6zVOGqJDlXhqYFFCz+fHCooOGm5P3LH+0vJAFm9ETF0u8uclbvxaMtXRLA1zYlrL
S6niKCbW9jBzbLcHSTckDgxgfIJ6g05Vl31y+XL03j1ipBRQEJ04GCnWw5UdZbrB
G5AvJTLxS10yOfR+rNgasMEOXFRKRIc6qXPe6saUdojCeAXtIQr9tDVJhwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA8dz7p0/YP9mTiBeO0mdjFRT4xhMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvRHgzUHVuVDlnXzJaT0lGNDdTWjJNVkZQakdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCvNGcAwQC
1a0gMA0GCSqGSIb3DQEBCwUAA4IBAQBFJbMHg9Iq3OqryxippdP753SxD5RYnScp
/0pXFn0L3sgXhVL7+A+93GW1oNUnKpuaGeIJvm63wRObDm4pOHV7RYfQfhHSYs39
L0usLWHCpGm58eYLmCUZAnG9deU2oGeuzn0rKxGuWDLSl1tJ4E6hqP9mJi2wcR7e
DM3gWziLiKs+rkRtm/lxfVgNSeg/cf8Ehw621rvsbfI+kPlfr8RcYLyaa6Dqru4I
stytStZJU+gW3f+3WIMAaxSHPcjUqz6r1AmQL9Oa3HubVHpG05hZ7VLb8u1L8uEH
yvE1yO3NNqXIYtAAQ+9hdLZQUf9vKmlZ6A3UBxGhfSs0JHjNXYB8
-----END CERTIFICATE-----
Generated at Thu Apr 10 15:44:40 2025 by rpki-client