Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/RQa6eGIWrTrf1YudP1WfAub7VUM.roa
File: RQa6eGIWrTrf1YudP1WfAub7VUM.roa (raw, json)
Hash identifier: XauYdBUAx34YzT5sasr7bOyYFn3U9v1uwGZr2qXPakY=
Subject key identifier: 45:06:BA:78:62:16:AD:3A:DF:D5:8B:9D:3F:55:9F:02:E6:FB:55:43
Certificate issuer: /CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Certificate serial: 0193D4BA0AF157021C3577F14F4A88D8FDD4
Authority key identifier: 8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/RQa6eGIWrTrf1YudP1WfAub7VUM.roa
Signing time: Tue 17 Dec 2024 13:06:22 +0000
ROA not before: Tue 17 Dec 2024 13:06:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30742
IP address blocks: 2.59.32.0/22 maxlen: 24
80.245.132.0/22 maxlen: 24
80.245.136.0/21 maxlen: 24
82.198.192.0/19 maxlen: 24
176.118.180.0/22 maxlen: 24
176.118.180.0/24 maxlen: 24
176.118.181.0/24 maxlen: 24
176.118.182.0/24 maxlen: 24
176.118.183.0/24 maxlen: 24
185.43.24.0/22 maxlen: 24
185.48.224.0/22 maxlen: 24
185.106.184.0/22 maxlen: 22
185.115.80.0/22 maxlen: 24
185.139.112.0/22 maxlen: 22
192.145.112.0/22 maxlen: 22
193.176.72.0/22 maxlen: 22
194.146.0.0/22 maxlen: 22
2a01:9b60::/32 maxlen: 32
2a03:9980::/29 maxlen: 32
2a03:9980::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d4:ba:0a:f1:57:02:1c:35:77:f1:4f:4a:88:d8:fd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Validity
Not Before: Dec 17 13:06:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4506ba786216ad3adfd58b9d3f559f02e6fb5543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:02:8a:5e:20:58:ab:66:1d:31:67:b1:a0:cc:
5f:2e:b5:31:51:e4:62:ed:69:d5:52:0c:1d:d1:0a:
f0:ad:db:4f:66:49:00:b9:11:7a:e4:87:5b:07:fa:
ee:d1:86:54:e9:b3:01:dc:78:7f:29:fe:1d:c0:db:
ac:ed:2b:5c:af:1d:7e:bf:2a:38:88:a3:dc:28:c5:
d0:fd:1c:4d:65:49:07:ca:b5:98:cc:00:36:c0:dd:
eb:42:66:fb:aa:11:f0:4f:63:eb:b9:33:1b:78:fa:
05:19:7e:35:30:6d:9d:e1:20:4d:fc:58:f0:67:f9:
ec:99:81:b9:19:d8:32:01:62:1c:5a:3e:d3:87:f3:
b6:19:64:a1:d8:1a:e3:d2:5a:b1:92:fc:09:71:96:
3a:47:c9:db:df:ee:34:c7:8f:0d:18:9d:9e:a9:43:
b2:ee:b4:30:64:03:85:52:26:b8:d4:8d:62:15:80:
e4:de:0a:de:fa:e6:25:52:f1:35:24:cb:20:0e:33:
32:cf:bb:9b:37:45:a0:4d:5a:8a:0e:4a:b1:00:7e:
5f:56:d5:40:73:5e:06:be:40:44:92:c8:9e:95:8b:
3d:49:e6:bd:95:0b:9b:a2:d4:fe:75:11:fb:42:7a:
f6:f0:9c:b3:e7:88:5b:fe:01:77:83:ba:aa:50:1d:
7b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:06:BA:78:62:16:AD:3A:DF:D5:8B:9D:3F:55:9F:02:E6:FB:55:43
X509v3 Authority Key Identifier:
keyid:8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/RQa6eGIWrTrf1YudP1WfAub7VUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.32.0/22
80.245.132.0-80.245.143.255
82.198.192.0/19
176.118.180.0/22
185.43.24.0/22
185.48.224.0/22
185.106.184.0/22
185.115.80.0/22
185.139.112.0/22
192.145.112.0/22
193.176.72.0/22
194.146.0.0/22
IPv6:
2a01:9b60::/32
2a03:9980::/29
Signature Algorithm: sha256WithRSAEncryption
3f:32:c6:f5:02:cb:ae:bd:65:a6:1c:16:38:af:f4:90:d8:37:
07:16:b7:0f:af:f0:84:2b:06:00:3a:9b:8c:7b:5e:17:b8:34:
37:19:42:cc:c4:d7:4e:f3:e3:95:aa:c2:53:8b:a1:fd:0d:5f:
09:27:c3:9c:3a:1a:75:7a:bd:00:58:3d:7f:29:3a:44:f4:72:
52:73:38:11:de:f8:0d:5c:31:47:5b:bf:09:4d:34:58:fc:db:
ce:c4:f4:68:2f:f3:81:ea:38:5c:f8:19:22:26:04:ba:46:d3:
85:45:ee:f9:9a:0a:6f:e5:74:57:7e:23:18:64:48:5f:1e:8b:
5d:cb:3d:57:fe:59:81:0e:1a:68:cc:8d:4a:0f:e2:64:d4:3f:
85:b0:8a:c8:80:86:50:2c:6d:75:94:d4:ce:05:ad:62:b6:c0:
6d:42:21:a0:ff:08:7c:35:ca:bd:4d:08:3e:c0:25:25:ec:28:
6e:04:01:73:00:ab:f9:80:f6:99:83:7a:72:98:51:54:28:f8:
60:15:cf:7e:91:66:f9:2f:91:2f:e4:af:a2:68:71:0e:54:13:
f0:7b:bc:e5:63:c3:08:20:f2:48:5a:8c:a1:d2:0c:40:f3:66:
e8:d9:5f:66:20:6c:e7:32:4a:92:9b:95:ef:b8:50:94:15:b9:
8c:82:59:d3
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAZPUugrxVwIcNXfxT0qI2P3UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzRhNjdkYmVkNzQ0NGRkZDI3ZTgwMGZiNmMyMTAxM2E1
YjExYzYwHhcNMjQxMjE3MTMwNjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTA2YmE3ODYyMTZhZDNhZGZkNThiOWQzZjU1OWYwMmU2ZmI1NTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQKKXiBYq2YdMWexoMxfLrUxUeRi
7WnVUgwd0QrwrdtPZkkAuRF65IdbB/ru0YZU6bMB3Hh/Kf4dwNus7Stcrx1+vyo4
iKPcKMXQ/RxNZUkHyrWYzAA2wN3rQmb7qhHwT2PruTMbePoFGX41MG2d4SBN/Fjw
Z/nsmYG5GdgyAWIcWj7Th/O2GWSh2Brj0lqxkvwJcZY6R8nb3+40x48NGJ2eqUOy
7rQwZAOFUia41I1iFYDk3gre+uYlUvE1JMsgDjMyz7ubN0WgTVqKDkqxAH5fVtVA
c14GvkBEksielYs9Sea9lQubotT+dRH7Qnr28Jyz54hb/gF3g7qqUB17WwIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFEUGunhiFq0639WLnT9VnwLm+1VDMB8GA1UdIwQY
MBaAFI7Epn2+10RN3SfoAPtsIQE6WxHGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNTbWZiN1hSRTNkSi1nQS0yd2hBVHBiRWNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9lN2EyZjEtMmUxMC00ZWJlLTkxYjMt
MGNlZjUxMmY1MDA5LzEvUlFhNmVHSVdyVHJmMVl1ZFAxV2ZBdWI3VlVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9lN2EyZjEtMmUxMC00ZWJlLTkxYjMtMGNlZjUxMmY1MDA5
LzEvanNTbWZiN1hSRTNkSi1nQS0yd2hBVHBiRWNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBWBAIAATBQAwQCAjsgMAwD
BAJQ9YQDBARQ9YADBAVSxsADBAKwdrQDBAK5KxgDBAK5MOADBAK5argDBAK5c1AD
BAK5i3ADBALAkXADBALBsEgDBALCkgAwFAQCAAIwDgMFACoBm2ADBQMqA5mAMA0G
CSqGSIb3DQEBCwUAA4IBAQA/Msb1AsuuvWWmHBY4r/SQ2DcHFrcPr/CEKwYAOpuM
e14XuDQ3GULMxNdO8+OVqsJTi6H9DV8JJ8OcOhp1er0AWD1/KTpE9HJSczgR3vgN
XDFHW78JTTRY/NvOxPRoL/OB6jhc+BkiJgS6RtOFRe75mgpv5XRXfiMYZEhfHotd
yz1X/lmBDhpozI1KD+Jk1D+FsIrIgIZQLG11lNTOBa1itsBtQiGg/wh8Ncq9TQg+
wCUl7ChuBAFzAKv5gPaZg3pymFFUKPhgFc9+kWb5L5Ev5K+iaHEOVBPwe7zlY8MI
IPJIWoyh0gxA82bo2V9mIGznMkqSm5XvuFCUFbmMglnT
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:31:29 2025 by rpki-client