Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/c_pxESaR2x3BQriZw_LEmjpxO70.roa
File: c_pxESaR2x3BQriZw_LEmjpxO70.roa (raw, json)
Hash identifier: ITBXKxhG6Il2Rusll6rxDZnAehiUkrccIwyacpQft4Y=
Subject key identifier: 73:FA:71:11:26:91:DB:1D:C1:42:B8:99:C3:F2:C4:9A:3A:71:3B:BD
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01942521B5411A15274CED02E6A5E42FD8FF
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/c_pxESaR2x3BQriZw_LEmjpxO70.roa
Signing time: Thu 02 Jan 2025 03:49:13 +0000
ROA not before: Thu 02 Jan 2025 03:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 932
IP address blocks: 45.150.198.0/23 maxlen: 24
91.208.73.0/24 maxlen: 24
91.208.104.0/24 maxlen: 24
91.213.200.0/24 maxlen: 24
2a12:ab80::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 08 Feb 2025 04:16:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b5:41:1a:15:27:4c:ed:02:e6:a5:e4:2f:d8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 2 03:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73fa71112691db1dc142b899c3f2c49a3a713bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:65:9e:8e:1f:0d:e0:45:81:74:7e:cb:df:0d:
f4:ca:8a:84:1f:1d:5b:50:b6:2e:96:ef:27:cd:ae:
82:8c:c0:af:86:df:b2:d1:fb:59:2b:4d:86:4d:51:
b2:2a:14:6d:13:6d:9c:65:31:59:91:ba:41:01:07:
81:95:25:81:e5:1f:20:0c:55:fb:f8:fc:4f:56:8b:
44:05:02:04:db:77:1d:d8:b2:e1:d7:72:fd:b5:c2:
78:c5:16:38:10:7a:5f:ba:48:5b:0d:56:2f:d7:6f:
8e:b9:75:4e:45:97:12:67:a9:4d:ea:cb:13:33:b4:
67:29:a4:f2:7a:23:9f:44:85:d4:9c:74:d5:83:5b:
f4:22:8c:46:95:2e:6e:3d:74:1e:14:20:c1:d7:cf:
00:fb:0f:f9:ad:f0:61:a3:a3:a6:09:07:4d:b4:10:
28:66:34:70:02:2c:07:3d:3a:ad:97:d5:ed:d0:a6:
3a:d3:fb:1f:26:c0:ed:a5:e1:05:fd:f8:c8:b5:09:
fe:57:0a:c5:63:97:25:3c:0e:ea:8e:d8:d0:ac:ec:
c6:2e:e0:ea:44:e7:9a:94:06:03:59:27:15:ec:d3:
f1:9f:fa:8e:aa:63:87:c3:43:21:b2:39:4a:29:b4:
9b:86:f5:8f:55:a9:75:f3:d0:0a:fc:9e:a8:8a:3e:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FA:71:11:26:91:DB:1D:C1:42:B8:99:C3:F2:C4:9A:3A:71:3B:BD
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/c_pxESaR2x3BQriZw_LEmjpxO70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.198.0/23
91.208.73.0/24
91.208.104.0/24
91.213.200.0/24
IPv6:
2a12:ab80::/29
Signature Algorithm: sha256WithRSAEncryption
76:6c:78:1f:4c:be:b5:b4:a2:bc:14:4b:45:44:0d:6d:54:c8:
7d:6c:d0:50:a2:8f:19:e5:b8:19:bb:2f:55:e6:bf:76:82:58:
23:e0:22:1a:f7:28:6f:0c:9d:b5:5f:3d:64:5a:5b:0b:b1:60:
3d:c2:f9:f1:68:f3:53:12:c4:5b:5b:15:22:8f:48:6f:a8:56:
61:ae:25:7d:8a:3d:7a:da:9e:d8:31:b3:6c:6c:1e:e3:82:8e:
8f:79:91:41:06:9f:86:a7:6d:82:b8:aa:d7:ae:84:c5:df:2f:
1d:97:ee:25:02:67:55:39:4b:fe:34:78:92:72:00:6d:ba:3f:
d3:06:7a:8d:44:a6:f2:42:8f:96:ca:e3:d6:7d:f0:f4:49:69:
f9:63:24:d4:7a:34:c2:15:ff:77:22:cd:1f:6d:01:5d:a4:54:
cc:55:37:dc:d7:92:9b:cc:44:e1:3e:0c:a1:cc:c0:81:16:0e:
9c:21:bc:41:de:21:23:9a:c4:b4:2d:79:65:6e:ea:20:65:b5:
81:25:c6:7c:5f:ca:14:24:7d:9c:86:64:66:ad:31:55:5f:c6:
0c:ce:47:54:53:ed:59:84:b8:03:8e:ea:11:11:fd:c5:2f:c1:
6f:31:15:c9:b8:b4:b6:66:2a:04:61:33:e4:4e:03:10:b2:4c:
65:f8:f8:15
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQlIbVBGhUnTO0C5qXkL9j/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm
YmM0YTkwHhcNMjUwMTAyMDM0OTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2ZhNzExMTI2OTFkYjFkYzE0MmI4OTljM2YyYzQ5YTNhNzEzYmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmWejh8N4EWBdH7L3w30yoqEHx1b
ULYulu8nza6CjMCvht+y0ftZK02GTVGyKhRtE22cZTFZkbpBAQeBlSWB5R8gDFX7
+PxPVotEBQIE23cd2LLh13L9tcJ4xRY4EHpfukhbDVYv12+OuXVORZcSZ6lN6ssT
M7RnKaTyeiOfRIXUnHTVg1v0IoxGlS5uPXQeFCDB188A+w/5rfBho6OmCQdNtBAo
ZjRwAiwHPTqtl9Xt0KY60/sfJsDtpeEF/fjItQn+VwrFY5clPA7qjtjQrOzGLuDq
ROealAYDWScV7NPxn/qOqmOHw0MhsjlKKbSbhvWPVal189AK/J6oij5kOQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFHP6cREmkdsdwUK4mcPyxJo6cTu9MB8GA1UdIwQY
MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt
NmM3ZTU2ODU4OTBjLzEvY19weEVTYVIyeDNCUXJpWndfTEVtanB4TzcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj
LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBLZbGAwQA
W9BJAwQAW9BoAwQAW9XIMA0EAgACMAcDBQMqEquAMA0GCSqGSIb3DQEBCwUAA4IB
AQB2bHgfTL61tKK8FEtFRA1tVMh9bNBQoo8Z5bgZuy9V5r92glgj4CIa9yhvDJ21
Xz1kWlsLsWA9wvnxaPNTEsRbWxUij0hvqFZhriV9ij162p7YMbNsbB7jgo6PeZFB
Bp+Gp22CuKrXroTF3y8dl+4lAmdVOUv+NHiScgBtuj/TBnqNRKbyQo+WyuPWffD0
SWn5YyTUejTCFf93Is0fbQFdpFTMVTfc15KbzEThPgyhzMCBFg6cIbxB3iEjmsS0
LXllbuogZbWBJcZ8X8oUJH2chmRmrTFVX8YMzkdUU+1ZhLgDjuoREf3FL8FvMRXJ
uLS2ZioEYTPkTgMQskxl+PgV
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:05:50 2025 by rpki-client