Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/rCVeMrGwue1rj12-obWP-5c3F7A.roa
File: rCVeMrGwue1rj12-obWP-5c3F7A.roa (raw, json)
Hash identifier: E2modtCS+nI+Asfi0r7Xs1+Aztt01PCQNmjIz3Ve5zM=
Subject key identifier: AC:25:5E:32:B1:B0:B9:ED:6B:8F:5D:BE:A1:B5:8F:FB:97:37:17:B0
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0194ACBF05D80DE81EF76C6C3239EFEE7BC0
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/rCVeMrGwue1rj12-obWP-5c3F7A.roa
Signing time: Tue 28 Jan 2025 11:49:47 +0000
ROA not before: Tue 28 Jan 2025 11:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12325
IP address blocks: 85.204.241.0/24 maxlen: 24
188.212.131.0/24 maxlen: 24
188.241.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 15:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:bf:05:d8:0d:e8:1e:f7:6c:6c:32:39:ef:ee:7b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 28 11:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac255e32b1b0b9ed6b8f5dbea1b58ffb973717b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:bd:49:d0:4b:5b:99:17:3a:a9:72:02:f0:
7a:4c:09:a9:f4:e2:b9:2d:7a:83:3b:14:94:95:08:
fa:13:f1:fb:1a:0d:65:87:d4:80:d7:41:da:cd:95:
6a:ae:f3:43:c5:9e:08:72:fa:9c:6f:10:ff:33:57:
88:8c:0a:4e:d3:15:14:a5:88:a2:95:c7:11:99:ec:
87:b4:c8:40:ed:cc:8d:79:48:cb:20:e9:a1:cb:5e:
68:f8:0d:3a:61:52:37:bf:ad:2c:36:e3:8a:7d:3d:
a6:1f:45:2e:94:11:52:c6:30:50:c3:59:72:2c:bc:
65:85:89:33:36:83:e5:2d:8f:5a:5f:0e:24:b3:c4:
b1:7e:e4:f2:eb:02:b1:17:76:cc:29:35:6d:8e:ad:
d5:3e:38:0f:3b:ce:3a:1c:26:d5:b9:42:78:81:b4:
54:55:d3:26:de:e5:28:01:b3:c0:91:65:f4:bb:d8:
fc:9a:86:15:ab:9a:f0:f3:ce:33:88:c6:cc:b6:d5:
de:96:2a:4a:0c:2e:e9:50:90:61:cf:37:90:a2:29:
72:35:7f:f5:d3:c4:41:25:9f:d7:0d:66:05:67:f9:
c7:31:6c:40:86:13:54:82:56:00:b9:b9:14:5b:e5:
3b:74:7e:41:02:ab:c3:07:8c:9d:a5:31:c6:65:77:
8e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:25:5E:32:B1:B0:B9:ED:6B:8F:5D:BE:A1:B5:8F:FB:97:37:17:B0
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/rCVeMrGwue1rj12-obWP-5c3F7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.241.0/24
188.212.131.0/24
188.241.127.0/24
Signature Algorithm: sha256WithRSAEncryption
ee:fa:30:46:56:f7:c6:4b:c9:a1:4d:21:a1:9a:33:64:e0:68:
92:9b:1a:06:a1:29:65:cf:18:88:49:5a:de:a7:ee:f3:44:93:
84:2d:db:43:32:8c:ab:12:95:e5:61:55:13:69:6f:c0:09:16:
d5:98:61:61:59:e4:4f:88:f7:04:8b:69:d1:57:bd:0b:46:3f:
31:03:39:3a:c8:16:61:7a:95:d1:03:11:23:c6:0e:64:bd:2c:
82:10:94:fc:1b:cd:9b:e5:a7:93:d4:bd:c2:3b:58:58:45:c9:
fa:1d:26:cc:de:ec:39:ae:fe:c7:e3:d3:b5:f8:7f:3e:a5:ce:
75:49:19:42:13:3b:ab:76:a9:6f:b3:04:80:ae:fb:57:d5:86:
16:18:82:57:2d:d9:55:a8:da:15:61:1d:4e:18:2e:ce:bc:85:
68:76:8f:1f:6c:7d:1c:f6:ea:20:5a:71:e0:a7:45:f6:ab:d4:
b1:d6:67:77:de:2e:ce:65:4d:44:c2:42:4a:e0:9b:dc:f7:43:
00:75:43:4b:dc:0a:b0:1f:f7:d6:84:53:d3:7f:83:98:45:4d:
cc:d3:a0:29:6c:bd:13:19:56:17:70:fd:0e:27:90:c6:d6:70:
3c:e6:47:a8:d6:be:e7:3d:a0:39:55:2f:6a:3e:2e:a2:62:56:
f3:47:2e:dd
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZSsvwXYDege92xsMjnv7nvAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjUwMTI4MTE0OTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzI1NWUzMmIxYjBiOWVkNmI4ZjVkYmVhMWI1OGZmYjk3MzcxN2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDy9SdBLW5kXOqlyAvB6TAmp9OK5
LXqDOxSUlQj6E/H7Gg1lh9SA10HazZVqrvNDxZ4IcvqcbxD/M1eIjApO0xUUpYii
lccRmeyHtMhA7cyNeUjLIOmhy15o+A06YVI3v60sNuOKfT2mH0UulBFSxjBQw1ly
LLxlhYkzNoPlLY9aXw4ks8SxfuTy6wKxF3bMKTVtjq3VPjgPO846HCbVuUJ4gbRU
VdMm3uUoAbPAkWX0u9j8moYVq5rw884ziMbMttXelipKDC7pUJBhzzeQoilyNX/1
08RBJZ/XDWYFZ/nHMWxAhhNUglYAubkUW+U7dH5BAqvDB4ydpTHGZXeOrwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFKwlXjKxsLnta49dvqG1j/uXNxewMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL3JDVmVNckd3dWUxcmoxMi1vYldQLTVjM0Y3QS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBABVzPED
BAC81IMDBAC88X8wDQYJKoZIhvcNAQELBQADggEBAO76MEZW98ZLyaFNIaGaM2Tg
aJKbGgahKWXPGIhJWt6n7vNEk4Qt20MyjKsSleVhVRNpb8AJFtWYYWFZ5E+I9wSL
adFXvQtGPzEDOTrIFmF6ldEDESPGDmS9LIIQlPwbzZvlp5PUvcI7WFhFyfodJsze
7Dmu/sfj07X4fz6lznVJGUITO6t2qW+zBICu+1fVhhYYglct2VWo2hVhHU4YLs68
hWh2jx9sfRz26iBaceCnRfar1LHWZ3feLs5lTUTCQkrgm9z3QwB1Q0vcCrAf99aE
U9N/g5hFTczToClsvRMZVhdw/Q4nkMbWcDzmR6jWvuc9oDlVL2o+LqJiVvNHLt0=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:43 2025 by rpki-client