Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/EAHHXQf9ZdS6ZloS6lOyI894TUU.roa
File: EAHHXQf9ZdS6ZloS6lOyI894TUU.roa (raw, json)
Hash identifier: Is0zDw+uWXIE9Amf/FABJ/vnHac0KEnQLP+0wSdRxV8=
Subject key identifier: 10:01:C7:5D:07:FD:65:D4:BA:66:5A:12:EA:53:B2:23:CF:78:4D:45
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0193E32D67EB8066B738A60F03B045540007
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/EAHHXQf9ZdS6ZloS6lOyI894TUU.roa
Signing time: Fri 20 Dec 2024 08:27:03 +0000
ROA not before: Fri 20 Dec 2024 08:27:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199614
IP address blocks: 213.18.246.0/24 maxlen: 24
213.18.247.0/24 maxlen: 24
217.180.52.0/24 maxlen: 24
217.180.53.0/24 maxlen: 24
217.180.54.0/24 maxlen: 24
217.180.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Dec 2024 11:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:2d:67:eb:80:66:b7:38:a6:0f:03:b0:45:54:00:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Dec 20 08:27:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1001c75d07fd65d4ba665a12ea53b223cf784d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:15:a9:d6:80:56:c5:fc:ff:77:a9:fc:f5:25:
e6:83:fb:64:4e:d8:54:3b:2f:22:8b:01:79:8e:34:
38:db:f8:1a:4a:5a:d5:19:3d:26:f6:43:46:a4:48:
76:87:54:cd:bb:ad:72:35:17:35:05:95:cb:99:26:
72:72:01:41:65:35:63:55:b2:c7:8e:4f:2d:19:37:
36:0d:5d:b5:d2:fc:4c:f2:90:a1:59:97:5c:32:44:
cb:90:9b:e8:27:50:fd:76:ee:0a:ef:5c:28:bb:ee:
8c:d9:67:e0:bd:15:3f:b4:56:d3:30:40:43:49:e7:
ab:af:00:20:f2:63:26:03:b7:2f:b1:7d:a5:72:78:
03:0e:b3:d8:e3:0b:a2:9f:fb:06:0c:d1:c1:3a:2d:
56:c0:e7:99:5c:db:4f:05:fa:1e:7d:1c:86:2d:41:
ef:e5:80:d6:8f:52:75:77:02:18:c1:eb:65:e7:5b:
89:4a:ff:97:e4:32:2d:8a:08:ec:66:1b:8a:2f:b5:
95:e1:a5:6c:bc:44:a0:70:1f:da:ba:1d:4c:fc:68:
90:ed:53:50:4d:a1:fe:ab:4d:b9:a4:1d:4e:41:bf:
83:0c:c6:d6:80:f4:50:81:b0:8e:bf:dc:bb:88:ef:
47:af:d0:7e:c3:4a:62:26:cc:af:29:b7:a8:76:6d:
15:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:01:C7:5D:07:FD:65:D4:BA:66:5A:12:EA:53:B2:23:CF:78:4D:45
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/EAHHXQf9ZdS6ZloS6lOyI894TUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.246.0/23
217.180.52.0/22
Signature Algorithm: sha256WithRSAEncryption
92:b6:2a:5e:0f:69:e9:1c:4e:b0:d4:e1:ba:60:b7:08:43:07:
2d:a2:6f:7a:36:07:1d:c0:3f:e5:03:d7:49:c1:3b:d3:85:b6:
df:c1:62:23:f2:f4:b8:82:8a:bb:00:a4:c5:46:ca:48:8b:1e:
a5:f2:20:66:7d:6d:23:42:2a:25:a0:b7:ca:36:ad:ac:10:5d:
f6:af:33:76:60:3c:c6:02:36:fd:49:2c:77:cf:df:a7:65:2c:
c2:3a:49:c8:2d:0f:71:f3:c5:1f:19:c0:bf:f8:f4:ad:4e:5a:
56:aa:35:3f:18:6c:78:ea:59:1c:53:f0:3f:04:32:7f:94:53:
b4:9a:cd:7d:3e:36:0f:2e:7c:df:43:1f:be:d1:bc:b2:a9:f0:
cf:cd:a3:b8:3d:e7:a3:da:e0:a8:e7:2d:31:cd:35:9a:6a:88:
17:c5:f4:38:cd:28:3d:ea:50:a2:33:fe:af:a4:b1:2a:fc:c6:
45:9f:11:71:08:47:3e:8f:f6:f0:bc:e8:17:19:80:1b:2b:ba:
63:71:25:e9:5b:9e:b9:b7:89:4c:ac:50:67:a6:9d:cf:d6:11:
9b:7c:e0:06:72:37:87:e9:43:ef:ce:6d:46:c6:cc:ea:3b:6d:
06:aa:34:4a:98:ef:92:02:0d:f2:04:c9:42:70:81:eb:b4:ef:
31:9d:41:52
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZPjLWfrgGa3OKYPA7BFVAAHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy
ZGE3NGQwHhcNMjQxMjIwMDgyNzAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDAxYzc1ZDA3ZmQ2NWQ0YmE2NjVhMTJlYTUzYjIyM2NmNzg0ZDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hWp1oBWxfz/d6n89SXmg/tkTthU
Oy8iiwF5jjQ42/gaSlrVGT0m9kNGpEh2h1TNu61yNRc1BZXLmSZycgFBZTVjVbLH
jk8tGTc2DV210vxM8pChWZdcMkTLkJvoJ1D9du4K71wou+6M2WfgvRU/tFbTMEBD
SeerrwAg8mMmA7cvsX2lcngDDrPY4wuin/sGDNHBOi1WwOeZXNtPBfoefRyGLUHv
5YDWj1J1dwIYwetl51uJSv+X5DItigjsZhuKL7WV4aVsvESgcB/auh1M/GiQ7VNQ
TaH+q025pB1OQb+DDMbWgPRQgbCOv9y7iO9Hr9B+w0piJsyvKbeodm0VvQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBABx10H/WXUumZaEupTsiPPeE1FMB8GA1UdIwQY
MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt
YzE5OTQyNzM3ZTZkLzEvRUFISFhRZjlaZFM2WmxvUzZsT3lJODk0VFVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk
LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB1RL2AwQC
2bQ0MA0GCSqGSIb3DQEBCwUAA4IBAQCStipeD2npHE6w1OG6YLcIQwctom96Ngcd
wD/lA9dJwTvThbbfwWIj8vS4goq7AKTFRspIix6l8iBmfW0jQioloLfKNq2sEF32
rzN2YDzGAjb9SSx3z9+nZSzCOknILQ9x88UfGcC/+PStTlpWqjU/GGx46lkcU/A/
BDJ/lFO0ms19PjYPLnzfQx++0byyqfDPzaO4Peej2uCo5y0xzTWaaogXxfQ4zSg9
6lCiM/6vpLEq/MZFnxFxCEc+j/bwvOgXGYAbK7pjcSXpW565t4lMrFBnpp3P1hGb
fOAGcjeH6UPvzm1GxszqO20GqjRKmO+SAg3yBMlCcIHrtO8xnUFS
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:27 2025 by rpki-client