Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/xSeWW_1tzFVx0tzSY61uY6uM9fI.roa
File: xSeWW_1tzFVx0tzSY61uY6uM9fI.roa (raw, json)
Hash identifier: w9X0bLv+Th1bWRnIho+nNqkG/uPPWsHNC5sJdhQwatw=
Subject key identifier: C5:27:96:5B:FD:6D:CC:55:71:D2:DC:D2:63:AD:6E:63:AB:8C:F5:F2
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 0194266A29735F87AB5BC8B4468C09AD2011
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/xSeWW_1tzFVx0tzSY61uY6uM9fI.roa
Signing time: Thu 02 Jan 2025 09:47:59 +0000
ROA not before: Thu 02 Jan 2025 09:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43361
IP address blocks: 31.133.98.0/23 maxlen: 23
45.10.89.0/24 maxlen: 24
185.175.94.0/23 maxlen: 23
194.31.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Jan 2025 15:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:29:73:5f:87:ab:5b:c8:b4:46:8c:09:ad:20:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Jan 2 09:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c527965bfd6dcc5571d2dcd263ad6e63ab8cf5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:62:1b:a3:32:62:cb:43:94:fd:71:64:c8:
be:ff:d2:0d:06:8a:80:26:ee:d0:de:ae:88:d3:1f:
42:e1:84:1c:e1:8d:03:9f:de:75:4c:eb:c8:a8:26:
94:54:99:11:12:c0:66:d1:40:f1:5b:63:be:1a:d3:
5f:4c:bf:a8:52:7d:33:6e:2e:b0:02:fd:5e:0f:db:
75:e1:a6:4a:35:3d:3d:29:5b:e8:cf:ca:c3:55:67:
d9:33:67:94:8c:0b:13:f3:f3:6d:2b:96:2c:eb:d5:
b2:14:ac:97:75:9f:2b:61:61:0d:15:ec:41:e0:a3:
e4:73:39:5a:85:1f:0f:22:96:e9:47:c8:89:c8:1c:
a5:68:3f:16:ee:f8:9a:1f:19:2a:23:68:29:e6:cc:
48:74:d5:8f:28:9e:0e:70:57:e4:96:c5:d6:e3:7c:
f4:be:a9:a0:6a:4f:18:5d:6f:1c:cd:d9:78:e9:0f:
42:9f:47:27:44:c0:f4:1a:45:2f:af:b6:c2:4c:74:
ea:da:b2:25:a6:12:b6:18:00:e1:e7:eb:35:ef:e0:
f1:32:89:a3:5e:aa:c2:8d:f1:e5:98:31:a3:56:63:
bc:7c:d9:50:4a:fe:dc:99:41:37:96:ba:56:ca:00:
b0:8e:9e:62:8b:ee:a9:fc:b9:7b:e1:03:0a:e5:8a:
eb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:27:96:5B:FD:6D:CC:55:71:D2:DC:D2:63:AD:6E:63:AB:8C:F5:F2
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/xSeWW_1tzFVx0tzSY61uY6uM9fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.98.0/23
45.10.89.0/24
185.175.94.0/23
194.31.244.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:dd:bd:85:8e:8f:bc:83:1d:6c:d6:1d:41:17:c6:2e:32:25:
a9:8f:94:1a:7a:67:d1:a5:19:da:ed:f4:77:15:e8:2a:70:78:
9a:3c:43:53:9e:ab:7f:f5:95:dc:d7:ce:d8:fe:f0:d8:d3:5b:
08:14:da:7c:4d:85:34:03:72:41:43:54:41:56:ad:6d:f8:dc:
cb:89:d8:06:f1:8e:1a:ee:20:d0:58:00:7c:46:2b:cb:db:64:
b5:59:f2:e3:0a:a4:95:49:86:f8:4a:75:8e:c6:aa:fa:be:c0:
0c:ba:f1:1d:75:86:ca:d7:36:bb:bd:3f:29:60:27:24:8c:6c:
4b:fa:47:41:18:6e:4e:20:5a:2b:46:5a:11:e8:e1:85:84:b1:
a5:74:5e:d1:be:a9:8d:c4:d0:a6:ce:70:37:61:5f:32:53:cd:
d2:49:0b:de:89:52:bd:a0:f1:d5:d7:ab:4b:5b:8c:fb:7e:05:
34:bb:8a:2b:8c:a8:25:96:82:3b:6d:e3:54:7b:45:e8:01:6b:
09:23:f7:c5:24:f9:4b:41:e4:01:3e:04:8a:b8:17:45:ff:11:
83:17:8c:37:b8:fb:9b:79:f7:0d:69:2b:b7:40:ff:7f:da:82:
fd:0e:62:02:a6:9d:36:09:08:81:33:8b:46:45:92:81:8e:3f:
0d:a9:0d:ce
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQmailzX4erW8i0RowJrSARMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZmFkOTZkZDA1YWY4YzJkMjYxOTJjODQxMTMxZjJmOTc0
NTlmZWQwHhcNMjUwMTAyMDk0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTI3OTY1YmZkNmRjYzU1NzFkMmRjZDI2M2FkNmU2M2FiOGNmNWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZdiG6MyYstDlP1xZMi+/9INBoqA
Ju7Q3q6I0x9C4YQc4Y0Dn951TOvIqCaUVJkREsBm0UDxW2O+GtNfTL+oUn0zbi6w
Av1eD9t14aZKNT09KVvoz8rDVWfZM2eUjAsT8/NtK5Ys69WyFKyXdZ8rYWENFexB
4KPkczlahR8PIpbpR8iJyBylaD8W7viaHxkqI2gp5sxIdNWPKJ4OcFfklsXW43z0
vqmgak8YXW8czdl46Q9Cn0cnRMD0GkUvr7bCTHTq2rIlphK2GADh5+s17+DxMomj
XqrCjfHlmDGjVmO8fNlQSv7cmUE3lrpWygCwjp5ii+6p/Ll74QMK5YrrNwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFMUnllv9bcxVcdLc0mOtbmOrjPXyMB8GA1UdIwQY
MBaAFFX62W3QWvjC0mGSyEETHy+XRZ/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAt
MzBmZjJjODNmMDAxLzEveFNlV1dfMXR6RlZ4MHR6U1k2MXVZNnVNOWZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAtMzBmZjJjODNmMDAx
LzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBH4ViAwQA
LQpZAwQBua9eAwQAwh/0MA0GCSqGSIb3DQEBCwUAA4IBAQB+3b2Fjo+8gx1s1h1B
F8YuMiWpj5QaemfRpRna7fR3FegqcHiaPENTnqt/9ZXc187Y/vDY01sIFNp8TYU0
A3JBQ1RBVq1t+NzLidgG8Y4a7iDQWAB8RivL22S1WfLjCqSVSYb4SnWOxqr6vsAM
uvEddYbK1za7vT8pYCckjGxL+kdBGG5OIForRloR6OGFhLGldF7RvqmNxNCmznA3
YV8yU83SSQveiVK9oPHV16tLW4z7fgU0u4orjKglloI7beNUe0XoAWsJI/fFJPlL
QeQBPgSKuBdF/xGDF4w3uPubefcNaSu3QP9/2oL9DmICpp02CQiBM4tGRZKBjj8N
qQ3O
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:41:37 2025 by rpki-client