Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Fmw4nHwtQudzZlKN2sME45lFPTA.roa
File: Fmw4nHwtQudzZlKN2sME45lFPTA.roa (raw, json)
Hash identifier: vdcemfhARcCeDKOVcwS5bki3DAzgmdzp6m6WgLMMDMw=
Subject key identifier: 16:6C:38:9C:7C:2D:42:E7:73:66:52:8D:DA:C3:04:E3:99:45:3D:30
Certificate issuer: /CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Certificate serial: 018CC5010A346E1D078E9D2A9EA842DDB132
Authority key identifier: 12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Fmw4nHwtQudzZlKN2sME45lFPTA.roa
Signing time: Mon 01 Jan 2024 12:30:28 +0000
ROA not before: Mon 01 Jan 2024 12:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15389
IP address blocks: 198.137.136.0/22 maxlen: 22
185.74.208.0/22 maxlen: 22
193.34.105.0/24 maxlen: 24
193.34.104.0/22 maxlen: 22
81.18.224.0/20 maxlen: 20
178.19.192.0/20 maxlen: 20
212.55.32.0/19 maxlen: 19
88.85.32.0/19 maxlen: 19
217.172.80.0/20 maxlen: 20
2a02:e90::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0a:34:6e:1d:07:8e:9d:2a:9e:a8:42:dd:b1:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Validity
Not Before: Jan 1 12:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=166c389c7c2d42e77366528ddac304e399453d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f6:89:c1:bf:eb:44:d9:f4:33:81:1d:58:90:
99:4b:20:c0:ea:c7:2e:96:89:13:bf:32:da:94:2e:
59:57:64:cd:69:38:89:6f:17:c7:0d:c4:ec:f3:e9:
0b:93:00:96:95:5f:28:b0:bf:d0:ab:bf:14:5b:c2:
65:60:07:c3:01:e2:24:ca:db:6c:af:25:71:bf:d0:
04:c2:7e:fb:88:22:bd:eb:73:ba:28:77:0a:4b:79:
8d:b8:ce:12:89:32:52:6b:1f:58:e5:d8:4b:98:1c:
a6:94:cf:ae:2d:8a:c9:c6:1a:19:19:ac:fe:b5:ac:
e8:2f:af:4b:45:46:74:cd:1c:dc:6d:b2:24:c0:3b:
91:bf:aa:5c:b2:3c:1e:8c:bb:a2:1f:25:03:bb:39:
d8:e8:54:a8:7e:ea:e6:54:98:68:49:09:38:37:64:
53:2a:88:96:bf:49:8d:67:96:33:ce:02:bf:70:5c:
e4:fa:12:74:9b:eb:89:55:e3:7e:5a:54:c5:5f:fc:
d8:e1:3e:6d:f1:aa:7e:5e:06:c9:5d:fd:dd:e0:9c:
ed:81:54:60:c3:82:66:49:7f:33:e1:3f:9a:58:4a:
cc:49:a8:68:79:91:8c:8b:e4:28:62:50:ed:72:66:
e5:bb:cb:e1:b2:bf:48:f2:64:8f:86:3e:c2:3e:57:
f4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6C:38:9C:7C:2D:42:E7:73:66:52:8D:DA:C3:04:E3:99:45:3D:30
X509v3 Authority Key Identifier:
keyid:12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Fmw4nHwtQudzZlKN2sME45lFPTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.18.224.0/20
88.85.32.0/19
178.19.192.0/20
185.74.208.0/22
193.34.104.0/22
198.137.136.0/22
212.55.32.0/19
217.172.80.0/20
IPv6:
2a02:e90::/32
Signature Algorithm: sha256WithRSAEncryption
92:7b:7d:17:e9:50:2e:f6:09:71:d9:d4:8b:7b:7e:9a:dc:46:
05:03:8e:f3:19:7c:09:b2:11:7f:59:cc:ce:e0:14:cc:81:40:
6b:5a:5e:91:05:eb:a5:a0:2c:66:93:be:7d:b5:ad:c7:3a:39:
11:b0:2d:5e:50:65:48:1c:66:d8:0d:c1:b6:37:2c:2c:b2:fa:
25:50:2c:6a:5d:11:fd:99:51:27:05:50:99:75:e0:93:f5:72:
92:c5:a7:6a:2a:e8:4e:dd:c4:a9:e0:99:6d:68:0f:72:fd:38:
78:88:db:07:ef:f9:2e:92:7a:50:f2:ef:71:82:36:55:24:10:
bc:cf:54:e6:84:0c:b7:75:e1:27:11:ce:c3:ea:cb:61:59:4b:
df:c3:e8:de:8a:80:80:45:86:83:76:89:1f:2c:ad:d4:3c:39:
92:43:27:1c:66:be:e4:a1:9f:ba:cb:2d:66:88:b3:fb:25:5c:
6c:38:cd:65:5f:7b:39:18:34:62:17:f9:14:1b:00:2b:af:a6:
91:0f:6d:a5:c5:73:a8:c9:7a:52:59:ba:dc:f2:63:7c:3d:7b:
4e:e7:a4:ed:e4:58:ed:0b:86:d2:2b:ce:ad:4a:76:4f:f0:0a:
ff:c4:c5:b2:e5:9b:b5:47:e7:d4:7e:c5:45:13:85:94:62:d7:
7c:a7:7c:8b
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAYzFAQo0bh0Hjp0qnqhC3bEyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyY2Q5YWRkMTYxMzdlOGJhYjk4ZDc4ZTJhMzM2MGJjOGJk
NmYwZjEwHhcNMjQwMTAxMTIzMDI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjZjMzg5YzdjMmQ0MmU3NzM2NjUyOGRkYWMzMDRlMzk5NDUzZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPaJwb/rRNn0M4EdWJCZSyDA6scu
lokTvzLalC5ZV2TNaTiJbxfHDcTs8+kLkwCWlV8osL/Qq78UW8JlYAfDAeIkytts
ryVxv9AEwn77iCK963O6KHcKS3mNuM4SiTJSax9Y5dhLmBymlM+uLYrJxhoZGaz+
tazoL69LRUZ0zRzcbbIkwDuRv6pcsjwejLuiHyUDuznY6FSofurmVJhoSQk4N2RT
KoiWv0mNZ5YzzgK/cFzk+hJ0m+uJVeN+WlTFX/zY4T5t8ap+XgbJXf3d4JztgVRg
w4JmSX8z4T+aWErMSahoeZGMi+QoYlDtcmblu8vhsr9I8mSPhj7CPlf0gwIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFBZsOJx8LULnc2ZSjdrDBOOZRT0wMB8GA1UdIwQY
MBaAFBLNmt0WE36Lq5jXjiozYLyL1vDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXMyYTNSWVRmb3VybU5lT0tqTmd2SXZXOFBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81N2NjNmUtOGIxYS00ODI3LTk5OWMt
MTcyZGY2YmNkNDViLzEvRm13NG5Id3RRdWR6WmxLTjJzTUU0NWxGUFRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My81N2NjNmUtOGIxYS00ODI3LTk5OWMtMTcyZGY2YmNkNDVi
LzEvRXMyYTNSWVRmb3VybU5lT0tqTmd2SXZXOFBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQEURLgAwQF
WFUgAwQEshPAAwQCuUrQAwQCwSJoAwQCxomIAwQF1DcgAwQE2axQMA0EAgACMAcD
BQAqAg6QMA0GCSqGSIb3DQEBCwUAA4IBAQCSe30X6VAu9glx2dSLe36a3EYFA47z
GXwJshF/WczO4BTMgUBrWl6RBeuloCxmk759ta3HOjkRsC1eUGVIHGbYDcG2Nyws
svolUCxqXRH9mVEnBVCZdeCT9XKSxadqKuhO3cSp4JltaA9y/Th4iNsH7/kuknpQ
8u9xgjZVJBC8z1TmhAy3deEnEc7D6sthWUvfw+jeioCARYaDdokfLK3UPDmSQycc
Zr7koZ+6yy1miLP7JVxsOM1lX3s5GDRiF/kUGwArr6aRD22lxXOoyXpSWbrc8mN8
PXtO56Tt5FjtC4bSK86tSnZP8Ar/xMWy5Zu1R+fUfsVFE4WUYtd8p3yL
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:40:48 2025 by rpki-client