Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/giV5dKb1oBEJZPCl_fy2ANaRmuc.roa
File: giV5dKb1oBEJZPCl_fy2ANaRmuc.roa (raw, json)
Hash identifier: a8T1CLZbgO51rYwmWnDtGfoyX3ZtJwIx279BOQMRH6E=
Subject key identifier: 82:25:79:74:A6:F5:A0:11:09:64:F0:A5:FD:FC:B6:00:D6:91:9A:E7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143CFA8C5A663A07F0F3788B8D5B064
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/giV5dKb1oBEJZPCl_fy2ANaRmuc.roa
Signing time: Wed 01 Jan 2025 09:47:59 +0000
ROA not before: Wed 01 Jan 2025 09:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 77.93.138.0/23 maxlen: 24
82.152.52.0/23 maxlen: 24
82.152.55.0/24 maxlen: 24
109.176.25.0/24 maxlen: 24
213.130.150.0/24 maxlen: 24
213.210.40.0/23 maxlen: 24
213.210.48.0/23 maxlen: 24
213.218.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:cf:a8:c5:a6:63:a0:7f:0f:37:88:b8:d5:b0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82257974a6f5a0110964f0a5fdfcb600d6919ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8b:f1:a1:c6:51:5a:b3:8e:77:0d:b0:fa:c0:
a7:e5:5f:b7:e1:d6:f0:28:c5:f4:ff:e7:11:42:58:
83:2f:f0:64:6b:d4:96:99:c7:73:be:07:5c:3e:72:
a8:4b:52:a6:3c:5f:24:9f:24:f0:a4:c5:6a:c8:73:
2d:95:92:24:9a:8d:f1:40:ac:64:0e:6e:c4:f0:74:
8b:40:82:af:a8:0a:f6:40:97:b8:f5:2b:52:28:11:
e8:4e:29:bf:f8:2a:e4:88:9f:79:2c:cb:a8:d8:f8:
18:d1:e4:b3:d2:bc:a8:22:20:84:e5:66:9a:50:7d:
4d:90:0a:83:6f:fe:d2:50:eb:af:25:d2:de:bf:7a:
9b:52:51:df:9c:fc:71:48:4c:6a:30:84:01:63:67:
2d:d4:35:f4:c6:4e:7f:e3:23:28:f0:7e:65:6b:0c:
37:4b:87:6f:a8:38:70:5c:ee:5c:10:8b:bb:04:a2:
bf:ea:4c:a4:3a:10:8d:12:d9:36:83:b3:75:4d:fa:
8d:fd:e9:74:4a:42:40:8e:c8:e2:43:5d:37:06:e4:
31:5e:86:3a:e8:61:4a:b6:98:a3:1e:3a:6a:91:12:
cb:ce:a6:a1:c1:52:b9:69:3f:b7:c6:25:00:f2:ef:
dd:f2:d4:13:c1:e3:8c:1a:fb:61:95:2d:cf:60:ba:
e4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:25:79:74:A6:F5:A0:11:09:64:F0:A5:FD:FC:B6:00:D6:91:9A:E7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/giV5dKb1oBEJZPCl_fy2ANaRmuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.138.0/23
82.152.52.0/23
82.152.55.0/24
109.176.25.0/24
213.130.150.0/24
213.210.40.0/23
213.210.48.0/23
213.218.226.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:02:a5:00:65:33:b0:02:bd:c9:c4:97:15:6c:df:a5:01:48:
03:18:80:89:bd:5d:87:31:bd:f8:44:ee:e7:95:c8:5c:a4:18:
96:8b:55:6f:a6:1e:48:c4:4e:2b:e3:51:e7:82:d6:a0:e0:91:
79:e0:41:88:6e:94:f9:4d:07:f2:e5:f5:41:5d:78:56:ae:0a:
47:83:bb:03:83:bd:ac:e4:b5:54:d6:3f:61:3c:c5:4e:64:bc:
70:30:a8:7f:1a:08:fd:02:3a:64:bf:b3:1a:3d:e8:20:a3:b0:
d7:d1:6c:29:bb:57:00:b1:59:7d:c4:44:7d:c8:e7:e3:e8:3b:
fe:ca:f0:f7:59:6c:9c:c5:8c:54:2f:e3:e7:d8:99:20:d9:07:
43:db:4a:73:ce:73:96:e6:c7:e3:3d:af:8c:9f:5d:55:b0:fc:
21:a0:7e:63:55:74:22:64:1b:cb:cb:92:5a:65:ae:ad:e9:d9:
de:c4:3a:68:c0:d8:97:b2:72:50:85:a4:c5:be:36:71:a9:79:
d9:08:bc:8f:f4:35:76:74:94:6d:a5:f5:4a:94:b0:9b:04:9c:
72:a8:da:f7:33:5a:2a:d8:f9:ad:b8:18:8f:1e:8f:87:d8:ba:
c6:d9:0e:a8:72:6c:c9:a3:73:b0:56:ac:ed:c9:cb:0b:26:a9:
d0:c1:ee:86
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZQhQ8+oxaZjoH8PN4i41bBkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwMTAxMDk0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjI1Nzk3NGE2ZjVhMDExMDk2NGYwYTVmZGZjYjYwMGQ2OTE5YWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34vxocZRWrOOdw2w+sCn5V+34dbw
KMX0/+cRQliDL/Bka9SWmcdzvgdcPnKoS1KmPF8knyTwpMVqyHMtlZIkmo3xQKxk
Dm7E8HSLQIKvqAr2QJe49StSKBHoTim/+CrkiJ95LMuo2PgY0eSz0ryoIiCE5Waa
UH1NkAqDb/7SUOuvJdLev3qbUlHfnPxxSExqMIQBY2ct1DX0xk5/4yMo8H5laww3
S4dvqDhwXO5cEIu7BKK/6kykOhCNEtk2g7N1TfqN/el0SkJAjsjiQ103BuQxXoY6
6GFKtpijHjpqkRLLzqahwVK5aT+3xiUA8u/d8tQTweOMGvthlS3PYLrkywIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFIIleXSm9aARCWTwpf38tgDWkZrnMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvZ2lWNWRLYjFvQkVKWlBDbF9meTJBTmFSbXVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBTV2KAwQB
Upg0AwQAUpg3AwQAbbAZAwQA1YKWAwQB1dIoAwQB1dIwAwQA1driMA0GCSqGSIb3
DQEBCwUAA4IBAQBeAqUAZTOwAr3JxJcVbN+lAUgDGICJvV2HMb34RO7nlchcpBiW
i1Vvph5IxE4r41Hngtag4JF54EGIbpT5TQfy5fVBXXhWrgpHg7sDg72s5LVU1j9h
PMVOZLxwMKh/Ggj9Ajpkv7MaPeggo7DX0Wwpu1cAsVl9xER9yOfj6Dv+yvD3WWyc
xYxUL+Pn2Jkg2QdD20pzznOW5sfjPa+Mn11VsPwhoH5jVXQiZBvLy5JaZa6t6dne
xDpowNiXsnJQhaTFvjZxqXnZCLyP9DV2dJRtpfVKlLCbBJxyqNr3M1oq2PmtuBiP
Ho+H2LrG2Q6ocmzJo3OwVqztycsLJqnQwe6G
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:05:26 2025 by rpki-client