Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/iPlA1N0X0bpJ-bjErFxRg0l2obo.roa
File: iPlA1N0X0bpJ-bjErFxRg0l2obo.roa (raw, json)
Hash identifier: 77bPPhxtpjaHieE2XroHZ3d1RnF+MvOZDGy5dBXYcH0=
Subject key identifier: 88:F9:40:D4:DD:17:D1:BA:49:F9:B8:C4:AC:5C:51:83:49:76:A1:BA
Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial: 018CC726DC45B562E3717B9BB305A130E289
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/iPlA1N0X0bpJ-bjErFxRg0l2obo.roa
Signing time: Mon 01 Jan 2024 22:31:01 +0000
ROA not before: Mon 01 Jan 2024 22:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24634
IP address blocks: 91.245.248.0/22 maxlen: 24
82.146.160.0/19 maxlen: 24
2a0d:b3c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:dc:45:b5:62:e3:71:7b:9b:b3:05:a1:30:e2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
Validity
Not Before: Jan 1 22:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88f940d4dd17d1ba49f9b8c4ac5c51834976a1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c5:95:4c:0f:c5:0c:58:bb:5b:d4:1f:e3:30:
d4:39:93:61:c0:39:59:d0:2a:7c:21:59:7b:9f:10:
be:ab:08:f6:22:9a:ca:a0:1c:44:c1:55:de:ca:12:
65:65:3d:89:c0:cd:c5:ed:24:fe:96:5f:8a:62:02:
00:df:95:80:e4:40:1f:aa:26:8c:8a:e2:9a:05:7b:
ad:b4:dc:63:7c:ef:46:b0:9d:66:fc:ce:b6:9d:cf:
bb:2e:51:35:e1:dd:f7:66:2a:7b:da:90:b4:aa:4d:
28:97:6c:84:83:cf:cb:a5:fd:c1:5f:87:a5:cf:39:
f2:3b:66:1e:1e:54:47:be:ff:ac:8e:d6:be:c1:18:
2a:b1:eb:c4:eb:1c:8a:cb:28:c0:7e:9a:ac:50:88:
94:b2:11:59:51:55:88:00:b0:7b:30:21:5c:5f:49:
15:a9:03:98:da:e0:84:70:05:c2:2e:24:59:10:59:
4a:ff:77:25:14:5a:5d:09:2d:75:49:3d:15:37:34:
0e:e5:e7:bb:1e:58:8d:04:65:7f:36:fa:9b:67:e0:
a5:32:66:da:9e:17:3a:f8:4f:28:bb:a6:81:00:53:
ef:bc:87:54:a2:70:cf:34:f6:72:15:67:fe:3a:7d:
a6:d3:51:81:76:82:f6:2e:a8:9c:51:fa:98:f7:fc:
d1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F9:40:D4:DD:17:D1:BA:49:F9:B8:C4:AC:5C:51:83:49:76:A1:BA
X509v3 Authority Key Identifier:
keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/iPlA1N0X0bpJ-bjErFxRg0l2obo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.160.0/19
91.245.248.0/22
IPv6:
2a0d:b3c0::/29
Signature Algorithm: sha256WithRSAEncryption
34:18:f9:b3:5b:22:58:84:43:65:de:ee:bc:31:fc:f9:e2:9c:
6d:d6:86:98:b2:de:9d:72:c5:4e:f0:82:b3:92:64:a1:a7:27:
77:91:04:de:62:98:4c:7d:88:46:ad:a8:7c:45:bf:bd:88:c8:
d0:c6:11:a8:26:74:57:6a:ae:b1:61:d7:ae:05:60:43:aa:80:
b5:cb:fb:b3:00:02:20:ea:9e:6f:08:ed:3c:3d:9c:cf:87:ca:
80:42:e6:31:29:b5:ca:b6:3d:b8:37:9c:38:0e:d1:fc:f4:54:
20:98:19:62:13:38:d8:00:4c:a2:84:d4:60:12:05:bf:23:84:
fc:21:41:97:e2:f3:11:2a:be:c0:3d:1f:f4:6c:e1:5e:d5:b5:
9d:69:d5:d9:7a:10:33:eb:56:7e:0a:ca:ee:d5:08:9c:4b:2b:
f1:05:e2:ad:1b:0a:14:57:ff:4e:22:0e:78:ed:21:e9:2d:a8:
28:f7:51:5f:12:22:9b:48:db:7d:8a:a5:30:75:9c:dc:04:02:
4b:70:23:20:81:2a:ac:21:3c:c2:0a:ca:d8:c0:65:f3:c7:ef:
cd:a0:b0:5c:05:8f:b2:36:cd:d0:13:ef:2f:4e:7e:16:94:a3:
18:53:3e:f3:46:cf:f6:e1:0c:2c:e3:9c:4d:2d:13:f7:4c:e4:
ac:48:5c:97
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzHJtxFtWLjcXubswWhMOKJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYzg4OTk2NGIzNWI1MWJhOGU1ZTY3OWExNWIxOWEzMWYx
MzM1NzgwHhcNMjQwMTAxMjIzMTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGY5NDBkNGRkMTdkMWJhNDlmOWI4YzRhYzVjNTE4MzQ5NzZhMWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMWVTA/FDFi7W9Qf4zDUOZNhwDlZ
0Cp8IVl7nxC+qwj2IprKoBxEwVXeyhJlZT2JwM3F7ST+ll+KYgIA35WA5EAfqiaM
iuKaBXuttNxjfO9GsJ1m/M62nc+7LlE14d33Zip72pC0qk0ol2yEg8/Lpf3BX4el
zznyO2YeHlRHvv+sjta+wRgqsevE6xyKyyjAfpqsUIiUshFZUVWIALB7MCFcX0kV
qQOY2uCEcAXCLiRZEFlK/3clFFpdCS11ST0VNzQO5ee7HliNBGV/NvqbZ+ClMmba
nhc6+E8ou6aBAFPvvIdUonDPNPZyFWf+On2m01GBdoL2LqicUfqY9/zRbQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFIj5QNTdF9G6Sfm4xKxcUYNJdqG6MB8GA1UdIwQY
MBaAFBLIiZZLNbUbqOXmeaFbGaMfEzV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYt
YWQ2ZjBiZjg4NDM4LzEvaVBsQTFOMFgwYnBKLWJqRXJGeFJnMGwyb2JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYtYWQ2ZjBiZjg4NDM4
LzEvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFUpKgAwQC
W/X4MA0EAgACMAcDBQMqDbPAMA0GCSqGSIb3DQEBCwUAA4IBAQA0GPmzWyJYhENl
3u68Mfz54pxt1oaYst6dcsVO8IKzkmShpyd3kQTeYphMfYhGrah8Rb+9iMjQxhGo
JnRXaq6xYdeuBWBDqoC1y/uzAAIg6p5vCO08PZzPh8qAQuYxKbXKtj24N5w4DtH8
9FQgmBliEzjYAEyihNRgEgW/I4T8IUGX4vMRKr7APR/0bOFe1bWdadXZehAz61Z+
Csru1QicSyvxBeKtGwoUV/9OIg547SHpLago91FfEiKbSNt9iqUwdZzcBAJLcCMg
gSqsITzCCsrYwGXzx+/NoLBcBY+yNs3QE+8vTn4WlKMYUz7zRs/24Qws45xNLRP3
TOSsSFyX
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:02:58 2025 by rpki-client