Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/rruo5t6Tke02b148OhkR9DJP4Qc.roa
File: rruo5t6Tke02b148OhkR9DJP4Qc.roa (raw, json)
Hash identifier: aI3msXEa6CjiAxN95ESNCrhuJwfighhsIEmzUY4M8mI=
Subject key identifier: AE:BB:A8:E6:DE:93:91:ED:36:6F:5E:3C:3A:19:11:F4:32:4F:E1:07
Certificate issuer: /CN=e87ce7df23140c0005125a61aad721531e681f0e
Certificate serial: 01931C2028CFBAD0429E8C4E0598AF33AF23
Authority key identifier: E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/rruo5t6Tke02b148OhkR9DJP4Qc.roa
Signing time: Mon 11 Nov 2024 16:48:09 +0000
ROA not before: Mon 11 Nov 2024 16:48:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47160
IP address blocks: 31.14.68.0/22 maxlen: 24
45.112.120.0/23 maxlen: 24
45.112.122.0/24 maxlen: 24
185.126.228.0/22 maxlen: 24
2a06:c480::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1c:20:28:cf:ba:d0:42:9e:8c:4e:05:98:af:33:af:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87ce7df23140c0005125a61aad721531e681f0e
Validity
Not Before: Nov 11 16:48:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aebba8e6de9391ed366f5e3c3a1911f4324fe107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:f5:af:00:31:fa:23:d1:ca:9f:58:da:24:
3e:ef:74:66:3f:24:4a:00:c8:69:49:eb:42:e4:11:
18:38:7d:f0:96:20:7d:49:35:23:72:ae:0e:9e:8c:
e0:6b:a3:59:f5:66:4a:bf:ed:c1:de:3b:81:fe:b2:
4a:19:ad:4d:4f:e1:e2:56:1a:57:2d:3c:b8:c2:84:
10:13:19:3b:cb:eb:53:f8:d9:4a:43:2b:6d:54:02:
e4:e3:88:75:63:84:c3:40:5f:08:2f:a1:25:1c:60:
08:31:a0:9f:80:f2:1e:f9:8d:90:37:b3:69:bd:7f:
8d:42:c0:9e:98:08:40:a9:a7:46:c2:a1:9f:25:c8:
7d:47:e8:2e:44:4a:92:8e:75:e0:50:a6:24:50:da:
52:95:ad:de:45:4c:8b:b5:79:16:17:07:54:ec:ca:
0f:f9:67:0b:e7:ac:97:4a:7d:63:eb:dc:5c:6b:f8:
c0:1b:fe:b9:df:53:48:b8:10:96:52:86:e7:a9:dd:
d0:29:ec:0f:a0:fe:23:f5:eb:4b:91:cd:06:15:0e:
ae:4e:dd:cb:57:d0:c1:68:3c:7e:0c:f6:be:f1:e8:
a8:a0:d7:83:ec:b0:d0:88:e8:7f:bf:8c:b9:f8:63:
2b:ce:58:38:1e:35:52:ac:fc:23:53:76:86:be:71:
63:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BB:A8:E6:DE:93:91:ED:36:6F:5E:3C:3A:19:11:F4:32:4F:E1:07
X509v3 Authority Key Identifier:
keyid:E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/rruo5t6Tke02b148OhkR9DJP4Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.68.0/22
45.112.120.0-45.112.122.255
185.126.228.0/22
IPv6:
2a06:c480::/29
Signature Algorithm: sha256WithRSAEncryption
a2:e7:44:47:aa:19:72:e3:cb:eb:3f:0e:79:a1:35:d9:b4:3e:
f4:19:04:d2:ad:e5:92:23:e8:ba:fa:ce:ee:15:51:3a:d6:af:
c2:cc:48:12:a8:59:0c:d5:38:ce:8f:ee:0f:3d:e4:44:eb:8b:
78:9d:0e:4d:3a:a9:a3:df:a3:a6:a0:db:90:98:94:cb:c6:e9:
42:d8:0d:aa:74:bf:da:b7:39:ef:ad:e1:82:ea:2e:2e:4d:d6:
ad:d8:fc:12:01:eb:3e:23:60:26:b2:b8:f5:a6:64:dc:d3:b7:
38:bf:37:72:00:a4:54:1c:9a:db:1f:8d:38:73:06:3e:55:be:
0c:c7:dd:bf:24:cd:0c:09:0b:3d:f5:b6:9f:c4:f1:a9:49:77:
9c:72:89:f6:de:70:ac:6b:bd:dd:18:dc:6c:ad:40:fd:4d:bc:
19:bd:0d:f6:ef:bd:54:2d:e1:b7:12:4c:ef:31:91:a5:50:96:
1c:3c:20:ef:24:02:f3:23:51:e2:e0:83:e3:bb:cf:72:66:ac:
4a:5c:ce:f8:d4:0d:ce:b8:63:6e:bf:d3:85:4b:44:36:70:df:
57:47:f7:59:28:38:83:13:01:6a:cc:3c:69:99:2d:2b:b4:a5:
a7:40:d2:5b:f6:e4:77:f6:9d:b1:0d:e9:48:77:01:bf:42:24:
81:f0:8d:f4
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZMcICjPutBCnoxOBZivM68jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4N2NlN2RmMjMxNDBjMDAwNTEyNWE2MWFhZDcyMTUzMWU2
ODFmMGUwHhcNMjQxMTExMTY0ODA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWJiYThlNmRlOTM5MWVkMzY2ZjVlM2MzYTE5MTFmNDMyNGZlMTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDv1rwAx+iPRyp9Y2iQ+73RmPyRK
AMhpSetC5BEYOH3wliB9STUjcq4Onozga6NZ9WZKv+3B3juB/rJKGa1NT+HiVhpX
LTy4woQQExk7y+tT+NlKQyttVALk44h1Y4TDQF8IL6ElHGAIMaCfgPIe+Y2QN7Np
vX+NQsCemAhAqadGwqGfJch9R+guREqSjnXgUKYkUNpSla3eRUyLtXkWFwdU7MoP
+WcL56yXSn1j69xca/jAG/6531NIuBCWUobnqd3QKewPoP4j9etLkc0GFQ6uTt3L
V9DBaDx+DPa+8eiooNeD7LDQiOh/v4y5+GMrzlg4HjVSrPwjU3aGvnFjbQIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFK67qObek5HtNm9ePDoZEfQyT+EHMB8GA1UdIwQY
MBaAFOh8598jFAwABRJaYarXIVMeaB8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkh6bjN5TVVEQUFGRWxwaHF0Y2hVeDVvSHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC83NzY3NDctNjI0YS00OTRlLTk0YjIt
MzIzZDM0ZGVmYzhhLzEvcnJ1bzV0NlRrZTAyYjE0OE9oa1I5REpQNFFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC83NzY3NDctNjI0YS00OTRlLTk0YjItMzIzZDM0ZGVmYzhh
LzEvNkh6bjN5TVVEQUFGRWxwaHF0Y2hVeDVvSHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQCHw5EMAwD
BAMtcHgDBAAtcHoDBAK5fuQwDQQCAAIwBwMFAyoGxIAwDQYJKoZIhvcNAQELBQAD
ggEBAKLnREeqGXLjy+s/DnmhNdm0PvQZBNKt5ZIj6Lr6zu4VUTrWr8LMSBKoWQzV
OM6P7g895ETri3idDk06qaPfo6ag25CYlMvG6ULYDap0v9q3Oe+t4YLqLi5N1q3Y
/BIB6z4jYCayuPWmZNzTtzi/N3IApFQcmtsfjThzBj5VvgzH3b8kzQwJCz31tp/E
8alJd5xyifbecKxrvd0Y3GytQP1NvBm9DfbvvVQt4bcSTO8xkaVQlhw8IO8kAvMj
UeLgg+O7z3JmrEpczvjUDc64Y26/04VLRDZw31dH91koOIMTAWrMPGmZLSu0padA
0lv25Hf2nbEN6Uh3Ab9CJIHwjfQ=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:23 2025 by rpki-client