Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/inTr7ldSWwpANg6GO14t7Dia38o.roa
File: inTr7ldSWwpANg6GO14t7Dia38o.roa (raw, json)
Hash identifier: edGPrw2B1EHv2C24RhOFCIkUYKJi39R6bKHsKH+3QUc=
Subject key identifier: 8A:74:EB:EE:57:52:5B:0A:40:36:0E:86:3B:5E:2D:EC:38:9A:DF:CA
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B3A52D2FEE8EB0981B2896CC25AE1B
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/inTr7ldSWwpANg6GO14t7Dia38o.roa
Signing time: Thu 02 Jan 2025 15:47:52 +0000
ROA not before: Thu 02 Jan 2025 15:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 45.91.22.0/24 maxlen: 24
45.130.141.0/24 maxlen: 24
2a0f:f44::/32 maxlen: 48
2a0f:f47::/32 maxlen: 48
2a0f:2740::/29 maxlen: 48
2a0f:e383::/32 maxlen: 48
2a0f:e384::/32 maxlen: 48
2a0f:e385::/32 maxlen: 48
2a0f:e387::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 14 Jan 2025 06:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:a5:2d:2f:ee:8e:b0:98:1b:28:96:cc:25:ae:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a74ebee57525b0a40360e863b5e2dec389adfca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a6:65:ab:49:ec:b6:8b:0b:2d:b0:af:87:4e:
fc:0a:66:89:0c:b6:e4:8e:b2:73:02:0b:79:f4:a4:
6c:f8:1f:22:14:79:51:22:90:42:95:91:eb:5e:ab:
8e:84:e2:6b:4a:a4:e3:2b:71:c8:c4:f7:25:95:28:
e6:7b:fa:4b:83:d1:dd:9d:b8:c0:c9:2a:c0:13:88:
ec:11:84:30:b8:7d:3a:66:57:38:b8:e3:6f:f5:14:
17:3b:d2:ce:1a:8a:5f:f2:3c:a6:42:1d:1d:b4:3b:
fe:e5:79:1f:f5:f7:14:75:f2:ff:32:5d:e6:62:91:
f5:46:1b:7a:26:79:1a:48:a7:99:7e:48:a7:6b:e3:
3e:31:e9:5c:f2:48:66:c6:07:f0:21:78:f4:cc:36:
af:d3:75:4d:15:a9:35:ae:69:01:86:eb:4a:14:b0:
31:52:52:9a:b9:c0:c9:aa:da:52:82:40:65:76:60:
0b:9c:db:35:07:72:4f:6a:25:5e:aa:b8:36:bf:1c:
c4:c2:05:6a:07:1c:18:5b:d5:4f:bd:11:1b:db:7e:
91:d4:4e:6a:1b:06:a9:f6:11:8a:eb:3c:29:53:7a:
2e:23:77:ef:9c:ac:7c:0c:1e:fe:6d:0c:84:e4:4f:
74:d7:27:a6:2f:8d:7e:c2:09:0f:d3:fe:bc:d3:79:
76:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:74:EB:EE:57:52:5B:0A:40:36:0E:86:3B:5E:2D:EC:38:9A:DF:CA
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/inTr7ldSWwpANg6GO14t7Dia38o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.22.0/24
45.130.141.0/24
IPv6:
2a0f:f44::/32
2a0f:f47::/32
2a0f:2740::/29
2a0f:e383::-2a0f:e385:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:e387::/32
Signature Algorithm: sha256WithRSAEncryption
25:2f:26:fd:94:5a:95:ff:ad:e9:b8:53:e6:cc:1e:4a:98:06:
e7:ea:3e:ef:ee:d9:dc:8a:11:2b:4d:c4:45:62:a3:ef:ec:34:
7b:92:7d:f7:0b:12:fb:66:0b:cb:c1:27:3e:bf:41:a6:4d:33:
b7:14:b5:ce:e0:0c:c1:28:51:a9:a9:74:1d:03:88:32:10:86:
32:9e:d9:5c:96:75:07:2d:cb:d7:bb:db:c4:4f:2a:e6:c6:c9:
ec:d4:98:5d:95:26:a4:87:8b:7d:72:e7:17:6f:d8:fb:f6:3b:
61:09:2d:5c:46:e5:a6:84:82:db:a9:bf:dc:0c:78:7a:52:df:
e9:f0:52:32:52:81:15:bd:50:17:c7:04:67:89:5f:f1:62:29:
99:8f:d8:d2:4d:f3:e9:96:0a:22:2c:bf:4a:6f:08:80:77:c1:
6d:26:fc:b3:d5:2c:1b:f3:55:dc:14:d4:07:ba:0b:98:c7:e1:
7c:b8:14:3d:e6:9d:0a:23:1b:6b:d3:97:82:e0:af:a0:bb:6d:
16:5a:a3:16:dc:e2:20:dc:2b:2e:0b:33:a5:ff:81:5d:fe:dc:
ee:59:91:ac:8f:b3:9d:a2:e5:cb:94:0b:48:11:0f:7a:81:43:
ee:ff:07:dc:87:a7:cb:b3:05:1e:42:bf:b5:bb:2b:6e:16:3b:
9a:17:d2:fb
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAZQns6UtL+6OsJgbKJbMJa4bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjUwMTAyMTU0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTc0ZWJlZTU3NTI1YjBhNDAzNjBlODYzYjVlMmRlYzM4OWFkZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqZlq0nstosLLbCvh078CmaJDLbk
jrJzAgt59KRs+B8iFHlRIpBClZHrXquOhOJrSqTjK3HIxPcllSjme/pLg9HdnbjA
ySrAE4jsEYQwuH06Zlc4uONv9RQXO9LOGopf8jymQh0dtDv+5Xkf9fcUdfL/Ml3m
YpH1Rht6JnkaSKeZfkina+M+Melc8khmxgfwIXj0zDav03VNFak1rmkBhutKFLAx
UlKaucDJqtpSgkBldmALnNs1B3JPaiVeqrg2vxzEwgVqBxwYW9VPvREb236R1E5q
Gwap9hGK6zwpU3ouI3fvnKx8DB7+bQyE5E901yemL41+wgkP0/6803l2hQIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFIp06+5XUlsKQDYOhjteLew4mt/KMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvaW5UcjdsZFNXd3BBTmc2R08xNHQ3RGlhMzhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDASBAIAATAMAwQALVsWAwQA
LYKNMDIEAgACMCwDBQAqDw9EAwUAKg8PRwMFAyoPJ0AwDgMFACoP44MDBQEqD+OE
AwUAKg/jhzANBgkqhkiG9w0BAQsFAAOCAQEAJS8m/ZRalf+t6bhT5sweSpgG5+o+
7+7Z3IoRK03ERWKj7+w0e5J99wsS+2YLy8EnPr9Bpk0ztxS1zuAMwShRqal0HQOI
MhCGMp7ZXJZ1By3L17vbxE8q5sbJ7NSYXZUmpIeLfXLnF2/Y+/Y7YQktXEblpoSC
26m/3Ax4elLf6fBSMlKBFb1QF8cEZ4lf8WIpmY/Y0k3z6ZYKIiy/Sm8IgHfBbSb8
s9UsG/NV3BTUB7oLmMfhfLgUPeadCiMba9OXguCvoLttFlqjFtziINwrLgszpf+B
Xf7c7lmRrI+znaLly5QLSBEPeoFD7v8H3Ieny7MFHkK/tbsrbhY7mhfS+w==
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:01:13 2025 by rpki-client