Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/nWakvWMfEsbfzZ2Tn1RVvcnK-XE.roa
File: nWakvWMfEsbfzZ2Tn1RVvcnK-XE.roa (raw, json)
Hash identifier: 9SE80WFKWzej2baFnsEcpsr1n20unc8XOyEyqiDK7/o=
Subject key identifier: 9D:66:A4:BD:63:1F:12:C6:DF:CD:9D:93:9F:54:55:BD:C9:CA:F9:71
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0194266BE43F948A76E0D7A21E1EF8DFE2A5
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/nWakvWMfEsbfzZ2Tn1RVvcnK-XE.roa
Signing time: Thu 02 Jan 2025 09:49:52 +0000
ROA not before: Thu 02 Jan 2025 09:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56382
IP address blocks: 45.152.124.0/24 maxlen: 24
45.152.125.0/24 maxlen: 24
45.152.126.0/24 maxlen: 24
45.152.127.0/24 maxlen: 24
194.5.96.0/24 maxlen: 24
194.5.99.0/24 maxlen: 24
2a0f:5700::/32 maxlen: 48
2a0f:5700:1220::/44 maxlen: 44
2a0f:5700:fe80::/48 maxlen: 48
2a0f:5701:1220::/44 maxlen: 44
2a0f:5701:fe01::/48 maxlen: 48
2a0f:5701:fe80::/48 maxlen: 48
2a0f:5702::/32 maxlen: 48
2a0f:5707:1220::/44 maxlen: 44
2a0f:5707:aa80::/44 maxlen: 48
2a0f:5707:ab80::/44 maxlen: 48
2a0f:5707:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 25 Mar 2025 09:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e4:3f:94:8a:76:e0:d7:a2:1e:1e:f8:df:e2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 09:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d66a4bd631f12c6dfcd9d939f5455bdc9caf971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f8:e7:09:56:5e:bb:55:bb:1c:75:b3:2c:ac:
0f:30:31:19:3a:4c:29:2d:40:40:8e:1f:19:63:f4:
1d:ff:5f:d1:2f:24:ce:cc:da:ab:45:14:35:70:20:
af:69:fa:f3:e9:db:09:e3:54:97:dc:bd:dd:bf:93:
c0:77:ef:8c:1b:de:20:05:b2:70:4f:07:4b:a8:c5:
03:36:d2:e1:97:a8:32:f5:00:d5:fc:9b:84:9a:38:
70:19:eb:0e:44:b0:4c:e2:b8:e3:b5:90:12:f7:3b:
2b:c2:90:f6:85:cb:8b:67:1f:52:22:d6:35:d9:27:
f0:8e:36:7e:72:ee:b2:1a:62:07:8a:47:ce:48:2a:
ca:0d:99:cb:0c:d5:eb:f1:8f:43:2e:54:66:07:b8:
ec:37:00:82:f5:f9:dc:0a:f9:47:95:da:3c:ae:9a:
36:9c:5a:92:b6:79:57:47:f4:14:86:2c:ca:29:d0:
e4:bc:46:9b:f7:d2:32:18:f8:27:17:5e:ea:cd:71:
b0:60:99:04:9e:fa:7a:9c:07:ef:0a:c3:ea:c0:63:
3a:85:c9:ba:b3:61:b5:67:68:53:ea:c0:49:60:a6:
ab:74:83:45:39:88:42:b9:6b:b5:58:c9:3b:a6:8c:
f2:d2:d7:f7:cd:73:f4:46:03:7c:e4:b6:2d:a2:37:
75:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:66:A4:BD:63:1F:12:C6:DF:CD:9D:93:9F:54:55:BD:C9:CA:F9:71
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/nWakvWMfEsbfzZ2Tn1RVvcnK-XE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.124.0/22
194.5.96.0/24
194.5.99.0/24
IPv6:
2a0f:5700::/32
2a0f:5701:1220::/44
2a0f:5701:fe01::/48
2a0f:5701:fe80::/48
2a0f:5702::/32
2a0f:5707:1220::/44
2a0f:5707:aa80::/44
2a0f:5707:ab80::/44
2a0f:5707:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
86:df:8a:0b:28:d3:78:c1:6f:f7:9c:fb:e5:83:1d:25:89:00:
61:a0:1e:2e:d8:67:37:75:02:fe:bc:70:3e:ce:29:e2:bd:7f:
27:f6:3d:04:fd:9e:91:d1:3a:04:d3:d8:9b:d2:5f:85:bb:35:
f7:57:84:81:28:42:80:df:a8:03:2b:40:ac:3e:27:7c:82:41:
ff:47:0f:ce:ce:ca:b6:fe:92:df:4a:53:25:b6:c0:60:fc:76:
8a:57:71:93:e8:f7:c8:88:9e:fd:71:34:1c:33:8a:6f:2b:0c:
f4:2b:ab:4f:b6:8f:f1:9a:f5:02:33:80:07:b7:a8:b5:4d:3f:
72:de:fd:b4:e8:05:4d:5a:0d:df:a7:53:b4:1b:eb:20:e5:16:
85:a5:87:3e:83:c6:82:f0:3d:77:20:f2:d9:80:67:43:f6:e7:
f1:3b:7d:ed:af:c9:2e:dc:d4:78:f6:21:58:87:e1:f2:39:05:
00:06:cf:44:a5:79:08:65:83:8c:8d:cd:55:31:e3:f0:ed:04:
e9:67:67:63:aa:25:28:23:5c:97:a7:94:4d:27:68:34:61:53:
92:11:4b:15:bf:03:53:81:13:a8:ba:5a:99:70:14:84:0c:33:
e0:87:be:2b:13:f6:bb:51:74:3d:8e:fd:03:94:6c:3a:9d:23:
4a:87:9e:cd
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgISAZQma+Q/lIp24NeiHh743+KlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk
NWFlZjAwHhcNMjUwMTAyMDk0OTUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDY2YTRiZDYzMWYxMmM2ZGZjZDlkOTM5ZjU0NTViZGM5Y2FmOTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPjnCVZeu1W7HHWzLKwPMDEZOkwp
LUBAjh8ZY/Qd/1/RLyTOzNqrRRQ1cCCvafrz6dsJ41SX3L3dv5PAd++MG94gBbJw
TwdLqMUDNtLhl6gy9QDV/JuEmjhwGesORLBM4rjjtZAS9zsrwpD2hcuLZx9SItY1
2SfwjjZ+cu6yGmIHikfOSCrKDZnLDNXr8Y9DLlRmB7jsNwCC9fncCvlHldo8rpo2
nFqStnlXR/QUhizKKdDkvEab99IyGPgnF17qzXGwYJkEnvp6nAfvCsPqwGM6hcm6
s2G1Z2hT6sBJYKardINFOYhCuWu1WMk7pozy0tf3zXP0RgN85LYtojd1KQIDAQAB
o4ICazCCAmcwHQYDVR0OBBYEFJ1mpL1jHxLG382dk59UVb3JyvlxMB8GA1UdIwQY
MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt
Y2MxYzliNWY2NjQwLzEvbldha3ZXTWZFc2JmeloyVG4xUlZ2Y25LLVhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw
LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGABggrBgEFBQcBBwEB/wRxMG8wGAQCAAEwEgMEAi2YfAME
AMIFYAMEAMIFYzBTBAIAAjBNAwUAKg9XAAMHBCoPVwESIAMHACoPVwH+AQMHACoP
VwH+gAMFACoPVwIDBwQqD1cHEiADBwQqD1cHqoADBwQqD1cHq4ADBwAqD1cH//8w
DQYJKoZIhvcNAQELBQADggEBAIbfigso03jBb/ec++WDHSWJAGGgHi7YZzd1Av68
cD7OKeK9fyf2PQT9npHROgTT2JvSX4W7NfdXhIEoQoDfqAMrQKw+J3yCQf9HD87O
yrb+kt9KUyW2wGD8dopXcZPo98iInv1xNBwzim8rDPQrq0+2j/Ga9QIzgAe3qLVN
P3Le/bToBU1aDd+nU7Qb6yDlFoWlhz6DxoLwPXcg8tmAZ0P25/E7fe2vyS7c1Hj2
IViH4fI5BQAGz0SleQhlg4yNzVUx4/DtBOlnZ2OqJSgjXJenlE0naDRhU5IRSxW/
A1OBE6i6WplwFIQMM+CHvisT9rtRdD2O/QOUbDqdI0qHns0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:52:41 2025 by rpki-client