Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/Ge3BjP6IyqTc_vfvjJslhQjeyFY.roa
File: Ge3BjP6IyqTc_vfvjJslhQjeyFY.roa (raw, json)
Hash identifier: qZrc8+Iq7rGRQyi5JJRYJhxcLJ//p47mCzIIPzif0YM=
Subject key identifier: 19:ED:C1:8C:FE:88:CA:A4:DC:FE:F7:EF:8C:9B:25:85:08:DE:C8:56
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 0194D011FA09CE077323C2FD00A7D2F1A6B6
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/Ge3BjP6IyqTc_vfvjJslhQjeyFY.roa
Signing time: Tue 04 Feb 2025 08:27:06 +0000
ROA not before: Tue 04 Feb 2025 08:27:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 45.15.64.0/24 maxlen: 24
87.236.37.0/24 maxlen: 24
2a12:b2c0:1::/48 maxlen: 48
2a12:b2c0:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 09 Feb 2025 18:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d0:11:fa:09:ce:07:73:23:c2:fd:00:a7:d2:f1:a6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: Feb 4 08:27:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19edc18cfe88caa4dcfef7ef8c9b258508dec856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:3f:b9:d2:b1:32:13:29:f7:50:2b:40:07:
2d:0b:e2:59:45:c1:44:64:cb:b4:bb:34:78:13:ea:
9a:f8:6a:63:bb:b7:6d:f8:77:08:44:a3:60:73:32:
0a:c1:48:e0:80:ac:fc:f4:3f:72:e9:f9:fd:fb:87:
6f:bd:28:02:02:10:98:12:ef:6e:11:00:f7:f4:a7:
fe:19:cc:dd:1c:05:16:58:06:dd:4b:59:3f:b3:4c:
2e:bc:e8:7a:8a:36:a0:ea:92:e7:9a:28:8c:78:92:
aa:8b:c6:0d:94:97:15:c4:60:10:04:c1:47:4f:79:
cf:8a:5d:ff:7f:e7:b4:51:35:0b:a9:62:3e:cd:0e:
c2:02:c6:0f:81:7b:f1:fd:9b:8e:86:08:4c:a3:50:
73:43:85:52:85:e1:f6:71:83:33:7f:34:0c:96:54:
c0:93:6e:73:cb:c5:06:4d:b8:97:50:87:08:21:61:
57:f4:88:17:92:50:ef:06:4a:c0:ed:cb:9f:85:da:
29:0c:af:71:1c:6e:bd:4b:ad:a6:23:0d:43:29:09:
b3:c7:46:f8:d5:a6:ea:6b:86:16:c2:7d:0a:59:58:
02:27:99:54:92:fe:2d:19:50:68:3c:57:2e:0e:55:
ed:e6:1f:d8:a3:bb:17:b1:ca:88:7b:76:ff:34:44:
8d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:ED:C1:8C:FE:88:CA:A4:DC:FE:F7:EF:8C:9B:25:85:08:DE:C8:56
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/Ge3BjP6IyqTc_vfvjJslhQjeyFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.64.0/24
87.236.37.0/24
IPv6:
2a12:b2c0:1::/48
2a12:b2c0:3::/48
Signature Algorithm: sha256WithRSAEncryption
3a:84:6a:41:fe:58:7d:18:a5:82:73:04:ec:00:8c:ee:ee:26:
b6:55:7a:6f:81:98:a4:fd:11:12:99:db:2f:34:c2:90:59:bf:
f2:cf:6d:8d:50:88:1f:6e:c1:d5:a1:5c:5f:0f:0e:62:7b:a9:
df:36:f2:0f:0a:c8:ab:08:85:9d:72:14:a4:b4:2b:26:c7:bc:
89:9c:49:3a:79:1c:20:79:b7:bf:18:48:65:f6:d1:e4:64:b9:
d5:98:59:66:0c:51:8f:16:33:e5:32:b4:f8:e8:8a:95:1b:3c:
63:6d:47:82:fd:9e:3c:fa:e4:0a:b8:80:85:63:66:15:07:31:
69:77:03:30:36:47:cd:e6:45:b5:c6:d2:15:b1:1c:e7:dd:69:
27:1f:3a:ce:0d:76:8c:f0:fc:50:09:1d:ee:bc:07:0a:ef:0e:
6b:db:77:96:73:41:52:69:a3:3c:1b:bf:6f:1c:d5:01:50:06:
9c:0b:c8:25:51:bd:6d:29:e8:39:cc:f1:56:02:af:7a:c5:3e:
16:1a:2d:99:7b:70:10:ab:0e:e2:e0:40:9d:c0:39:b9:6a:2c:
1f:10:ee:99:14:4c:46:bf:cb:68:08:f8:11:11:29:88:65:77:
74:30:11:b6:e1:ab:6a:ea:3d:d2:3e:be:42:36:c6:2f:9a:0f:
5f:a6:6d:66
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZTQEfoJzgdzI8L9AKfS8aa2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwOTgwYjYwZTBkMzBlNDk4ZGUxYmFhNjQ1YTFiZTU3YTk1
MjA0OWQwHhcNMjUwMjA0MDgyNzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWVkYzE4Y2ZlODhjYWE0ZGNmZWY3ZWY4YzliMjU4NTA4ZGVjODU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSI/udKxMhMp91ArQActC+JZRcFE
ZMu0uzR4E+qa+Gpju7dt+HcIRKNgczIKwUjggKz89D9y6fn9+4dvvSgCAhCYEu9u
EQD39Kf+GczdHAUWWAbdS1k/s0wuvOh6ijag6pLnmiiMeJKqi8YNlJcVxGAQBMFH
T3nPil3/f+e0UTULqWI+zQ7CAsYPgXvx/ZuOhghMo1BzQ4VSheH2cYMzfzQMllTA
k25zy8UGTbiXUIcIIWFX9IgXklDvBkrA7cufhdopDK9xHG69S62mIw1DKQmzx0b4
1abqa4YWwn0KWVgCJ5lUkv4tGVBoPFcuDlXt5h/Yo7sXscqIe3b/NESN1QIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFBntwYz+iMqk3P7374ybJYUI3shWMB8GA1UdIwQY
MBaAFHCYC2Dg0w5JjeG6pkWhvlepUgSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNTZjMTEtMjVlMS00OWM4LTg4NjMt
N2YzN2I3NzhjMDExLzEvR2UzQmpQNkl5cVRjX3ZmdmpKc2xoUWpleUZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kNTZjMTEtMjVlMS00OWM4LTg4NjMtN2YzN2I3NzhjMDEx
LzEvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQALQ9AAwQA
V+wlMBgEAgACMBIDBwAqErLAAAEDBwAqErLAAAMwDQYJKoZIhvcNAQELBQADggEB
ADqEakH+WH0YpYJzBOwAjO7uJrZVem+BmKT9ERKZ2y80wpBZv/LPbY1QiB9uwdWh
XF8PDmJ7qd828g8KyKsIhZ1yFKS0KybHvImcSTp5HCB5t78YSGX20eRkudWYWWYM
UY8WM+UytPjoipUbPGNtR4L9njz65Aq4gIVjZhUHMWl3AzA2R83mRbXG0hWxHOfd
aScfOs4Ndozw/FAJHe68BwrvDmvbd5ZzQVJpozwbv28c1QFQBpwLyCVRvW0p6DnM
8VYCr3rFPhYaLZl7cBCrDuLgQJ3AOblqLB8Q7pkUTEa/y2gI+BERKYhld3QwEbbh
q2rqPdI+vkI2xi+aD1+mbWY=
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:16:21 2025 by rpki-client