Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/CMuofd_HgLGZP4a2QiDeccLAevQ.roa
File: CMuofd_HgLGZP4a2QiDeccLAevQ.roa (raw, json)
Hash identifier: 3SF7hDCAYElGDXfBwqsuQqpvgu7OTrMX9Hj3aAsYz1A=
Subject key identifier: 08:CB:A8:7D:DF:C7:80:B1:99:3F:86:B6:42:20:DE:71:C2:C0:7A:F4
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 0193FF3DC9EC6CEE570D573B08D844FEF670
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/CMuofd_HgLGZP4a2QiDeccLAevQ.roa
Signing time: Wed 25 Dec 2024 19:14:19 +0000
ROA not before: Wed 25 Dec 2024 19:14:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56414
IP address blocks: 45.15.16.0/22 maxlen: 24
62.204.40.0/24 maxlen: 24
194.26.217.0/24 maxlen: 24
2a12:7800::/29 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ff:3d:c9:ec:6c:ee:57:0d:57:3b:08:d8:44:fe:f6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Dec 25 19:14:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08cba87ddfc780b1993f86b64220de71c2c07af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c8:62:cb:ee:51:69:87:b0:af:fe:e5:a6:d1:
ab:91:74:36:1f:5f:01:de:6c:d2:85:4f:75:e7:1f:
61:8d:6d:4f:dc:2d:64:b3:9e:57:ab:90:4e:96:e9:
a8:50:5b:da:d8:80:fc:ab:92:04:2e:4a:35:78:2a:
54:6d:39:d9:97:7d:bb:27:27:ad:60:f5:c6:cb:5a:
08:78:37:f4:81:5d:8f:fc:d5:4f:58:76:95:5a:76:
4f:8c:e4:54:91:00:56:5c:a0:3e:61:20:17:15:cb:
49:c4:d4:6e:9f:18:a1:e7:a6:23:90:0b:e8:d0:2e:
dd:e2:e8:7f:65:f5:e8:c1:df:7d:d7:47:0e:16:b9:
4e:64:70:a3:ca:16:3d:14:3b:eb:4d:6e:d3:4b:42:
ed:d4:d0:e1:4c:a1:a9:60:a9:45:3e:9e:f6:ac:21:
ec:ad:48:ef:64:b8:b1:c8:62:6a:ce:a5:09:e5:da:
ed:8d:71:49:81:95:1d:e7:a1:a8:f9:78:c1:d0:a2:
b7:89:e6:90:b6:8d:60:36:8a:3f:3a:90:e7:70:b0:
a0:ae:af:b0:ce:6e:61:ed:01:5a:76:b8:7d:29:59:
a3:87:75:74:19:8a:1d:21:e8:e3:8a:dc:22:54:3b:
54:4f:fd:d7:d2:2a:78:27:1f:39:40:53:fe:51:1f:
33:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CB:A8:7D:DF:C7:80:B1:99:3F:86:B6:42:20:DE:71:C2:C0:7A:F4
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/CMuofd_HgLGZP4a2QiDeccLAevQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.16.0/22
62.204.40.0/24
194.26.217.0/24
IPv6:
2a12:7800::/29
Signature Algorithm: sha256WithRSAEncryption
96:dc:f6:c6:30:42:7c:cf:b1:53:43:12:b3:08:4c:9f:96:c4:
43:8c:f8:1a:50:f8:a5:95:b9:d2:f9:45:a5:67:98:b6:7c:d6:
99:af:93:55:85:93:1b:77:33:a4:8b:c1:88:4e:53:a0:0b:9e:
5e:5d:d6:51:c0:50:fd:ed:91:db:35:3b:6d:3d:48:be:df:49:
f8:b9:b5:fa:f6:a8:62:c4:fe:4a:f9:a6:3f:81:44:36:55:a4:
61:e1:a2:ac:ca:12:a3:8a:e6:bf:cb:c9:a8:4e:12:a7:2f:b9:
47:94:86:78:b5:35:2b:d5:a6:fd:2f:86:02:ee:65:0b:b2:a8:
37:09:59:0f:39:7c:a6:80:aa:78:27:08:8d:4c:86:c0:96:ec:
bf:1f:87:76:af:05:f3:79:8e:83:72:b5:b8:b4:4e:e3:d4:cd:
48:da:83:78:bf:47:ed:bb:21:1a:e4:bc:17:f7:28:3b:4f:b4:
05:cc:c9:7c:9f:83:df:5c:e3:56:ad:82:e6:74:fa:eb:59:4a:
9e:ee:bb:d4:3f:60:ed:6a:70:f3:38:8f:1c:c5:10:28:e1:78:
eb:72:83:9b:0a:6b:db:51:4e:05:9e:61:2b:c4:0f:17:50:35:
e6:e9:8d:ef:49:1a:8c:05:90:7d:fb:b3:2d:5b:c7:84:1e:aa:
b9:f8:1b:5c
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZP/PcnsbO5XDVc7CNhE/vZwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YmYzYTcyY2FkNmY0YjNkYzMwNWI0Y2JlMzEwODcwNTFk
OTgzZjYwHhcNMjQxMjI1MTkxNDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGNiYTg3ZGRmYzc4MGIxOTkzZjg2YjY0MjIwZGU3MWMyYzA3YWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlshiy+5RaYewr/7lptGrkXQ2H18B
3mzShU915x9hjW1P3C1ks55Xq5BOlumoUFva2ID8q5IELko1eCpUbTnZl327Jyet
YPXGy1oIeDf0gV2P/NVPWHaVWnZPjORUkQBWXKA+YSAXFctJxNRunxih56YjkAvo
0C7d4uh/ZfXowd9910cOFrlOZHCjyhY9FDvrTW7TS0Lt1NDhTKGpYKlFPp72rCHs
rUjvZLixyGJqzqUJ5drtjXFJgZUd56Go+XjB0KK3ieaQto1gNoo/OpDncLCgrq+w
zm5h7QFadrh9KVmjh3V0GYodIejjitwiVDtUT/3X0ip4Jx85QFP+UR8zmwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFAjLqH3fx4CxmT+GtkIg3nHCwHr0MB8GA1UdIwQY
MBaAFOW/OnLK1vSz3DBbTL4xCHBR2YP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEt
MDliZTlkYjExZjY2LzEvQ011b2ZkX0hnTEdaUDRhMlFpRGVjY0xBZXZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEtMDliZTlkYjExZjY2
LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLQ8QAwQA
PswoAwQAwhrZMA0EAgACMAcDBQMqEngAMA0GCSqGSIb3DQEBCwUAA4IBAQCW3PbG
MEJ8z7FTQxKzCEyflsRDjPgaUPillbnS+UWlZ5i2fNaZr5NVhZMbdzOki8GITlOg
C55eXdZRwFD97ZHbNTttPUi+30n4ubX69qhixP5K+aY/gUQ2VaRh4aKsyhKjiua/
y8moThKnL7lHlIZ4tTUr1ab9L4YC7mULsqg3CVkPOXymgKp4JwiNTIbAluy/H4d2
rwXzeY6DcrW4tE7j1M1I2oN4v0ftuyEa5LwX9yg7T7QFzMl8n4PfXONWrYLmdPrr
WUqe7rvUP2DtanDzOI8cxRAo4XjrcoObCmvbUU4FnmErxA8XUDXm6Y3vSRqMBZB9
+7MtW8eEHqq5+Btc
-----END CERTIFICATE-----
Generated at Thu Apr 17 18:11:43 2025 by rpki-client