Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_9gaHfjSMRX5iJzjPlrEx4qvlHc.roa
File: _9gaHfjSMRX5iJzjPlrEx4qvlHc.roa (raw, json)
Hash identifier: dvXEBdJmomYA6VkDQ8PH58cTl+1Hsd3/OfPPL5MJynU=
Subject key identifier: FF:D8:1A:1D:F8:D2:31:15:F9:88:9C:E3:3E:5A:C4:C7:8A:AF:94:77
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CE8447002F666EB4D0F6271DFC78092E1
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_9gaHfjSMRX5iJzjPlrEx4qvlHc.roa
Signing time: Mon 08 Jan 2024 08:50:48 +0000
ROA not before: Mon 08 Jan 2024 08:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 93.190.246.0/23 maxlen: 23
45.129.127.0/24 maxlen: 24
45.128.26.0/24 maxlen: 24
2a0f:e840::/32 maxlen: 32
2a13:fd00::/29 maxlen: 29
2a0f:2f80::/29 maxlen: 29
2a06:bf40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 10 Jan 2024 07:24:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e8:44:70:02:f6:66:eb:4d:0f:62:71:df:c7:80:92:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 8 08:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffd81a1df8d23115f9889ce33e5ac4c78aaf9477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:47:4b:ff:db:bc:ce:c6:c7:e7:ff:58:2a:cc:
52:6a:aa:ae:41:66:9d:2b:a0:86:a8:1f:55:68:17:
d3:13:44:8c:eb:14:2e:c4:90:cb:5f:64:e0:c1:66:
67:b6:97:e8:f0:d2:28:b1:e8:68:ce:31:af:f8:08:
1f:c0:02:f1:aa:a0:48:c2:25:2c:31:50:49:a4:af:
5f:76:df:49:49:b1:39:5e:3b:79:fc:1a:50:54:67:
ec:91:28:56:ad:47:8e:b7:14:73:5c:3c:35:fd:d6:
17:91:c6:a9:34:48:2f:34:3b:f7:b4:c4:14:c7:c4:
7f:77:64:be:97:93:ed:85:38:c8:40:ce:e7:fb:d4:
7f:60:d0:63:be:be:01:20:33:12:92:80:3c:76:84:
a5:31:dd:a6:e3:bb:fa:22:7d:c2:b3:6a:08:64:d7:
be:c9:77:8a:7e:53:72:b0:ce:1b:35:c3:02:a7:93:
fb:ae:cb:b8:52:87:a4:36:71:b5:f6:5b:5b:a6:af:
db:14:5d:60:ae:dc:bf:f2:1f:42:24:06:d8:7f:0d:
f7:d2:97:d1:d3:27:81:5b:6e:79:88:c2:9d:8d:3e:
1b:49:51:42:8e:f6:e8:7a:ab:87:46:d1:00:f8:b8:
ca:e2:7b:5e:ee:e3:6c:b4:98:6f:5e:c4:a8:ca:3c:
3a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D8:1A:1D:F8:D2:31:15:F9:88:9C:E3:3E:5A:C4:C7:8A:AF:94:77
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_9gaHfjSMRX5iJzjPlrEx4qvlHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.26.0/24
45.129.127.0/24
93.190.246.0/23
IPv6:
2a06:bf40::/29
2a0f:2f80::/29
2a0f:e840::/32
2a13:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
71:fb:fd:e8:cb:df:5c:4b:79:ae:64:6a:bd:b7:3e:21:7c:50:
ae:9b:bd:f8:43:57:e8:b7:ea:4b:bb:6f:c3:e5:4f:20:50:52:
69:99:6f:d2:e7:41:92:c3:90:c9:fd:3c:86:e3:7b:86:f0:bf:
c1:97:bb:1c:5b:b7:ae:79:64:19:3c:b6:d3:69:09:c5:e9:f2:
c7:76:4c:98:d3:7c:10:cb:eb:a2:e9:a4:95:39:80:b6:b8:99:
5b:1c:ec:4c:5c:80:1b:6c:be:8d:b8:92:6f:ae:ee:8d:4d:ee:
42:d2:6a:40:9b:e8:b9:63:90:96:e3:8a:f6:fc:c7:2e:cf:8d:
67:27:2a:6d:02:a7:e6:d5:3b:6c:8b:22:c8:6a:8e:f7:78:8a:
4e:e4:f4:74:3e:ae:41:f2:db:e7:b4:0c:a7:da:f7:a5:10:90:
db:84:78:f5:20:c9:24:be:cf:6c:cc:b6:6d:96:8a:fe:53:27:
53:eb:fe:ed:30:2e:91:28:25:a7:8c:97:e2:cc:86:4a:59:cf:
a2:1b:54:79:2a:46:d8:2d:7c:fd:7f:6c:08:67:0c:11:d9:87:
22:bb:02:71:b0:d0:98:f4:fe:3e:7e:9a:91:a3:16:2d:71:42:
15:25:d7:1b:db:50:59:77:19:e6:a0:82:7b:03:97:4c:ed:ea:
a8:95:e3:dc
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYzoRHAC9mbrTQ9icd/HgJLhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwMTA4MDg1MDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmQ4MWExZGY4ZDIzMTE1Zjk4ODljZTMzZTVhYzRjNzhhYWY5NDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEdL/9u8zsbH5/9YKsxSaqquQWad
K6CGqB9VaBfTE0SM6xQuxJDLX2TgwWZntpfo8NIosehozjGv+AgfwALxqqBIwiUs
MVBJpK9fdt9JSbE5Xjt5/BpQVGfskShWrUeOtxRzXDw1/dYXkcapNEgvNDv3tMQU
x8R/d2S+l5PthTjIQM7n+9R/YNBjvr4BIDMSkoA8doSlMd2m47v6In3Cs2oIZNe+
yXeKflNysM4bNcMCp5P7rsu4UoekNnG19ltbpq/bFF1grty/8h9CJAbYfw330pfR
0yeBW255iMKdjT4bSVFCjvboequHRtEA+LjK4nte7uNstJhvXsSoyjw6dwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFP/YGh340jEV+Yic4z5axMeKr5R3MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvXzlnYUhmalNNUlg1aUp6alBsckV4NHF2bEhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAYBAIAATASAwQALYAaAwQA
LYF/AwQBXb72MCIEAgACMBwDBQMqBr9AAwUDKg8vgAMFACoP6EADBQMqE/0AMA0G
CSqGSIb3DQEBCwUAA4IBAQBx+/3oy99cS3muZGq9tz4hfFCum734Q1fot+pLu2/D
5U8gUFJpmW/S50GSw5DJ/TyG43uG8L/Bl7scW7eueWQZPLbTaQnF6fLHdkyY03wQ
y+ui6aSVOYC2uJlbHOxMXIAbbL6NuJJvru6NTe5C0mpAm+i5Y5CW44r2/Mcuz41n
JyptAqfm1TtsiyLIao73eIpO5PR0Pq5B8tvntAyn2velEJDbhHj1IMkkvs9szLZt
lor+UydT6/7tMC6RKCWnjJfizIZKWc+iG1R5KkbYLXz9f2wIZwwR2YciuwJxsNCY
9P4+fpqRoxYtcUIVJdcb21BZdxnmoIJ7A5dM7eqolePc
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:13 2025 by rpki-client