Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pXpfHO2R-6YApuWYS6Zdoys5eRM.roa
File: pXpfHO2R-6YApuWYS6Zdoys5eRM.roa (raw, json)
Hash identifier: aRIs3KGO9gFEI8WjoiGRmhsEUCRr1u/8jjnN+RwdgcU=
Subject key identifier: A5:7A:5F:1C:ED:91:FB:A6:00:A6:E5:98:4B:A6:5D:A3:2B:39:79:13
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01925237E9C786CB3608F6564E99438CAE68
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pXpfHO2R-6YApuWYS6Zdoys5eRM.roa
Signing time: Thu 03 Oct 2024 11:50:48 +0000
ROA not before: Thu 03 Oct 2024 11:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 45.128.79.0/24 maxlen: 24
45.141.178.0/24 maxlen: 24
93.190.246.0/24 maxlen: 24
2a0f:1201::/32 maxlen: 32
2a0f:7d03::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 03 Nov 2024 16:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:52:37:e9:c7:86:cb:36:08:f6:56:4e:99:43:8c:ae:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 3 11:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a57a5f1ced91fba600a6e5984ba65da32b397913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:27:04:fe:98:1c:b1:2a:b6:5a:42:ce:c6:
59:e2:a6:81:83:a4:05:64:43:a1:a2:55:a3:42:c6:
51:97:66:22:8c:3f:e0:b2:58:57:e5:21:c5:5d:b5:
2c:4c:ae:4c:1c:3c:fc:70:db:50:ad:22:ba:d5:73:
b2:08:38:df:b7:1e:db:e3:ec:39:98:9b:f9:de:52:
49:a5:ec:7a:16:34:89:5d:d2:ca:8b:5e:62:85:cf:
ee:e4:4f:dd:7a:76:07:5d:04:ff:53:72:ec:5e:dc:
09:83:3d:9e:a5:1a:cb:ca:80:74:ba:75:c6:18:56:
6e:f3:87:1a:9b:f2:7a:eb:38:59:ed:4f:19:d2:2a:
b1:d9:84:d2:7c:e7:41:fd:a5:ca:88:ce:e8:c0:b2:
c9:78:88:07:25:60:fa:2d:b3:4f:54:9f:0a:2b:5e:
53:bf:66:de:b5:f8:41:ce:b7:c3:b3:b6:cc:95:51:
a5:8f:88:15:10:ff:25:b4:38:2a:79:0a:93:2a:5f:
b1:7c:bf:55:e9:e9:f9:b3:85:72:af:6b:5f:e6:49:
75:82:14:69:09:4f:09:df:1e:3e:88:3c:10:7f:b6:
59:05:7f:ea:7a:d0:a5:40:b0:e8:33:ef:e3:9a:13:
c6:db:0c:01:26:20:99:63:bc:b3:e1:28:52:14:12:
51:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7A:5F:1C:ED:91:FB:A6:00:A6:E5:98:4B:A6:5D:A3:2B:39:79:13
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pXpfHO2R-6YApuWYS6Zdoys5eRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.79.0/24
45.141.178.0/24
93.190.246.0/24
IPv6:
2a0f:1201::/32
2a0f:7d03::/32
Signature Algorithm: sha256WithRSAEncryption
cf:ef:39:2f:95:7e:d3:96:5a:e0:e8:a6:11:eb:9c:c8:e2:14:
21:7d:ee:f3:45:f7:6a:de:4e:83:4b:e7:48:ff:95:df:06:37:
97:71:0a:ee:5d:f1:d1:ad:19:33:ee:32:1a:5b:d3:3d:64:ce:
61:c6:52:ec:7f:52:21:39:2f:71:53:7d:b7:41:12:6a:ad:d2:
db:96:a4:7a:cc:a2:d3:23:e6:72:81:3b:a7:0b:1a:40:a9:e3:
6e:24:f8:a6:8a:2d:da:46:18:80:1c:98:20:95:8d:2f:8d:d0:
76:39:98:3b:7c:09:29:c2:97:30:81:3b:c3:fd:46:18:2e:e4:
56:53:92:e5:d7:df:25:47:42:1c:32:8a:31:bc:bb:44:7a:de:
3c:fd:a3:53:a1:92:95:9c:f1:9a:16:65:a3:80:eb:b8:ab:56:
4d:3c:a2:29:9e:f2:67:e9:38:77:91:d6:da:1a:8c:75:97:74:
a0:0c:0c:e6:b0:01:be:c5:2f:26:16:d3:cb:c8:ab:5b:e6:ad:
b1:81:0b:25:1b:72:67:63:c3:18:17:72:7b:2b:ac:7e:ac:20:
7a:89:db:e2:e8:f3:07:b9:05:ae:60:f9:d4:92:a9:bb:25:bb:
6e:bc:a0:9b:77:d7:58:89:cd:4e:fd:9e:2e:43:ec:7f:08:8e:
9b:29:a4:8c
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZJSN+nHhss2CPZWTplDjK5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQxMDAzMTE1MDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTdhNWYxY2VkOTFmYmE2MDBhNmU1OTg0YmE2NWRhMzJiMzk3OTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1knBP6YHLEqtlpCzsZZ4qaBg6QF
ZEOholWjQsZRl2YijD/gslhX5SHFXbUsTK5MHDz8cNtQrSK61XOyCDjftx7b4+w5
mJv53lJJpex6FjSJXdLKi15ihc/u5E/denYHXQT/U3LsXtwJgz2epRrLyoB0unXG
GFZu84cam/J66zhZ7U8Z0iqx2YTSfOdB/aXKiM7owLLJeIgHJWD6LbNPVJ8KK15T
v2betfhBzrfDs7bMlVGlj4gVEP8ltDgqeQqTKl+xfL9V6en5s4Vyr2tf5kl1ghRp
CU8J3x4+iDwQf7ZZBX/qetClQLDoM+/jmhPG2wwBJiCZY7yz4ShSFBJRAQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFKV6XxztkfumAKblmEumXaMrOXkTMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvcFhwZkhPMlItNllBcHVXWVM2WmRveXM1ZVJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQALYBPAwQA
LY2yAwQAXb72MBQEAgACMA4DBQAqDxIBAwUAKg99AzANBgkqhkiG9w0BAQsFAAOC
AQEAz+85L5V+05Za4OimEeucyOIUIX3u80X3at5Og0vnSP+V3wY3l3EK7l3x0a0Z
M+4yGlvTPWTOYcZS7H9SITkvcVN9t0ESaq3S25akesyi0yPmcoE7pwsaQKnjbiT4
poot2kYYgByYIJWNL43QdjmYO3wJKcKXMIE7w/1GGC7kVlOS5dffJUdCHDKKMby7
RHrePP2jU6GSlZzxmhZlo4DruKtWTTyiKZ7yZ+k4d5HW2hqMdZd0oAwM5rABvsUv
JhbTy8irW+atsYELJRtyZ2PDGBdyeyusfqwgeonb4ujzB7kFrmD51JKpuyW7bryg
m3fXWInNTv2eLkPsfwiOmymkjA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:18 2025 by rpki-client