Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xRnfMoUi2u_6luB84u2a7JGT6SE.roa
File: xRnfMoUi2u_6luB84u2a7JGT6SE.roa (raw, json)
Hash identifier: OFiX0IlzafLJi8Ypw4cD9AWH9dZCdLhIWrkNM3u/5Vc=
Subject key identifier: C5:19:DF:32:85:22:DA:EF:FA:96:E0:7C:E2:ED:9A:EC:91:93:E9:21
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195B29DA228E3ECB34D9443FC865A0BC34B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xRnfMoUi2u_6luB84u2a7JGT6SE.roa
Signing time: Thu 20 Mar 2025 08:13:49 +0000
ROA not before: Thu 20 Mar 2025 08:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 45.86.15.0/24 maxlen: 24
45.141.176.0/24 maxlen: 24
45.146.91.0/24 maxlen: 24
185.214.74.0/24 maxlen: 24
193.5.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b2:9d:a2:28:e3:ec:b3:4d:94:43:fc:86:5a:0b:c3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 20 08:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c519df328522daeffa96e07ce2ed9aec9193e921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1b:3d:00:17:92:5e:25:7f:b6:7b:5b:22:6b:
79:54:c3:27:ee:72:e1:b3:33:99:7f:c4:db:0d:f4:
73:1b:2f:f4:f5:c3:14:79:81:fc:d5:03:e8:74:43:
52:20:12:b1:c1:88:3a:3d:0b:50:d4:a5:ed:9e:51:
5b:83:40:45:91:75:96:45:07:00:02:71:c7:10:c0:
19:4c:9e:7f:b2:ec:6f:f9:ca:74:f2:63:93:b3:02:
f1:95:e5:4e:02:68:f2:b2:1a:ee:75:af:88:bb:61:
99:04:e1:b6:12:0e:db:34:55:12:b7:a7:7b:be:93:
2d:85:ac:1a:c0:51:71:3a:d4:fe:2a:48:e0:f0:97:
d9:8d:f8:f5:73:c3:03:d0:59:0a:26:bd:bc:8a:c9:
3c:52:4b:76:5f:f8:b5:53:9a:62:00:40:2a:e8:af:
9f:01:53:fe:6c:ba:94:6f:bd:96:0d:ab:19:c4:d6:
7f:5e:4d:fe:68:27:4e:c5:d6:10:df:ee:39:e9:83:
29:a2:60:c5:81:8f:b9:6a:79:20:07:3d:b7:e8:42:
e4:49:d0:d4:58:b8:dd:c6:12:b3:f2:e7:3e:67:ca:
a5:be:13:c6:f9:12:58:4e:a9:3b:42:a4:60:32:39:
2a:b3:b9:5c:17:c6:8b:aa:78:ba:8c:05:3f:67:13:
21:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:19:DF:32:85:22:DA:EF:FA:96:E0:7C:E2:ED:9A:EC:91:93:E9:21
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xRnfMoUi2u_6luB84u2a7JGT6SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.15.0/24
45.141.176.0/24
45.146.91.0/24
185.214.74.0/24
193.5.251.0/24
Signature Algorithm: sha256WithRSAEncryption
64:bd:69:1f:d0:6c:83:b6:76:be:db:f0:40:cb:b9:01:b2:47:
1f:81:2c:9f:26:86:15:6a:e8:f6:cc:03:3e:7c:45:bf:06:1c:
12:27:88:ec:f5:0f:13:3d:6e:30:e2:30:43:95:5d:5a:b2:9c:
71:39:7e:0e:60:ba:9e:b1:38:6f:2a:a3:2a:a4:e4:8a:de:8c:
70:7a:4e:59:1f:35:f0:6f:11:55:35:c3:9d:aa:46:94:df:bd:
86:61:d7:62:3e:6f:b6:2f:24:4c:82:2a:42:31:95:4f:86:d4:
03:6a:40:c1:83:6f:44:b5:07:58:46:df:e6:2b:f5:a3:96:cf:
2a:66:8b:6f:bd:9e:fd:41:8a:af:f1:da:99:c4:bd:3a:8b:7b:
68:ec:f0:20:af:cd:d3:d3:46:25:b8:d1:d1:9b:3f:57:5e:97:
ed:ae:83:83:7e:db:38:65:0d:12:de:cd:7e:08:17:a9:fc:44:
8d:18:09:df:be:ef:ad:fa:62:b7:d8:81:29:09:01:5e:d1:9f:
80:c6:e2:94:e7:1a:1f:80:73:55:9b:b8:d7:4c:52:33:f6:ca:
85:54:7f:e2:96:4a:c0:35:68:8e:e6:62:97:4c:fd:30:4b:bc:
90:e1:dc:db:10:3f:11:3e:a1:1a:cf:83:00:c1:a3:fe:d8:c9:
cd:4a:93:65
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZWynaIo4+yzTZRD/IZaC8NLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMzIwMDgxMzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTE5ZGYzMjg1MjJkYWVmZmE5NmUwN2NlMmVkOWFlYzkxOTNlOTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRs9ABeSXiV/tntbImt5VMMn7nLh
szOZf8TbDfRzGy/09cMUeYH81QPodENSIBKxwYg6PQtQ1KXtnlFbg0BFkXWWRQcA
AnHHEMAZTJ5/suxv+cp08mOTswLxleVOAmjyshruda+Iu2GZBOG2Eg7bNFUSt6d7
vpMthawawFFxOtT+Kkjg8JfZjfj1c8MD0FkKJr28isk8Ukt2X/i1U5piAEAq6K+f
AVP+bLqUb72WDasZxNZ/Xk3+aCdOxdYQ3+456YMpomDFgY+5ankgBz236ELkSdDU
WLjdxhKz8uc+Z8qlvhPG+RJYTqk7QqRgMjkqs7lcF8aLqni6jAU/ZxMhuQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFMUZ3zKFItrv+pbgfOLtmuyRk+khMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEveFJuZk1vVWkydV82bHVCODR1MmE3SkdUNlNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALVYPAwQA
LY2wAwQALZJbAwQAudZKAwQAwQX7MA0GCSqGSIb3DQEBCwUAA4IBAQBkvWkf0GyD
tna+2/BAy7kBskcfgSyfJoYVauj2zAM+fEW/BhwSJ4js9Q8TPW4w4jBDlV1aspxx
OX4OYLqesThvKqMqpOSK3oxwek5ZHzXwbxFVNcOdqkaU372GYddiPm+2LyRMgipC
MZVPhtQDakDBg29EtQdYRt/mK/Wjls8qZotvvZ79QYqv8dqZxL06i3to7PAgr83T
00YluNHRmz9XXpftroODfts4ZQ0S3s1+CBep/ESNGAnfvu+t+mK32IEpCQFe0Z+A
xuKU5xofgHNVm7jXTFIz9sqFVH/ilkrANWiO5mKXTP0wS7yQ4dzbED8RPqEaz4MA
waP+2MnNSpNl
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:18 2025 by rpki-client