Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/fPH7mBu-pH8DfG1ReMjKf1fFtTM.roa
File: fPH7mBu-pH8DfG1ReMjKf1fFtTM.roa (raw, json)
Hash identifier: nlJg4rlFAEts8L6i7yIBBTVL2GCFC5pbmkBm7W4a+X4=
Subject key identifier: 7C:F1:FB:98:1B:BE:A4:7F:03:7C:6D:51:78:C8:CA:7F:57:C5:B5:33
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 019423D7CEE23A0406EBABEBF260C8ED3808
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/fPH7mBu-pH8DfG1ReMjKf1fFtTM.roa
Signing time: Wed 01 Jan 2025 21:48:53 +0000
ROA not before: Wed 01 Jan 2025 21:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59711
IP address blocks: 5.149.248.0/23 maxlen: 23
5.149.254.0/23 maxlen: 23
77.83.196.0/24 maxlen: 24
77.83.197.0/24 maxlen: 24
77.83.198.0/24 maxlen: 24
79.141.164.0/23 maxlen: 23
79.141.174.0/23 maxlen: 23
85.158.108.0/24 maxlen: 24
85.158.109.0/24 maxlen: 24
89.150.40.0/24 maxlen: 24
89.150.48.0/24 maxlen: 24
89.150.57.0/24 maxlen: 24
91.193.18.0/24 maxlen: 24
185.40.86.0/24 maxlen: 24
185.80.52.0/23 maxlen: 23
185.80.54.0/23 maxlen: 23
185.81.114.0/23 maxlen: 23
185.81.114.0/24 maxlen: 24
185.81.115.0/24 maxlen: 24
185.104.192.0/24 maxlen: 24
185.104.193.0/24 maxlen: 24
185.104.194.0/24 maxlen: 24
185.117.88.0/23 maxlen: 23
185.117.90.0/23 maxlen: 23
185.123.102.0/24 maxlen: 24
185.174.133.0/24 maxlen: 24
185.174.135.0/24 maxlen: 24
185.235.137.0/24 maxlen: 24
185.235.138.0/24 maxlen: 24
193.42.36.0/24 maxlen: 24
193.42.39.0/24 maxlen: 24
195.95.155.0/24 maxlen: 24
2a01:8640::/48 maxlen: 48
2a01:8640:2::/48 maxlen: 48
2a01:8640:6::/48 maxlen: 48
2a01:8640:9::/48 maxlen: 48
2a01:8640:a::/48 maxlen: 48
2a01:8640:f::/48 maxlen: 48
2a01:8640:11::/48 maxlen: 48
2a01:8640:12::/48 maxlen: 48
2a01:8640:13::/48 maxlen: 48
2a01:8640:14::/48 maxlen: 48
2a01:8640:15::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 03 Jan 2025 17:59:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:ce:e2:3a:04:06:eb:ab:eb:f2:60:c8:ed:38:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Jan 1 21:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cf1fb981bbea47f037c6d5178c8ca7f57c5b533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c2:d2:08:87:44:2d:8e:54:39:b1:27:3b:ff:
82:a1:16:e7:fe:9a:80:eb:b9:30:5d:a5:e1:0d:26:
01:01:bf:70:ae:1d:98:03:66:54:17:b2:a9:37:39:
87:64:e2:28:a0:a0:65:a6:af:13:58:78:01:56:8b:
80:51:17:c2:66:67:9e:2e:48:e9:ac:d8:6a:33:e3:
11:b6:1e:2c:c5:f2:a6:53:c7:3a:d8:4f:1a:fa:9d:
e8:14:25:ba:b9:8f:77:e8:87:1c:9e:ed:21:54:c4:
a4:fe:91:40:60:12:0f:62:08:cc:81:b4:b7:e2:3c:
2d:5e:8b:e0:b7:99:e9:60:76:ec:d5:54:69:d9:13:
ef:e6:64:d9:44:01:5b:08:a5:8b:3a:3d:db:39:e4:
41:22:58:74:c4:cc:b5:33:21:01:9d:78:78:88:8a:
24:6f:19:1c:53:fb:93:8a:6f:e8:75:32:55:ad:b0:
28:15:96:81:1f:58:60:9d:2b:15:42:9a:f3:43:01:
bc:8e:f2:da:d4:26:ef:b4:d2:42:57:2e:de:88:ea:
4f:3a:66:ac:7a:e8:79:12:21:ed:7a:a3:cc:bf:3e:
04:d3:24:f7:dc:16:6f:3d:39:b9:a4:03:ab:db:9e:
7b:4e:a1:fc:36:cf:80:30:52:0d:e6:96:64:68:e7:
b8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F1:FB:98:1B:BE:A4:7F:03:7C:6D:51:78:C8:CA:7F:57:C5:B5:33
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/fPH7mBu-pH8DfG1ReMjKf1fFtTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.248.0/23
5.149.254.0/23
77.83.196.0-77.83.198.255
79.141.164.0/23
79.141.174.0/23
85.158.108.0/23
89.150.40.0/24
89.150.48.0/24
89.150.57.0/24
91.193.18.0/24
185.40.86.0/24
185.80.52.0/22
185.81.114.0/23
185.104.192.0-185.104.194.255
185.117.88.0/22
185.123.102.0/24
185.174.133.0/24
185.174.135.0/24
185.235.137.0-185.235.138.255
193.42.36.0/24
193.42.39.0/24
195.95.155.0/24
IPv6:
2a01:8640::/48
2a01:8640:2::/48
2a01:8640:6::/48
2a01:8640:9::-2a01:8640:a:ffff:ffff:ffff:ffff:ffff
2a01:8640:f::/48
2a01:8640:11::-2a01:8640:15:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
73:a5:2f:1e:b9:a4:df:1b:00:34:39:e7:7c:d3:08:9a:11:a9:
74:83:65:d4:fd:13:16:aa:92:37:99:03:eb:3d:6e:f7:a9:84:
8b:d4:09:ed:40:ce:92:47:a9:42:83:ba:20:c0:1c:71:dc:37:
34:9b:85:46:8b:1c:c6:e0:6e:77:fe:24:6f:96:19:0e:3c:24:
25:9d:8b:c4:ec:48:f7:43:c5:ab:af:97:8d:d8:9b:28:be:69:
95:1b:58:36:e9:9a:02:95:8a:d0:1c:ce:72:8d:be:56:ba:cc:
e8:ed:bb:10:2a:f4:63:32:59:f6:4c:a6:cd:80:6f:b9:4f:d8:
8d:68:87:e9:42:e4:78:9d:54:8b:61:d6:b0:47:39:d7:61:fe:
13:07:29:47:9e:91:b5:1c:a3:71:48:8c:10:94:b7:45:cc:b4:
34:f4:b6:bd:d1:54:4e:82:ab:93:88:83:50:ce:7f:78:bd:bb:
cc:5b:38:30:f0:0a:0b:c0:34:4e:f7:33:18:39:84:2d:1f:68:
96:40:a6:e1:2c:77:ad:34:be:d2:91:77:42:35:c8:e3:6c:12:
61:dd:d9:c4:80:ce:33:79:58:3e:b8:71:bd:b5:b0:83:28:1b:
c2:a1:ba:95:13:08:2f:18:4a:08:ff:13:36:97:19:82:4f:0e:
5e:76:30:dd
-----BEGIN CERTIFICATE-----
MIIF7TCCBNWgAwIBAgISAZQj187iOgQG66vr8mDI7TgIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MTI0MmMzM2JjMmUyZTllNDU4NTBhMGZjNjRhYjJjNzUw
NmE0YjgwHhcNMjUwMTAxMjE0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2YxZmI5ODFiYmVhNDdmMDM3YzZkNTE3OGM4Y2E3ZjU3YzViNTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MLSCIdELY5UObEnO/+CoRbn/pqA
67kwXaXhDSYBAb9wrh2YA2ZUF7KpNzmHZOIooKBlpq8TWHgBVouAURfCZmeeLkjp
rNhqM+MRth4sxfKmU8c62E8a+p3oFCW6uY936Iccnu0hVMSk/pFAYBIPYgjMgbS3
4jwtXovgt5npYHbs1VRp2RPv5mTZRAFbCKWLOj3bOeRBIlh0xMy1MyEBnXh4iIok
bxkcU/uTim/odTJVrbAoFZaBH1hgnSsVQprzQwG8jvLa1CbvtNJCVy7eiOpPOmas
euh5EiHteqPMvz4E0yT33BZvPTm5pAOr2557TqH8Ns+AMFIN5pZkaOe4YQIDAQAB
o4IC+TCCAvUwHQYDVR0OBBYEFHzx+5gbvqR/A3xtUXjIyn9XxbUzMB8GA1UdIwQY
MBaAFGkSQsM7wuLp5FhQoPxkqyx1BqS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjkt
MzYyZmZlOGVlMjcwLzEvZlBIN21CdS1wSDhEZkcxUmVNaktmMWZGdFRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjktMzYyZmZlOGVlMjcw
LzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBDQYIKwYBBQUHAQcBAf8Egf0wgfowgaMEAgABMIGcAwQB
BZX4AwQBBZX+MAwDBAJNU8QDBABNU8YDBAFPjaQDBAFPja4DBAFVnmwDBABZligD
BABZljADBABZljkDBABbwRIDBAC5KFYDBAK5UDQDBAG5UXIwDAMEBrlowAMEALlo
wgMEArl1WAMEALl7ZgMEALmuhQMEALmuhzAMAwQAueuJAwQAueuKAwQAwSokAwQA
wSonAwQAw1+bMFIEAgACMEwDBwAqAYZAAAADBwAqAYZAAAIDBwAqAYZAAAYwEgMH
ACoBhkAACQMHACoBhkAACgMHACoBhkAADzASAwcAKgGGQAARAwcBKgGGQAAUMA0G
CSqGSIb3DQEBCwUAA4IBAQBzpS8euaTfGwA0Oed80wiaEal0g2XU/RMWqpI3mQPr
PW73qYSL1AntQM6SR6lCg7ogwBxx3Dc0m4VGixzG4G53/iRvlhkOPCQlnYvE7Ej3
Q8Wrr5eN2JsovmmVG1g26ZoClYrQHM5yjb5Wuszo7bsQKvRjMln2TKbNgG+5T9iN
aIfpQuR4nVSLYdawRznXYf4TBylHnpG1HKNxSIwQlLdFzLQ09La90VROgquTiINQ
zn94vbvMWzgw8AoLwDRO9zMYOYQtH2iWQKbhLHetNL7SkXdCNcjjbBJh3dnEgM4z
eVg+uHG9tbCDKBvCobqVEwgvGEoI/xM2lxmCTw5edjDd
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:30 2025 by rpki-client