Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/lRZ9kAH8ach3HgrREayS7hO1q5M.roa
File: lRZ9kAH8ach3HgrREayS7hO1q5M.roa (raw, json)
Hash identifier: Jj1ST8PbdQZwxTDJ8t0dWrlxkQ3LXXefkLhz3N147ug=
Subject key identifier: 95:16:7D:90:01:FC:69:C8:77:1E:0A:D1:11:AC:92:EE:13:B5:AB:93
Certificate issuer: /CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Certificate serial: 0194266B9A46E78326BBA8E7588976F36DD9
Authority key identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/lRZ9kAH8ach3HgrREayS7hO1q5M.roa
Signing time: Thu 02 Jan 2025 09:49:33 +0000
ROA not before: Thu 02 Jan 2025 09:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41678
IP address blocks: 89.185.128.0/21 maxlen: 21
89.185.129.0/24 maxlen: 24
89.185.136.0/21 maxlen: 21
89.185.143.0/24 maxlen: 24
89.185.144.0/20 maxlen: 20
89.185.154.0/24 maxlen: 24
89.185.157.0/24 maxlen: 24
194.46.0.0/19 maxlen: 19
194.46.112.0/21 maxlen: 21
194.46.112.0/22 maxlen: 22
194.46.132.0/22 maxlen: 22
194.46.152.0/22 maxlen: 22
194.46.160.0/24 maxlen: 24
194.46.161.0/24 maxlen: 24
194.46.164.0/22 maxlen: 22
212.108.64.0/20 maxlen: 20
212.108.77.0/24 maxlen: 24
212.108.92.0/22 maxlen: 22
212.108.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jan 2025 08:20:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:9a:46:e7:83:26:bb:a8:e7:58:89:76:f3:6d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Validity
Not Before: Jan 2 09:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95167d9001fc69c8771e0ad111ac92ee13b5ab93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:62:28:67:05:75:f7:29:99:63:6d:da:71:1d:
2b:58:f5:43:ab:d4:27:e9:a5:93:8c:34:da:df:a1:
25:f8:b5:ca:4f:07:cf:22:ef:8a:66:05:6b:17:18:
a7:f5:f6:8f:3d:6f:81:6f:ee:5e:40:09:4a:7c:cb:
59:6b:3a:69:46:72:e9:c9:6a:2b:61:46:6e:e5:f7:
d6:c8:e1:da:fb:c4:8a:a0:4c:69:d0:64:92:74:29:
d9:e3:e4:25:81:60:fe:95:e5:7c:d5:39:bc:09:d7:
5f:8a:7d:08:71:98:42:bd:04:d1:82:8e:21:44:a5:
44:1d:11:66:2b:cf:4e:d5:ab:90:f4:6f:17:12:a5:
e0:5e:72:fa:84:b5:33:ba:c0:5b:a4:15:2a:98:5f:
b9:bc:2b:2e:fc:ce:a2:d3:ca:5b:d3:3a:b4:a5:02:
92:42:91:8c:0b:d9:b5:50:cc:25:f8:61:63:a3:45:
fd:c0:08:6a:29:87:be:b4:4b:ef:44:5b:4b:e8:d6:
d8:26:cb:94:86:2b:c2:16:9d:10:1e:68:60:26:43:
25:28:75:d3:d2:53:f5:bd:3a:0c:ed:13:88:54:76:
de:e0:e9:9f:fc:68:b5:eb:6d:25:54:57:f7:f9:bd:
49:76:fa:71:c5:9a:dc:3e:e7:fa:bc:d2:85:aa:e3:
a1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:16:7D:90:01:FC:69:C8:77:1E:0A:D1:11:AC:92:EE:13:B5:AB:93
X509v3 Authority Key Identifier:
keyid:79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/lRZ9kAH8ach3HgrREayS7hO1q5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.128.0/19
194.46.0.0/19
194.46.112.0/21
194.46.132.0/22
194.46.152.0/22
194.46.160.0/23
194.46.164.0/22
212.108.64.0/20
212.108.92.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:7b:dd:5a:d4:63:f1:31:4f:57:1c:6e:68:b6:15:ae:51:83:
81:46:e6:12:a6:0b:dc:48:2d:2d:bf:99:7d:9f:7e:b1:c6:44:
d0:94:52:a6:c7:21:d5:c9:2f:2b:48:1b:cc:ac:d5:df:0e:ca:
70:5d:3e:ba:05:0e:20:55:71:a1:c5:5e:8f:52:cd:81:a0:54:
d1:ee:b5:89:86:85:35:32:e3:fb:1c:d1:e2:fa:80:e1:cc:ac:
04:03:57:a4:41:57:66:eb:c0:09:52:e6:a7:06:23:d1:a4:0d:
6b:09:a7:00:53:e1:54:b9:64:5f:f7:cc:be:b0:31:64:70:f7:
0b:1a:c8:3e:b6:7a:51:1b:e0:70:d0:1e:32:c6:7c:b1:db:86:
f0:9d:04:de:e5:2e:be:1e:70:ed:02:bb:88:79:09:c7:3c:53:
9b:72:01:6f:3f:91:cf:bb:c4:b6:d0:5b:cf:eb:fb:ca:16:66:
1f:f0:50:84:bf:85:2a:cd:f4:a2:81:66:13:dd:f0:9b:c1:48:
a5:22:61:4e:a3:a8:0d:6f:d6:5e:be:96:3a:9f:a9:10:98:30:
5a:20:2d:61:87:46:0e:a8:98:d0:8a:49:67:a2:f0:47:87:31:
f0:d0:01:e7:67:09:bd:4c:20:94:f9:f4:da:98:5c:02:0e:db:
c4:06:52:aa
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZQma5pG54Mmu6jnWIl2823ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5N2E0OGNjMTNlMjAwZTJkM2YzOGFmODMzMThkMWJjYWY2
ZjYzMzEwHhcNMjUwMTAyMDk0OTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTE2N2Q5MDAxZmM2OWM4NzcxZTBhZDExMWFjOTJlZTEzYjVhYjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGIoZwV19ymZY23acR0rWPVDq9Qn
6aWTjDTa36El+LXKTwfPIu+KZgVrFxin9faPPW+Bb+5eQAlKfMtZazppRnLpyWor
YUZu5ffWyOHa+8SKoExp0GSSdCnZ4+QlgWD+leV81Tm8Cddfin0IcZhCvQTRgo4h
RKVEHRFmK89O1auQ9G8XEqXgXnL6hLUzusBbpBUqmF+5vCsu/M6i08pb0zq0pQKS
QpGMC9m1UMwl+GFjo0X9wAhqKYe+tEvvRFtL6NbYJsuUhivCFp0QHmhgJkMlKHXT
0lP1vToM7ROIVHbe4Omf/Gi1620lVFf3+b1JdvpxxZrcPuf6vNKFquOhyQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFJUWfZAB/GnIdx4K0RGsku4TtauTMB8GA1UdIwQY
MBaAFHl6SMwT4gDi0/OK+DMY0byvb2MxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhwSXpCUGlBT0xUODRyNE14alJ2Szl2WXpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iOWNlYTAtNjkyOC00NTg0LWIzMjEt
N2Q3ZjRiNjM0ODQ5LzEvbFJaOWtBSDhhY2gzSGdyUkVheVM3aE8xcTVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9iOWNlYTAtNjkyOC00NTg0LWIzMjEtN2Q3ZjRiNjM0ODQ5
LzEvZVhwSXpCUGlBT0xUODRyNE14alJ2Szl2WXpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQFWbmAAwQF
wi4AAwQDwi5wAwQCwi6EAwQCwi6YAwQBwi6gAwQCwi6kAwQE1GxAAwQC1GxcMA0G
CSqGSIb3DQEBCwUAA4IBAQBde91a1GPxMU9XHG5othWuUYOBRuYSpgvcSC0tv5l9
n36xxkTQlFKmxyHVyS8rSBvMrNXfDspwXT66BQ4gVXGhxV6PUs2BoFTR7rWJhoU1
MuP7HNHi+oDhzKwEA1ekQVdm68AJUuanBiPRpA1rCacAU+FUuWRf98y+sDFkcPcL
Gsg+tnpRG+Bw0B4yxnyx24bwnQTe5S6+HnDtAruIeQnHPFObcgFvP5HPu8S20FvP
6/vKFmYf8FCEv4UqzfSigWYT3fCbwUilImFOo6gNb9ZevpY6n6kQmDBaIC1hh0YO
qJjQiklnovBHhzHw0AHnZwm9TCCU+fTamFwCDtvEBlKq
-----END CERTIFICATE-----
Generated at Tue Apr 22 17:12:43 2025 by rpki-client