Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/4laTchsQTBdt0ufcWYszmEsWRhw.roa
File: 4laTchsQTBdt0ufcWYszmEsWRhw.roa (raw, json)
Hash identifier: ZKJPAGGWWpJXcFDDMrrQ4ppESFnpMcqNg3DgxGY4JkQ=
Subject key identifier: E2:56:93:72:1B:10:4C:17:6D:D2:E7:DC:59:8B:33:98:4B:16:46:1C
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01942824210B5427900F8A09C82737C436B5
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/4laTchsQTBdt0ufcWYszmEsWRhw.roa
Signing time: Thu 02 Jan 2025 17:50:43 +0000
ROA not before: Thu 02 Jan 2025 17:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25374
IP address blocks: 79.124.10.0/23 maxlen: 23
79.124.10.0/24 maxlen: 24
79.124.11.0/24 maxlen: 24
79.124.12.0/24 maxlen: 24
79.124.18.0/23 maxlen: 23
79.124.18.0/24 maxlen: 24
79.124.19.0/24 maxlen: 24
79.124.46.0/24 maxlen: 24
80.72.84.0/22 maxlen: 24
130.185.230.0/23 maxlen: 23
130.185.230.0/24 maxlen: 24
130.185.231.0/24 maxlen: 24
130.185.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Jan 2025 13:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:21:0b:54:27:90:0f:8a:09:c8:27:37:c4:36:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e25693721b104c176dd2e7dc598b33984b16461c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b4:c2:23:39:8a:ea:e4:ae:71:07:4f:01:e6:
a9:da:98:b8:39:ef:99:d0:3e:ca:33:d8:e6:48:ad:
15:f1:6a:70:10:cc:58:9d:34:57:14:e7:a7:cf:16:
a6:79:d0:c0:c3:e7:c8:f8:46:df:d8:b5:07:ec:f7:
5f:4d:14:df:e0:17:26:dc:44:c9:40:2c:69:20:92:
b3:8e:ed:bd:16:ad:99:fd:b2:23:eb:7a:0d:89:96:
37:c9:f9:90:a0:82:44:41:43:0f:01:47:c0:8d:8b:
f7:22:74:1d:e4:1a:37:02:8a:96:47:6f:d9:5b:d5:
62:73:85:af:11:df:c9:8d:78:15:64:26:f2:88:8d:
18:75:8f:e3:a7:71:e8:52:ea:7f:b4:93:ad:e8:ff:
b3:b0:ad:70:38:24:20:e8:fe:e0:e7:cb:77:1c:12:
e4:2e:4c:1f:a1:70:1a:de:05:25:13:74:bd:40:0f:
18:09:39:19:1c:ea:49:f5:17:d8:77:3a:7c:6f:a1:
a6:10:57:bf:32:9c:d4:c5:6c:0c:47:99:b8:02:b4:
b6:3f:4e:76:8d:1c:5b:b9:c1:43:31:89:24:a2:56:
c5:61:63:bb:c6:e6:9d:f4:a7:f2:a4:02:0c:07:3e:
1b:64:eb:72:1b:30:35:d4:0a:ec:10:4d:c1:6f:80:
a0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:56:93:72:1B:10:4C:17:6D:D2:E7:DC:59:8B:33:98:4B:16:46:1C
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/4laTchsQTBdt0ufcWYszmEsWRhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.124.10.0-79.124.12.255
79.124.18.0/23
79.124.46.0/24
80.72.84.0/22
130.185.230.0/23
130.185.233.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:66:21:ad:c4:8b:93:d0:57:6d:ce:cb:15:8f:7b:65:f7:2a:
c4:8d:7e:05:d0:dd:6e:6b:96:66:58:03:54:96:9a:b3:df:a9:
ef:52:df:22:6f:f7:f3:18:ab:7e:27:9f:d5:3e:8a:48:dc:a5:
93:33:68:1e:ab:09:e1:05:41:8e:b6:d5:97:49:0a:6b:60:63:
07:18:9d:c9:77:23:c1:15:15:54:ae:db:4e:23:b1:8d:f8:47:
20:70:16:50:12:0d:5f:c9:b2:ad:3a:7c:d5:12:92:d1:38:bc:
6a:e1:03:bd:d5:1b:8f:ec:0b:f0:3b:4d:22:92:1c:35:26:1e:
82:91:b8:8f:43:2a:c8:80:bb:05:f3:4f:f4:9e:d7:3f:0f:52:
dc:06:7a:83:38:4a:c0:ed:eb:51:0e:f0:6b:0c:6d:41:94:6f:
3d:ae:e9:f0:ee:4a:7b:b0:28:0e:26:3e:39:28:51:be:ec:e2:
9f:f8:c5:bd:ce:82:0d:29:de:59:f0:6c:d6:32:dc:14:c9:4f:
24:f0:9a:b9:82:38:8f:f4:86:bc:6c:62:a1:18:42:2c:47:97:
b6:39:ed:a8:f3:9c:c3:71:32:84:24:cb:74:5b:b4:02:36:54:
35:d6:24:39:be:c4:97:41:71:c0:db:7b:06:04:62:41:0d:b9:
33:65:07:2a
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZQoJCELVCeQD4oJyCc3xDa1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjUwMTAyMTc1MDQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjU2OTM3MjFiMTA0YzE3NmRkMmU3ZGM1OThiMzM5ODRiMTY0NjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbTCIzmK6uSucQdPAeap2pi4Oe+Z
0D7KM9jmSK0V8WpwEMxYnTRXFOenzxamedDAw+fI+Ebf2LUH7PdfTRTf4Bcm3ETJ
QCxpIJKzju29Fq2Z/bIj63oNiZY3yfmQoIJEQUMPAUfAjYv3InQd5Bo3AoqWR2/Z
W9Vic4WvEd/JjXgVZCbyiI0YdY/jp3HoUup/tJOt6P+zsK1wOCQg6P7g58t3HBLk
LkwfoXAa3gUlE3S9QA8YCTkZHOpJ9RfYdzp8b6GmEFe/MpzUxWwMR5m4ArS2P052
jRxbucFDMYkkolbFYWO7xuad9KfypAIMBz4bZOtyGzA11ArsEE3Bb4CgrQIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFOJWk3IbEEwXbdLn3FmLM5hLFkYcMB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvNGxhVGNoc1FUQmR0MHVmY1dZc3ptRXNXUmh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAwDBAFPfAoD
BABPfAwDBAFPfBIDBABPfC4DBAJQSFQDBAGCueYDBACCuekwDQYJKoZIhvcNAQEL
BQADggEBAI1mIa3Ei5PQV23OyxWPe2X3KsSNfgXQ3W5rlmZYA1SWmrPfqe9S3yJv
9/MYq34nn9U+ikjcpZMzaB6rCeEFQY621ZdJCmtgYwcYncl3I8EVFVSu204jsY34
RyBwFlASDV/Jsq06fNUSktE4vGrhA73VG4/sC/A7TSKSHDUmHoKRuI9DKsiAuwXz
T/Se1z8PUtwGeoM4SsDt61EO8GsMbUGUbz2u6fDuSnuwKA4mPjkoUb7s4p/4xb3O
gg0p3lnwbNYy3BTJTyTwmrmCOI/0hrxsYqEYQixHl7Y57ajznMNxMoQky3RbtAI2
VDXWJDm+xJdBccDbewYEYkENuTNlByo=
-----END CERTIFICATE-----
Generated at Sat Apr 19 10:49:30 2025 by rpki-client