Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1-o6lDLWPpsNx8vMH3JNhRvcnrE4.roa
File: 1-o6lDLWPpsNx8vMH3JNhRvcnrE4.roa (raw, json)
Hash identifier: L9jAxNs1wNEe0ZfKl3X7QGXrY5x9QqGjwDgpbrCVCKE=
Subject key identifier: FA:8E:A5:0C:B5:8F:A6:C3:71:F2:F3:07:DC:93:61:46:F7:27:AC:4E
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019072C172F98597882741DD87BA56E2F72E
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1-o6lDLWPpsNx8vMH3JNhRvcnrE4.roa
Signing time: Tue 02 Jul 2024 09:23:18 +0000
ROA not before: Tue 02 Jul 2024 09:23:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb00::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440::/32 maxlen: 32
2a13:a441::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 06 Jul 2024 21:38:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:72:c1:72:f9:85:97:88:27:41:dd:87:ba:56:e2:f7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jul 2 09:23:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa8ea50cb58fa6c371f2f307dc936146f727ac4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4f:89:58:2f:7e:5e:c0:12:59:50:80:b1:6b:
72:4f:15:37:6a:3c:a8:bc:bc:bc:cd:7a:a1:45:4d:
02:ed:e4:84:f0:65:f5:55:b1:cb:7f:ca:95:4d:76:
4e:93:15:8d:a1:b9:e2:50:33:23:74:2a:02:2f:b7:
62:5a:2d:b2:be:c2:9f:31:b7:f4:65:36:99:24:df:
df:82:03:29:4f:1d:fb:e0:5f:c3:b3:9b:33:c0:ed:
ff:ea:91:8b:52:a7:9b:6d:cb:c5:2f:b1:e9:19:ee:
43:b4:ad:6c:71:7f:da:5c:75:7e:02:71:ec:65:cd:
21:ba:50:8f:b7:22:fb:b9:cc:5e:0e:83:cf:69:cb:
fa:d7:a7:3a:37:40:8f:f0:7b:bd:94:a1:70:ad:b5:
39:10:71:f8:c7:dd:ab:87:6e:d7:25:be:30:88:cf:
88:11:53:3b:a8:02:51:ee:95:cc:c1:b6:58:3a:76:
64:c6:0d:5b:f5:94:70:19:6b:15:87:40:1f:f0:07:
94:23:21:10:f5:b4:5f:6d:60:74:bf:8e:99:3c:cf:
e8:f9:98:82:b7:3e:2f:83:77:77:aa:5d:5b:d7:c1:
45:73:63:99:5f:ae:78:76:ed:9b:3e:82:51:70:c7:
47:4b:8c:9d:6d:e5:7e:29:d9:65:f7:b1:fd:81:30:
e6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8E:A5:0C:B5:8F:A6:C3:71:F2:F3:07:DC:93:61:46:F7:27:AC:4E
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1-o6lDLWPpsNx8vMH3JNhRvcnrE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.107.0/24
45.131.0.0/23
45.141.148.0/24
45.147.44.0/24
77.83.200.0/22
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440::/31
2a13:a445::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
1d:37:4d:51:12:21:51:af:ef:94:6e:a2:26:ff:72:98:24:05:
1c:fb:bf:f9:a5:03:46:65:f6:af:71:01:f0:18:cd:51:42:bc:
8e:4a:77:50:8a:ea:92:2a:6b:f0:82:44:ba:6c:5a:29:3b:6d:
f4:60:98:41:8f:82:fa:72:4c:e4:be:75:97:0f:40:92:d3:f6:
75:f4:af:6e:7b:58:6c:76:4f:0c:91:c9:df:f1:c6:63:df:72:
fe:fb:b5:b6:8f:b7:42:c9:e9:69:3c:0c:1c:0c:cc:b1:71:b6:
4c:52:6b:99:e2:88:b1:49:59:3c:9e:cd:ec:42:be:d2:10:fe:
dd:9c:b6:7b:76:39:26:fb:d2:53:06:05:8c:27:52:b7:08:77:
77:60:a4:79:1e:58:5c:d0:30:75:7e:1b:a5:78:5c:4a:f7:64:
b4:6d:fc:34:88:e3:14:2f:9e:f0:31:19:f8:50:0a:51:00:b8:
7e:97:ca:b2:a4:7f:36:27:26:c4:20:47:8c:05:70:96:b3:74:
eb:1b:12:12:53:c0:cc:ef:4b:bc:74:68:db:fc:48:88:42:f7:
6a:f1:a7:ca:2e:a4:ad:74:0e:34:51:a6:7d:be:46:14:87:c0:
49:c6:e1:fd:72:47:db:ad:5a:c6:62:73:a5:f4:a8:0f:b6:df:
19:6e:1e:b5
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAZBywXL5hZeIJ0Hdh7pW4vcuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjQwNzAyMDkyMzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYThlYTUwY2I1OGZhNmMzNzFmMmYzMDdkYzkzNjE0NmY3MjdhYzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU+JWC9+XsASWVCAsWtyTxU3ajyo
vLy8zXqhRU0C7eSE8GX1VbHLf8qVTXZOkxWNobniUDMjdCoCL7diWi2yvsKfMbf0
ZTaZJN/fggMpTx374F/Ds5szwO3/6pGLUqebbcvFL7HpGe5DtK1scX/aXHV+AnHs
Zc0hulCPtyL7ucxeDoPPacv616c6N0CP8Hu9lKFwrbU5EHH4x92rh27XJb4wiM+I
EVM7qAJR7pXMwbZYOnZkxg1b9ZRwGWsVh0Af8AeUIyEQ9bRfbWB0v46ZPM/o+ZiC
tz4vg3d3ql1b18FFc2OZX654du2bPoJRcMdHS4ydbeV+Kdll97H9gTDmHwIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFPqOpQy1j6bDcfLzB9yTYUb3J6xOMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvMS1vNmxETFdQcHNOeDh2TUgzSk5oUnZjbnJFNC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZGIvOGUwN2RkLTRmZTUtNDgyMC1iY2JlLTVkZDZlMjJlYmFi
MC8xL1NBWHhmQzF4TTlMYTA2amZmalV4WGpmdlhhOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBngYIKwYBBQUHAQcBAf8EgY4wgYswQgQCAAEwPAMEAAW0
awMEAS2DAAMEAC2NlAMEAC2TLAMEAk1TyAMEAMJ05AMEAcJ07AMEAMKSGgMEAMKS
JAMEAMKSLzBFBAIAAjA/AwUDKgmHgAMFAyoPtwADBQMqD+kAAwUDKg/rAAMFAyoP
7QADBQMqD/kAAwUBKhOkQAMFACoTpEUDBQAqE6RHMA0GCSqGSIb3DQEBCwUAA4IB
AQAdN01REiFRr++UbqIm/3KYJAUc+7/5pQNGZfavcQHwGM1RQryOSndQiuqSKmvw
gkS6bFopO230YJhBj4L6ckzkvnWXD0CS0/Z19K9ue1hsdk8Mkcnf8cZj33L++7W2
j7dCyelpPAwcDMyxcbZMUmuZ4oixSVk8ns3sQr7SEP7dnLZ7djkm+9JTBgWMJ1K3
CHd3YKR5Hlhc0DB1fhuleFxK92S0bfw0iOMUL57wMRn4UApRALh+l8qypH82JybE
IEeMBXCWs3TrGxISU8DM70u8dGjb/EiIQvdq8afKLqStdA40UaZ9vkYUh8BJxuH9
ckfbrVrGYnOl9KgPtt8Zbh61
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:48 2025 by rpki-client