Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1rEwcrlScK82FRuRipL9dvIFrQ4.roa
File: 1rEwcrlScK82FRuRipL9dvIFrQ4.roa (raw, json)
Hash identifier: p7xU+EMB9IRlBLRyrwgp6KHnRljZb0lkbuy2svw1y4I=
Subject key identifier: D6:B1:30:72:B9:52:70:AF:36:15:1B:91:8A:92:FD:76:F2:05:AD:0E
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0193A146A7D4716CF371746402973B61C32E
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1rEwcrlScK82FRuRipL9dvIFrQ4.roa
Signing time: Sat 07 Dec 2024 13:19:42 +0000
ROA not before: Sat 07 Dec 2024 13:19:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb00::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440:8::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a1:46:a7:d4:71:6c:f3:71:74:64:02:97:3b:61:c3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Dec 7 13:19:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6b13072b95270af36151b918a92fd76f205ad0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1d:43:d1:3b:17:59:b9:f9:5d:cc:12:cc:5b:
ba:6c:14:7d:a3:21:b0:aa:3d:11:0b:0f:05:d8:17:
e2:98:06:1d:e1:6d:cd:7f:e6:c3:04:21:4b:f1:24:
2d:99:02:75:61:35:30:be:94:15:ff:4e:dc:fa:a5:
a6:e5:61:30:d2:52:fc:2a:d3:22:06:e9:f7:47:14:
95:43:9b:c0:1e:57:6d:d8:e2:2f:dc:ba:26:28:c0:
40:0a:61:ec:6e:14:eb:7f:87:c2:c3:13:0f:49:bd:
4f:7d:84:12:ef:84:0d:4d:ad:49:da:12:cc:07:90:
34:c1:51:9e:39:d3:d3:16:10:20:8e:d2:d4:12:9e:
06:f8:32:68:25:77:9f:31:8f:b0:16:13:46:79:b8:
8c:d6:40:6a:41:4b:f1:76:78:dd:70:43:e1:49:26:
92:84:70:67:a7:ea:ae:75:4f:e4:78:6f:86:36:27:
0f:0f:de:43:7a:e7:17:58:37:1e:68:da:5b:94:83:
1e:0b:16:81:b7:2c:e3:12:89:a9:cc:96:3d:bb:0e:
b0:95:a0:20:90:de:c6:e0:ab:63:b0:ab:cf:ee:49:
1a:da:3a:0d:0d:5e:51:ff:fd:3e:52:bb:c4:c5:de:
c0:5c:a6:5d:07:4e:de:07:e6:6a:2f:c1:5b:3c:38:
03:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B1:30:72:B9:52:70:AF:36:15:1B:91:8A:92:FD:76:F2:05:AD:0E
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1rEwcrlScK82FRuRipL9dvIFrQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.131.0.0/23
45.136.4.0/24
45.141.148.0/24
45.147.44.0/24
77.83.200.0/22
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440:8::/48
2a13:a441::/32
2a13:a445::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
11:ef:79:32:66:b3:cf:08:14:48:ac:cd:a9:cc:48:9b:de:d5:
7c:55:52:8d:f5:a9:a5:83:9f:48:f4:63:c8:0a:98:21:df:cf:
74:2f:f5:20:dd:80:6d:32:54:8d:0f:69:bf:1d:75:05:ee:b8:
7d:6f:86:b9:53:ce:83:bc:82:b9:29:2a:17:99:54:69:7f:a1:
a1:f6:80:29:c7:0f:99:ff:dc:fb:85:c5:1e:af:b2:19:85:2b:
a4:90:3b:0a:bf:1b:73:0a:d3:d5:2c:86:1d:86:da:1d:87:fc:
32:c6:c0:a7:33:1a:87:d7:d2:1d:d0:e4:cf:ca:03:cc:8a:79:
c3:34:d0:64:9a:f1:90:0c:6d:55:59:49:b0:30:b0:ec:4d:dd:
8a:d4:d7:be:f6:80:77:95:fc:00:67:0e:1c:cf:2f:9d:a3:1f:
a8:32:9e:68:b5:64:2c:c5:8a:81:9b:0c:7a:3f:62:16:6d:c6:
12:c0:81:a7:ea:47:06:0f:12:0c:52:3d:4b:3d:77:eb:33:8c:
a2:a2:47:3f:d5:c1:e7:db:7a:d6:a6:e6:f3:73:ca:46:6e:5f:
a7:39:ee:3e:b1:e0:60:df:b7:8f:3d:3d:db:4f:4a:bc:cc:8c:
50:32:62:82:4d:eb:50:8b:62:4e:bb:1d:a6:43:5c:72:43:c0:
d8:7e:75:ab
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZOhRqfUcWzzcXRkApc7YcMuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjQxMjA3MTMxOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmIxMzA3MmI5NTI3MGFmMzYxNTFiOTE4YTkyZmQ3NmYyMDVhZDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB1D0TsXWbn5XcwSzFu6bBR9oyGw
qj0RCw8F2BfimAYd4W3Nf+bDBCFL8SQtmQJ1YTUwvpQV/07c+qWm5WEw0lL8KtMi
Bun3RxSVQ5vAHldt2OIv3LomKMBACmHsbhTrf4fCwxMPSb1PfYQS74QNTa1J2hLM
B5A0wVGeOdPTFhAgjtLUEp4G+DJoJXefMY+wFhNGebiM1kBqQUvxdnjdcEPhSSaS
hHBnp+qudU/keG+GNicPD95DeucXWDceaNpblIMeCxaBtyzjEompzJY9uw6wlaAg
kN7G4KtjsKvP7kka2joNDV5R//0+UrvExd7AXKZdB07eB+ZqL8FbPDgD1wIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFNaxMHK5UnCvNhUbkYqS/XbyBa0OMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvMXJFd2NybFNjSzgyRlJ1UmlwTDlkdklGclE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG1BggrBgEFBQcBBwEB/wSBpTCBojBQBAIAATBKMAwDBAAF
tGkDBAIFtGgDBAEtgwADBAAtiAQDBAAtjZQDBAAtkywDBAJNU8gDBADCdOQDBAHC
dOwDBADCkhoDBADCkiQDBADCki8wTgQCAAIwSAMFAyoJh4ADBQMqD7cAAwUDKg/p
AAMFAyoP6wADBQMqD+0AAwUDKg/5AAMHACoTpEAACAMFACoTpEEDBQAqE6RFAwUA
KhOkRzANBgkqhkiG9w0BAQsFAAOCAQEAEe95MmazzwgUSKzNqcxIm97VfFVSjfWp
pYOfSPRjyAqYId/PdC/1IN2AbTJUjQ9pvx11Be64fW+GuVPOg7yCuSkqF5lUaX+h
ofaAKccPmf/c+4XFHq+yGYUrpJA7Cr8bcwrT1SyGHYbaHYf8MsbApzMah9fSHdDk
z8oDzIp5wzTQZJrxkAxtVVlJsDCw7E3ditTXvvaAd5X8AGcOHM8vnaMfqDKeaLVk
LMWKgZsMej9iFm3GEsCBp+pHBg8SDFI9Sz136zOMoqJHP9XB59t61qbm83PKRm5f
pznuPrHgYN+3jz09209KvMyMUDJigk3rUItiTrsdpkNcckPA2H51qw==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:33 2025 by rpki-client