Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/6BVvDJeu2ms_1aCPpTETl3C8eUw.roa
File: 6BVvDJeu2ms_1aCPpTETl3C8eUw.roa (raw, json)
Hash identifier: TseZn+6E4AT6IObb8mmzQZShNiJjS7IgDYSQf/b5HPM=
Subject key identifier: E8:15:6F:0C:97:AE:DA:6B:3F:D5:A0:8F:A5:31:13:97:70:BC:79:4C
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F8BC848B0E2E8DCF2D87F98A8701C
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/6BVvDJeu2ms_1aCPpTETl3C8eUw.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44803
IP address blocks: 45.148.28.0/22 maxlen: 22
217.78.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Mar 2025 09:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8b:c8:48:b0:e2:e8:dc:f2:d8:7f:98:a8:70:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8156f0c97aeda6b3fd5a08fa531139770bc794c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b3:1b:99:b5:fc:49:4b:79:ee:b9:59:d8:f0:
7e:d3:c7:4c:47:17:9f:c4:28:9a:75:5f:fd:19:cf:
4b:a3:05:6e:3b:02:dd:ee:4c:e6:47:10:c9:5d:08:
5d:1f:5d:59:4e:9e:58:df:49:a2:9f:42:a6:1d:aa:
e0:72:54:e6:84:6b:65:50:0d:6f:93:db:c5:7d:1b:
f9:4a:4c:70:f8:ed:ba:c1:da:71:26:b2:08:b9:13:
82:b9:a4:6e:ab:6a:63:1b:d9:93:c9:ad:e7:f6:82:
b1:7e:87:22:7b:ff:ee:04:6c:62:0f:3f:7a:7f:ca:
81:ab:4d:7a:92:97:ed:36:4e:24:f1:52:e9:3f:75:
51:f9:d5:5d:d6:fc:df:b3:14:98:c6:03:2a:a6:c4:
bb:7a:2b:c8:7e:31:9d:cc:d2:6b:77:c7:f2:84:ed:
b5:b0:37:57:d6:03:f1:93:c0:70:60:ef:4c:b8:28:
8b:76:06:e2:ef:1d:b2:f7:c3:23:b4:c0:78:f8:58:
d5:f7:a9:37:88:1c:a6:9a:25:53:20:3c:91:dc:7b:
c8:20:10:23:1d:97:e4:ac:8b:d7:72:ef:59:1e:8e:
09:68:1d:92:f2:ef:bc:81:ae:3a:fe:ee:5a:f6:c0:
2c:f4:94:c2:b0:d5:92:6b:47:19:99:86:fb:47:d3:
fb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:15:6F:0C:97:AE:DA:6B:3F:D5:A0:8F:A5:31:13:97:70:BC:79:4C
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/6BVvDJeu2ms_1aCPpTETl3C8eUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.28.0/22
217.78.237.0/24
Signature Algorithm: sha256WithRSAEncryption
41:29:10:e1:5e:81:75:44:63:69:98:ae:1b:84:69:27:2c:fe:
ae:c7:71:04:c3:d2:55:e6:3c:e9:fb:b2:28:b3:74:18:c3:e6:
00:b4:24:1b:a9:8c:c7:8a:dd:7e:5a:6a:2d:c8:8a:31:1d:f4:
20:0a:e7:62:09:1d:77:a6:d1:30:e7:16:df:35:dd:04:f3:39:
92:40:6a:17:c5:f6:cf:f2:90:b9:d0:c6:bc:58:92:95:6f:44:
13:cb:89:9f:66:f7:c9:dd:b8:32:94:50:8e:4d:2f:e2:f7:10:
20:60:aa:9d:55:d9:04:60:7f:85:c0:8e:bc:da:78:08:7b:27:
ab:00:37:44:ed:e3:d4:47:d3:65:c7:d5:fa:14:4e:dc:5c:2f:
91:f9:8a:cf:56:3c:83:b7:0a:7d:86:38:0a:71:31:cb:1e:bd:
b2:29:9d:8f:58:08:2f:7c:6d:65:49:45:87:40:18:c7:cd:c0:
01:dd:1e:6b:23:db:f1:b9:d6:3a:74:35:2a:f0:64:f7:da:1b:
a5:13:d7:ae:7a:1e:e7:91:df:29:79:34:55:42:09:67:de:d5:
f3:51:35:16:ae:ff:2c:5e:3e:d2:e5:89:41:b3:cc:f4:68:0f:
62:61:91:6a:45:88:75:ce:b6:7b:d6:c5:e5:90:9a:2b:2c:ae:
d0:50:c5:92
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlj4vISLDi6Nzy2H+YqHAcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjUwMTAyMDU0OTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODE1NmYwYzk3YWVkYTZiM2ZkNWEwOGZhNTMxMTM5NzcwYmM3OTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7MbmbX8SUt57rlZ2PB+08dMRxef
xCiadV/9Gc9LowVuOwLd7kzmRxDJXQhdH11ZTp5Y30min0KmHargclTmhGtlUA1v
k9vFfRv5Skxw+O26wdpxJrIIuROCuaRuq2pjG9mTya3n9oKxfocie//uBGxiDz96
f8qBq016kpftNk4k8VLpP3VR+dVd1vzfsxSYxgMqpsS7eivIfjGdzNJrd8fyhO21
sDdX1gPxk8BwYO9MuCiLdgbi7x2y98MjtMB4+FjV96k3iBymmiVTIDyR3HvIIBAj
HZfkrIvXcu9ZHo4JaB2S8u+8ga46/u5a9sAs9JTCsNWSa0cZmYb7R9P7lQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOgVbwyXrtprP9Wgj6UxE5dwvHlMMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvNkJWdkRKZXUybXNfMWFDUHBURVRsM0M4ZVV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLZQcAwQA
2U7tMA0GCSqGSIb3DQEBCwUAA4IBAQBBKRDhXoF1RGNpmK4bhGknLP6ux3EEw9JV
5jzp+7Ios3QYw+YAtCQbqYzHit1+WmotyIoxHfQgCudiCR13ptEw5xbfNd0E8zmS
QGoXxfbP8pC50Ma8WJKVb0QTy4mfZvfJ3bgylFCOTS/i9xAgYKqdVdkEYH+FwI68
2ngIeyerADdE7ePUR9Nlx9X6FE7cXC+R+YrPVjyDtwp9hjgKcTHLHr2yKZ2PWAgv
fG1lSUWHQBjHzcAB3R5rI9vxudY6dDUq8GT32hulE9eueh7nkd8peTRVQgln3tXz
UTUWrv8sXj7S5YlBs8z0aA9iYZFqRYh1zrZ71sXlkJorLK7QUMWS
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:11:48 2025 by rpki-client