Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/V0q3ikyVFleJRWezx3-ZjYnpTYs.roa
File: V0q3ikyVFleJRWezx3-ZjYnpTYs.roa (raw, json)
Hash identifier: T0TAoHml6YoLOMFwGw1lnnnNhhLT6wynv/K0wbw9kg8=
Subject key identifier: 57:4A:B7:8A:4C:95:16:57:89:45:67:B3:C7:7F:99:8D:89:E9:4D:8B
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 0194F922EBDCA79394C6BE53A31C3B6326D1
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/V0q3ikyVFleJRWezx3-ZjYnpTYs.roa
Signing time: Wed 12 Feb 2025 07:50:02 +0000
ROA not before: Wed 12 Feb 2025 07:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 91.108.192.0/24 maxlen: 24
91.108.193.0/24 maxlen: 24
91.108.194.0/24 maxlen: 24
91.108.195.0/24 maxlen: 24
91.108.204.0/22 maxlen: 22
91.108.208.0/22 maxlen: 22
91.108.208.0/24 maxlen: 24
91.108.212.0/22 maxlen: 22
91.108.216.0/22 maxlen: 22
91.108.220.0/22 maxlen: 22
91.108.224.0/24 maxlen: 24
91.108.228.0/22 maxlen: 22
91.108.232.0/22 maxlen: 22
91.108.236.0/24 maxlen: 24
91.108.238.0/24 maxlen: 24
91.108.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Feb 2025 08:57:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f9:22:eb:dc:a7:93:94:c6:be:53:a3:1c:3b:63:26:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Feb 12 07:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=574ab78a4c951657894567b3c77f998d89e94d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f7:e5:f6:db:42:d5:9c:d1:31:aa:80:e9:0e:
93:a2:e5:bc:3c:15:79:9d:a8:59:0e:ce:4e:1e:09:
7a:ba:3d:4c:15:46:c7:b8:dd:3c:ba:84:50:a2:34:
af:cc:5e:fd:dd:03:73:6f:01:76:75:5c:ce:68:a8:
c1:d8:f5:fc:4b:e2:cc:16:24:22:f9:01:48:fb:8a:
d5:10:ad:d5:ce:db:11:90:d0:b2:2d:76:2e:a8:66:
f6:1c:87:9a:23:8f:c2:3e:5e:f1:64:e4:81:ee:8e:
a3:0e:6c:74:bd:b8:27:75:b5:a8:04:e8:52:81:fb:
16:a4:57:06:51:cb:9d:b6:ec:a0:e3:4a:54:d2:b9:
db:3a:4f:ed:1e:e8:37:40:51:84:87:91:24:70:70:
43:8d:e2:b8:ea:b2:3c:e8:97:29:66:90:d4:9b:97:
69:56:db:ae:f3:42:58:be:73:d8:cf:51:1a:32:ec:
e2:c9:05:10:e3:0c:41:46:aa:61:2e:ec:f2:f3:ef:
a0:99:8a:9c:ec:3f:c2:bf:33:ae:1f:f6:52:0c:49:
3d:83:f4:f1:4c:44:09:be:6f:ca:5f:65:12:82:ec:
82:b4:23:55:97:d1:b5:ff:d3:09:a7:1f:4a:17:ff:
08:68:2b:9a:60:53:bf:d2:fe:34:44:6b:04:25:a7:
4a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4A:B7:8A:4C:95:16:57:89:45:67:B3:C7:7F:99:8D:89:E9:4D:8B
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/V0q3ikyVFleJRWezx3-ZjYnpTYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.192.0/22
91.108.204.0-91.108.224.255
91.108.228.0-91.108.236.255
91.108.238.0/24
91.108.255.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ec:b4:df:2f:9b:a2:0b:88:c5:cf:31:74:62:eb:a9:99:53:
45:27:b5:24:20:9e:ba:fe:6e:fe:57:fa:dd:c0:4d:39:98:19:
1e:53:36:3f:4f:9b:a8:8d:4a:84:18:60:3f:7a:fd:d6:4e:02:
ce:8c:1a:99:4e:65:6c:d6:f5:37:43:e3:14:24:23:df:00:64:
53:34:c3:76:e2:3a:53:9c:57:20:b0:9a:97:2c:ee:da:50:bc:
80:23:2e:68:1f:6f:b5:c4:02:32:77:9a:d2:af:47:bf:f8:82:
c7:74:66:b1:47:b4:a5:a6:a8:a0:03:ec:2c:45:5b:09:c9:84:
9a:2c:61:eb:07:b7:44:be:03:e6:ee:11:9e:5d:28:fb:6c:58:
8c:0a:af:b3:21:d0:c6:54:dd:40:b6:04:55:b8:53:c5:ac:8b:
31:f5:84:bd:24:98:18:3d:51:1e:c1:94:ac:1c:bb:4c:c5:3b:
1c:2e:85:92:17:56:f9:88:1a:4c:36:87:d8:85:23:9a:89:2a:
51:eb:d7:9f:72:17:5b:fa:12:3b:27:9d:86:20:a6:5c:cd:23:
c4:ec:8b:4c:f6:ba:c7:12:9e:fb:07:82:45:72:83:7f:0e:54:
3d:46:b2:41:64:43:34:58:25:a7:ed:bb:21:3a:c2:5c:e4:28:
ac:f8:e5:8e
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZT5Iuvcp5OUxr5Toxw7YybRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm
NzMzMzkwHhcNMjUwMjEyMDc1MDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzRhYjc4YTRjOTUxNjU3ODk0NTY3YjNjNzdmOTk4ZDg5ZTk0ZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ffl9ttC1ZzRMaqA6Q6TouW8PBV5
nahZDs5OHgl6uj1MFUbHuN08uoRQojSvzF793QNzbwF2dVzOaKjB2PX8S+LMFiQi
+QFI+4rVEK3VztsRkNCyLXYuqGb2HIeaI4/CPl7xZOSB7o6jDmx0vbgndbWoBOhS
gfsWpFcGUcudtuyg40pU0rnbOk/tHug3QFGEh5EkcHBDjeK46rI86JcpZpDUm5dp
Vtuu80JYvnPYz1EaMuziyQUQ4wxBRqphLuzy8++gmYqc7D/CvzOuH/ZSDEk9g/Tx
TEQJvm/KX2USguyCtCNVl9G1/9MJpx9KF/8IaCuaYFO/0v40RGsEJadKdwIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFFdKt4pMlRZXiUVns8d/mY2J6U2LMB8GA1UdIwQY
MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt
ZGE3NTQzMGIxNmY2LzEvVjBxM2lreVZGbGVKUldlengzLVpqWW5wVFlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2
LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQCW2zAMAwD
BAJbbMwDBABbbOAwDAMEAlts5AMEAFts7AMEAFts7gMEAFts/zANBgkqhkiG9w0B
AQsFAAOCAQEAL+y03y+boguIxc8xdGLrqZlTRSe1JCCeuv5u/lf63cBNOZgZHlM2
P0+bqI1KhBhgP3r91k4CzowamU5lbNb1N0PjFCQj3wBkUzTDduI6U5xXILCalyzu
2lC8gCMuaB9vtcQCMnea0q9Hv/iCx3RmsUe0paaooAPsLEVbCcmEmixh6we3RL4D
5u4Rnl0o+2xYjAqvsyHQxlTdQLYEVbhTxayLMfWEvSSYGD1RHsGUrBy7TMU7HC6F
khdW+YgaTDaH2IUjmokqUevXn3IXW/oSOyedhiCmXM0jxOyLTPa6xxKe+weCRXKD
fw5UPUayQWRDNFglp+27ITrCXOQorPjljg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:13 2025 by rpki-client