Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/2hnpK6ebxKV56zkJycXk0x9PbfY.roa
File: 2hnpK6ebxKV56zkJycXk0x9PbfY.roa (raw, json)
Hash identifier: DgoN7eE0P3H0Epz6qnBCkjkznZSpdXD3d+XzRJ25DQM=
Subject key identifier: DA:19:E9:2B:A7:9B:C4:A5:79:EB:39:09:C9:C5:E4:D3:1F:4F:6D:F6
Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial: 0195A98CC4FF83E6A7D4E1CFAD21517EE661
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/2hnpK6ebxKV56zkJycXk0x9PbfY.roa
Signing time: Tue 18 Mar 2025 13:58:49 +0000
ROA not before: Tue 18 Mar 2025 13:58:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39040
IP address blocks: 194.187.88.0/22 maxlen: 22
194.187.89.0/24 maxlen: 24
194.187.90.0/23 maxlen: 23
2a02:388::/32 maxlen: 32
2a02:388:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Mar 2025 09:55:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:8c:c4:ff:83:e6:a7:d4:e1:cf:ad:21:51:7e:e6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Validity
Not Before: Mar 18 13:58:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da19e92ba79bc4a579eb3909c9c5e4d31f4f6df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f9:f4:4c:a1:09:8a:3c:5a:b5:2c:16:65:94:
4e:19:0d:13:25:a8:f1:2d:f8:f9:93:ff:9c:11:00:
e6:99:63:a4:0c:e1:62:eb:da:d9:d3:4f:73:ab:95:
be:9e:02:a4:39:38:28:df:c6:78:91:08:11:02:b5:
57:ed:cc:a4:1f:ee:f4:9a:89:2d:e9:64:fc:d0:8a:
9b:44:1d:ff:1e:56:53:d4:0a:ac:f5:40:e8:e7:6c:
a1:b1:d1:7a:f2:a8:ff:cd:cc:e9:1d:49:8a:ee:75:
3f:62:a7:cb:1c:ee:14:aa:05:f6:23:86:ca:fb:a7:
e7:58:82:ec:8e:d8:61:17:fc:56:97:41:0d:fc:dd:
69:b9:d9:8b:c6:8a:62:c3:d9:31:18:44:53:0b:99:
99:60:bf:76:62:f1:e7:b3:16:1b:df:13:e3:b2:3b:
5f:43:63:c0:98:4d:81:90:2d:ea:66:7b:d5:11:12:
54:07:2e:9f:aa:96:a6:6b:7d:ff:49:68:b9:95:26:
c5:67:76:a5:ce:68:ac:1c:94:ac:b3:94:8a:a9:7a:
f8:9f:04:03:bb:80:67:fb:a5:2c:b5:36:0b:ca:56:
a7:ff:c8:1b:d6:d0:ec:8c:ba:14:dc:a4:8a:ee:e3:
95:c4:00:58:e4:df:93:37:65:2e:e6:dd:44:67:34:
43:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:19:E9:2B:A7:9B:C4:A5:79:EB:39:09:C9:C5:E4:D3:1F:4F:6D:F6
X509v3 Authority Key Identifier:
keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/2hnpK6ebxKV56zkJycXk0x9PbfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.88.0/22
IPv6:
2a02:388::/32
Signature Algorithm: sha256WithRSAEncryption
53:a2:3d:c1:56:8f:c2:3c:23:a8:6a:8b:56:80:3a:e6:55:c6:
bf:71:fe:ac:59:b6:52:71:b9:e4:db:12:75:9e:65:ae:85:1f:
3e:37:37:bc:d3:3e:b7:01:8b:de:d1:b5:9c:e3:2d:3b:84:be:
de:89:79:a8:91:2c:6d:36:f7:7f:bb:ea:02:d7:1a:8b:c9:ae:
1e:55:a5:b8:0b:29:f0:50:86:6b:d9:ab:e6:89:7d:21:84:ce:
55:32:6d:88:f5:21:66:fc:0e:c3:6f:9e:a2:f6:ad:4f:a8:00:
de:90:10:4f:ee:89:91:94:8d:40:e0:8a:28:b8:fc:ad:96:8f:
09:be:0e:ef:1a:df:75:2d:a6:7c:90:69:77:30:a5:1a:65:10:
50:3e:76:0e:2f:d4:da:c4:0b:f5:05:b8:24:b6:5e:46:c0:e5:
38:74:f5:41:2c:d5:39:09:d0:2f:cf:7a:79:e1:cb:e7:e3:16:
dc:cc:16:53:e9:30:2d:14:26:79:ff:ee:6f:d9:17:e9:6a:ef:
e3:9f:e7:36:15:3c:a4:8e:ac:35:3f:2c:77:26:a1:08:d6:21:
a0:e7:89:17:dc:6c:aa:55:2f:16:43:64:b5:75:7b:f2:00:24:
1a:55:8b:a8:d0:d6:59:fa:72:27:04:54:04:92:e1:52:e2:cf:
0e:18:14:6f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZWpjMT/g+an1OHPrSFRfuZhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MDE1Y2M4ZGExZjFiYmYzNDNlMjZhYjIwOGRmOGJiMjZm
ZDUzYWUwHhcNMjUwMzE4MTM1ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTE5ZTkyYmE3OWJjNGE1NzllYjM5MDljOWM1ZTRkMzFmNGY2ZGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPn0TKEJijxatSwWZZROGQ0TJajx
Lfj5k/+cEQDmmWOkDOFi69rZ009zq5W+ngKkOTgo38Z4kQgRArVX7cykH+70mokt
6WT80IqbRB3/HlZT1Aqs9UDo52yhsdF68qj/zczpHUmK7nU/YqfLHO4UqgX2I4bK
+6fnWILsjthhF/xWl0EN/N1pudmLxopiw9kxGERTC5mZYL92YvHnsxYb3xPjsjtf
Q2PAmE2BkC3qZnvVERJUBy6fqpama33/SWi5lSbFZ3alzmisHJSss5SKqXr4nwQD
u4Bn+6UstTYLylan/8gb1tDsjLoU3KSK7uOVxABY5N+TN2Uu5t1EZzRDxQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNoZ6Sunm8Slees5CcnF5NMfT232MB8GA1UdIwQY
MBaAFFgBXMjaHxu/ND4mqyCN+Lsm/VOuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYt
OGVlMjFiNzRkZDU2LzEvMmhucEs2ZWJ4S1Y1NnprSnljWGsweDlQYmZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYtOGVlMjFiNzRkZDU2
LzEvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwrtYMA0E
AgACMAcDBQAqAgOIMA0GCSqGSIb3DQEBCwUAA4IBAQBToj3BVo/CPCOoaotWgDrm
Vca/cf6sWbZScbnk2xJ1nmWuhR8+Nze80z63AYve0bWc4y07hL7eiXmokSxtNvd/
u+oC1xqLya4eVaW4CynwUIZr2avmiX0hhM5VMm2I9SFm/A7Db56i9q1PqADekBBP
7omRlI1A4IoouPytlo8Jvg7vGt91LaZ8kGl3MKUaZRBQPnYOL9TaxAv1Bbgktl5G
wOU4dPVBLNU5CdAvz3p54cvn4xbczBZT6TAtFCZ5/+5v2Rfpau/jn+c2FTykjqw1
Pyx3JqEI1iGg54kX3GyqVS8WQ2S1dXvyACQaVYuo0NZZ+nInBFQEkuFS4s8OGBRv
-----END CERTIFICATE-----
Generated at Fri Apr 18 20:13:14 2025 by rpki-client