Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/7jmYiZVNslAbjcAQlB3IUXySUNo.roa
File: 7jmYiZVNslAbjcAQlB3IUXySUNo.roa (raw, json)
Hash identifier: gTts3A2zpzlwB2Ux9aTvTUo4DuRDAvNvQrQPYHGUpdA=
Subject key identifier: EE:39:98:89:95:4D:B2:50:1B:8D:C0:10:94:1D:C8:51:7C:92:50:DA
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01941F8C8FC8C5EAF7082B5B0519270C7770
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/7jmYiZVNslAbjcAQlB3IUXySUNo.roa
Signing time: Wed 01 Jan 2025 01:48:13 +0000
ROA not before: Wed 01 Jan 2025 01:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.155.242.0/24 maxlen: 24
194.143.203.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
213.220.3.0/24 maxlen: 24
213.220.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Jan 2025 07:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8f:c8:c5:ea:f7:08:2b:5b:05:19:27:0c:77:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 1 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee399889954db2501b8dc010941dc8517c9250da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6d:25:0e:88:e4:ac:b2:9f:92:6f:a6:17:3e:
5e:a5:df:17:49:81:f8:75:e4:26:ca:4d:63:26:83:
b5:6d:15:0c:7e:48:ee:74:cd:97:27:a5:b9:05:85:
d4:fe:cd:eb:68:b4:30:bb:ea:1a:ed:8a:45:a5:89:
31:99:2d:59:4a:f7:b0:6f:d6:7a:20:2c:c4:1a:8f:
c6:2e:a9:0d:1a:41:c3:ba:c0:7e:32:81:1c:95:d9:
46:f0:2a:3b:03:54:5e:2a:02:63:1e:10:c7:54:ab:
58:0e:2e:dc:85:fe:be:f2:7b:35:ec:8e:f1:99:2f:
6e:8d:c0:fd:47:82:c0:91:66:bd:c9:48:24:54:a6:
a7:b3:11:94:f3:01:4b:26:c6:77:15:c6:3c:15:0d:
97:bb:41:5b:c0:f3:ec:31:dc:f5:21:5b:33:d9:a2:
32:ef:2c:b8:ba:a6:a2:17:d1:41:8d:7f:73:6e:20:
c7:e0:c4:28:ad:5b:1c:68:70:85:06:4c:43:37:5a:
ca:f0:59:e8:21:29:73:b6:bb:f4:e7:fc:ef:a0:1a:
65:7b:82:02:a1:27:6c:c8:fd:7f:f7:d7:a1:75:63:
90:86:4f:ea:c2:27:4c:0c:a2:df:a9:ed:82:19:0d:
7f:72:10:7d:f3:37:b9:aa:39:a3:cd:57:2a:c3:92:
fb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:39:98:89:95:4D:B2:50:1B:8D:C0:10:94:1D:C8:51:7C:92:50:DA
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/7jmYiZVNslAbjcAQlB3IUXySUNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.242.0/24
194.143.203.0/24
194.143.205.0/24
194.143.221.0/24
213.220.3.0/24
213.220.19.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:8d:af:ad:ad:ed:71:64:64:d9:f0:1c:b6:03:e6:8b:a6:6a:
ea:29:a3:ba:df:2c:99:95:32:de:64:f1:21:bc:76:fa:9b:13:
1a:39:1c:9b:46:c1:c0:90:23:fd:9e:51:08:13:c0:d4:38:70:
81:df:31:da:35:87:6c:3d:32:65:5d:c1:68:cc:1b:f7:dd:a8:
87:6d:1b:8e:31:7c:4c:8f:c6:23:2d:bc:84:3a:d0:48:80:e6:
de:78:3c:a6:e8:54:3c:9a:45:ad:ff:8e:5f:e6:24:57:5a:df:
ab:5d:77:28:42:df:9b:32:01:7e:a1:6c:f6:e5:e8:27:93:be:
b4:b9:5b:99:27:9d:77:84:b6:b9:82:67:9a:b6:c3:bf:ef:92:
ea:0a:ae:ef:b5:d5:7a:85:11:72:fa:15:d0:85:bc:ec:91:e2:
60:94:79:81:aa:00:70:2d:33:1f:10:34:ba:73:ab:91:41:cd:
98:09:17:bd:59:f6:5f:3d:ea:77:22:af:c7:81:73:7e:65:d9:
d6:81:1c:09:81:70:d7:4e:c4:7e:97:5d:b6:2a:2e:58:a7:6b:
d9:7e:be:e0:0d:5c:c3:25:99:63:eb:cb:b5:1a:8b:c2:1b:c1:
60:1e:fd:18:b1:d4:fd:47:b8:22:a5:f7:98:55:30:f1:49:5e:
03:61:b2:ee
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQfjI/Ixer3CCtbBRknDHdwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjUwMTAxMDE0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTM5OTg4OTk1NGRiMjUwMWI4ZGMwMTA5NDFkYzg1MTdjOTI1MGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W0lDojkrLKfkm+mFz5epd8XSYH4
deQmyk1jJoO1bRUMfkjudM2XJ6W5BYXU/s3raLQwu+oa7YpFpYkxmS1ZSvewb9Z6
ICzEGo/GLqkNGkHDusB+MoEcldlG8Co7A1ReKgJjHhDHVKtYDi7chf6+8ns17I7x
mS9ujcD9R4LAkWa9yUgkVKansxGU8wFLJsZ3FcY8FQ2Xu0FbwPPsMdz1IVsz2aIy
7yy4uqaiF9FBjX9zbiDH4MQorVscaHCFBkxDN1rK8FnoISlztrv05/zvoBple4IC
oSdsyP1/99ehdWOQhk/qwidMDKLfqe2CGQ1/chB98ze5qjmjzVcqw5L7FwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFO45mImVTbJQG43AEJQdyFF8klDaMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvN2ptWWlaVk5zbEFiamNBUWxCM0lVWHlTVU5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALZvyAwQA
wo/LAwQAwo/NAwQAwo/dAwQA1dwDAwQA1dwTMA0GCSqGSIb3DQEBCwUAA4IBAQCj
ja+tre1xZGTZ8By2A+aLpmrqKaO63yyZlTLeZPEhvHb6mxMaORybRsHAkCP9nlEI
E8DUOHCB3zHaNYdsPTJlXcFozBv33aiHbRuOMXxMj8YjLbyEOtBIgObeeDym6FQ8
mkWt/45f5iRXWt+rXXcoQt+bMgF+oWz25egnk760uVuZJ513hLa5gmeatsO/75Lq
Cq7vtdV6hRFy+hXQhbzskeJglHmBqgBwLTMfEDS6c6uRQc2YCRe9WfZfPep3Iq/H
gXN+ZdnWgRwJgXDXTsR+l122Ki5Yp2vZfr7gDVzDJZlj68u1GovCG8FgHv0YsdT9
R7gipfeYVTDxSV4DYbLu
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:38:45 2025 by rpki-client