Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/fuO6V-WVJKBA6nTJubmISFongTY.roa
File: fuO6V-WVJKBA6nTJubmISFongTY.roa (raw, json)
Hash identifier: Pl/5k1iGN0Y+A7cEjCWIW/yWNmXiX7mpTcbUBjSPmfM=
Subject key identifier: 7E:E3:BA:57:E5:95:24:A0:40:EA:74:C9:B9:B9:88:48:5A:27:81:36
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 0194CAA51F387B6EE785AAC52E0DDC46C396
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/fuO6V-WVJKBA6nTJubmISFongTY.roa
Signing time: Mon 03 Feb 2025 07:10:06 +0000
ROA not before: Mon 03 Feb 2025 07:10:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 329007
IP address blocks: 45.138.12.0/22 maxlen: 24
152.89.28.0/22 maxlen: 24
193.135.137.0/24 maxlen: 24
193.135.157.0/24 maxlen: 24
193.135.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Feb 2025 12:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ca:a5:1f:38:7b:6e:e7:85:aa:c5:2e:0d:dc:46:c3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Feb 3 07:10:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ee3ba57e59524a040ea74c9b9b988485a278136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:18:21:1b:97:fc:5f:8f:45:72:59:02:d1:
8a:a8:87:07:dc:9b:17:d7:fa:af:4a:5c:bc:20:3c:
f9:e2:ef:a0:16:be:d4:fa:67:97:0c:8b:0e:b5:f1:
66:31:1c:dd:4d:98:84:54:b1:a3:53:4e:c5:e6:30:
4e:bf:5f:e5:a0:fc:b0:d8:83:3a:d9:40:0f:37:e3:
3f:42:71:4e:f2:85:aa:84:65:ac:54:2e:f9:94:47:
45:7c:fd:e1:30:94:32:c3:8a:45:be:e1:5e:fb:d1:
b3:a0:96:05:dd:06:c1:9d:b3:b4:db:75:f8:be:ca:
74:39:9f:1a:a2:cc:0c:4b:93:9b:41:be:0f:06:66:
9c:23:01:5b:95:75:fb:8f:a7:c4:e7:aa:9b:0c:a5:
4b:95:e1:bc:e8:25:bd:1f:8f:6c:66:34:95:cc:8a:
b5:2d:07:12:1e:6d:07:9e:cf:f6:42:30:7f:93:b4:
dc:f7:5c:12:04:89:68:7a:2f:05:89:28:05:09:aa:
53:49:00:14:c2:15:67:fe:b9:81:44:50:e8:72:8d:
99:e6:80:7b:c8:c6:d0:18:dd:ab:50:6d:c2:f2:87:
c6:78:bf:39:4e:44:bd:fc:30:33:2e:53:24:f0:ec:
c1:96:7c:85:2a:d8:0c:72:df:a0:35:f0:b7:79:5f:
16:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E3:BA:57:E5:95:24:A0:40:EA:74:C9:B9:B9:88:48:5A:27:81:36
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/fuO6V-WVJKBA6nTJubmISFongTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.12.0/22
152.89.28.0/22
193.135.137.0/24
193.135.157.0/24
193.135.174.0/24
Signature Algorithm: sha256WithRSAEncryption
38:1c:5a:77:83:57:f6:cd:d4:2c:9e:a6:5a:b0:14:32:5f:61:
88:cb:b7:b9:93:99:b6:d9:51:c7:36:18:cc:1c:20:74:7e:90:
46:6b:45:6a:06:68:51:c9:2b:6e:f0:38:a4:43:e6:bb:88:d0:
3e:ff:d0:2d:20:3f:a0:bc:9d:8d:77:63:77:ea:68:6a:30:b0:
49:42:c7:ee:bb:ad:57:b2:32:53:63:cb:30:76:f2:6b:4d:82:
eb:2d:52:35:46:38:f7:42:60:ee:44:64:da:1f:37:c9:5e:c0:
03:db:09:f1:bc:1c:b4:73:99:c7:ed:47:48:3b:59:59:60:d8:
e5:08:c7:ad:2e:1c:bd:1c:e6:90:b2:17:9c:33:50:ba:9a:35:
56:84:7e:5e:31:96:0a:5a:b2:34:71:31:d2:8d:4d:53:11:11:
7d:ff:86:d5:d2:78:d9:8f:ca:78:e2:6b:a2:46:29:94:73:04:
1f:30:fe:77:4f:f3:2c:bc:b4:42:06:62:76:f0:08:2c:14:dc:
b1:0f:04:92:7d:30:74:53:36:08:2d:35:d6:cf:3d:25:61:d9:
51:61:7b:9b:1f:da:ea:d6:99:15:5b:be:2f:d6:59:94:8d:1c:
14:c7:1b:5b:e0:1d:4c:ba:02:2d:85:58:a0:91:d6:e1:47:1b:
fe:69:ff:a5
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZTKpR84e27nharFLg3cRsOWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODZjNzM5OTRkMDJkOTFmYzk3ZDkxNmU5ODA5YTZkOTgx
ZTZiMTcwHhcNMjUwMjAzMDcxMDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWUzYmE1N2U1OTUyNGEwNDBlYTc0YzliOWI5ODg0ODVhMjc4MTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzoYIRuX/F+PRXJZAtGKqIcH3JsX
1/qvSly8IDz54u+gFr7U+meXDIsOtfFmMRzdTZiEVLGjU07F5jBOv1/loPyw2IM6
2UAPN+M/QnFO8oWqhGWsVC75lEdFfP3hMJQyw4pFvuFe+9GzoJYF3QbBnbO023X4
vsp0OZ8aoswMS5ObQb4PBmacIwFblXX7j6fE56qbDKVLleG86CW9H49sZjSVzIq1
LQcSHm0Hns/2QjB/k7Tc91wSBIloei8FiSgFCapTSQAUwhVn/rmBRFDoco2Z5oB7
yMbQGN2rUG3C8ofGeL85TkS9/DAzLlMk8OzBlnyFKtgMct+gNfC3eV8WJwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFH7julfllSSgQOp0ybm5iEhaJ4E2MB8GA1UdIwQY
MBaAFEmGxzmU0C2R/JfZFumAmm2YHmsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzIt
OWU4OTVkMGVmOGQyLzEvZnVPNlYtV1ZKS0JBNm5USnVibUlTRm9uZ1RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzItOWU4OTVkMGVmOGQy
LzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCLYoMAwQC
mFkcAwQAwYeJAwQAwYedAwQAwYeuMA0GCSqGSIb3DQEBCwUAA4IBAQA4HFp3g1f2
zdQsnqZasBQyX2GIy7e5k5m22VHHNhjMHCB0fpBGa0VqBmhRyStu8DikQ+a7iNA+
/9AtID+gvJ2Nd2N36mhqMLBJQsfuu61XsjJTY8swdvJrTYLrLVI1Rjj3QmDuRGTa
HzfJXsAD2wnxvBy0c5nH7UdIO1lZYNjlCMetLhy9HOaQshecM1C6mjVWhH5eMZYK
WrI0cTHSjU1TERF9/4bV0njZj8p44muiRimUcwQfMP53T/MsvLRCBmJ28AgsFNyx
DwSSfTB0UzYILTXWzz0lYdlRYXubH9rq1pkVW74v1lmUjRwUxxtb4B1MugIthVig
kdbhRxv+af+l
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:00 2025 by rpki-client