Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/M_-DdrLk0i--7iN5a5nqApN3vWo.roa
File: M_-DdrLk0i--7iN5a5nqApN3vWo.roa (raw, json)
Hash identifier: /cnOQNODpzmazoMNo/jUP6gxfkKV+wmQgBOaOhSsZME=
Subject key identifier: 33:FF:83:76:B2:E4:D2:2F:BE:EE:23:79:6B:99:EA:02:93:77:BD:6A
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 0193FE34460EF0DDC14577990AEAE0384610
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/M_-DdrLk0i--7iN5a5nqApN3vWo.roa
Signing time: Wed 25 Dec 2024 14:24:18 +0000
ROA not before: Wed 25 Dec 2024 14:24:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202391
IP address blocks: 46.34.160.0/22 maxlen: 24
89.42.197.0/24 maxlen: 24
89.42.198.0/24 maxlen: 24
89.42.199.0/24 maxlen: 24
89.47.196.0/24 maxlen: 24
89.47.199.0/24 maxlen: 24
89.47.203.0/24 maxlen: 24
92.114.48.0/23 maxlen: 24
92.114.48.0/24 maxlen: 24
92.114.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:fe:34:46:0e:f0:dd:c1:45:77:99:0a:ea:e0:38:46:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Dec 25 14:24:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33ff8376b2e4d22fbeee23796b99ea029377bd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6d:c0:a9:a1:fd:87:a3:6b:11:ae:38:de:c5:
90:44:09:9d:3a:8a:77:55:f5:d7:60:39:3a:ca:09:
e9:46:2a:9a:46:55:47:f4:4f:f2:df:bb:5c:6b:39:
18:58:42:60:5c:d7:06:05:f0:14:47:57:c7:15:77:
40:ee:12:15:a7:fd:95:e6:d8:8a:ce:18:88:6d:35:
66:d9:54:ca:23:10:58:e8:7d:72:a8:a3:dc:2a:89:
8a:c4:1d:bb:7a:55:b6:c0:dc:c4:a0:74:6a:aa:83:
27:4d:8d:6f:93:04:33:28:35:7a:14:5a:6c:67:79:
7d:17:d9:cc:09:6c:5c:a2:98:e9:e0:e2:42:3a:70:
fc:31:c0:29:c0:1b:a6:21:ee:cc:f4:59:49:62:6f:
cb:a0:83:19:ec:23:93:f3:d9:3f:99:99:2d:8b:29:
22:46:51:63:17:20:08:5f:c8:57:c0:15:cb:dd:0a:
c3:29:48:7d:9e:ce:f4:da:ac:f2:11:62:e1:b8:25:
f1:02:fb:41:76:17:a7:12:04:39:e5:53:8c:b7:ac:
fa:40:aa:70:0e:9b:70:2c:1f:27:81:be:a5:9e:ea:
7d:2e:17:af:6b:bd:a8:cc:cb:a6:91:3b:5b:2b:3e:
d3:39:22:d0:05:7f:b3:ca:6f:3f:c5:b5:a1:a1:8d:
65:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FF:83:76:B2:E4:D2:2F:BE:EE:23:79:6B:99:EA:02:93:77:BD:6A
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/M_-DdrLk0i--7iN5a5nqApN3vWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.160.0/22
89.42.197.0-89.42.199.255
89.47.196.0/24
89.47.199.0/24
89.47.203.0/24
92.114.48.0/23
Signature Algorithm: sha256WithRSAEncryption
66:8b:3b:c8:3a:75:e4:29:fa:5b:96:6f:96:39:10:82:cb:d3:
58:3f:40:95:e2:76:86:f4:37:d1:82:49:66:6e:18:12:0a:75:
8b:14:d3:1b:e4:71:30:18:9d:32:17:e7:26:64:2a:69:24:a4:
d8:af:39:f4:37:45:99:a1:71:c6:ec:32:8c:10:c8:89:8d:fb:
cb:3f:66:b3:4b:94:70:1c:66:68:37:3f:92:5d:fb:54:28:0c:
c1:60:ad:5e:9e:34:5d:37:7a:2c:5e:d4:18:74:60:d8:59:49:
f8:96:a6:74:03:2c:2d:24:0a:45:02:31:32:1d:cd:9b:02:46:
1a:2e:b8:07:63:93:c9:e9:2a:61:d6:c0:6c:e2:5a:a7:f0:05:
4c:8f:b8:59:43:b5:b7:c4:ca:83:02:71:ff:35:9d:2e:3c:93:
25:20:19:90:60:1e:6d:fe:bd:3b:f0:f4:38:85:38:53:71:c6:
5a:64:76:69:2d:1f:47:3a:4b:ee:04:62:2a:f0:40:2d:0b:59:
8a:3d:55:f7:40:d2:a5:8a:f2:d9:50:6e:35:85:dc:8b:a5:74:
cf:b7:fd:60:d9:f4:13:2d:f3:82:0b:91:1f:28:d4:4f:3a:f4:
1b:4b:bc:16:6d:2b:5d:65:a4:b7:04:d7:4b:5e:2e:7b:4e:a8:
0e:60:04:b6
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZP+NEYO8N3BRXeZCurgOEYQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZTFjOGM2NWM4NmU4ZDI2ZGRiZWI2ODY1OGEzOWE3YThl
Mjc4NjYwHhcNMjQxMjI1MTQyNDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2ZmODM3NmIyZTRkMjJmYmVlZTIzNzk2Yjk5ZWEwMjkzNzdiZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjG3AqaH9h6NrEa443sWQRAmdOop3
VfXXYDk6ygnpRiqaRlVH9E/y37tcazkYWEJgXNcGBfAUR1fHFXdA7hIVp/2V5tiK
zhiIbTVm2VTKIxBY6H1yqKPcKomKxB27elW2wNzEoHRqqoMnTY1vkwQzKDV6FFps
Z3l9F9nMCWxcopjp4OJCOnD8McApwBumIe7M9FlJYm/LoIMZ7COT89k/mZktiyki
RlFjFyAIX8hXwBXL3QrDKUh9ns702qzyEWLhuCXxAvtBdhenEgQ55VOMt6z6QKpw
DptwLB8ngb6lnup9Lheva72ozMumkTtbKz7TOSLQBX+zym8/xbWhoY1lJwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFDP/g3ay5NIvvu4jeWuZ6gKTd71qMB8GA1UdIwQY
MBaAFMbhyMZchujSbdvraGWKOaeo4nhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEt
Y2U1ZTAxZTcxYzkxLzEvTV8tRGRyTGswaS0tN2lONWE1bnFBcE4zdldvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEtY2U1ZTAxZTcxYzkx
LzEveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQCLiKgMAwD
BABZKsUDBANZKsADBABZL8QDBABZL8cDBABZL8sDBAFccjAwDQYJKoZIhvcNAQEL
BQADggEBAGaLO8g6deQp+luWb5Y5EILL01g/QJXidob0N9GCSWZuGBIKdYsU0xvk
cTAYnTIX5yZkKmkkpNivOfQ3RZmhccbsMowQyImN+8s/ZrNLlHAcZmg3P5Jd+1Qo
DMFgrV6eNF03eixe1Bh0YNhZSfiWpnQDLC0kCkUCMTIdzZsCRhouuAdjk8npKmHW
wGziWqfwBUyPuFlDtbfEyoMCcf81nS48kyUgGZBgHm3+vTvw9DiFOFNxxlpkdmkt
H0c6S+4EYirwQC0LWYo9VfdA0qWK8tlQbjWF3IuldM+3/WDZ9BMt84ILkR8o1E86
9BtLvBZtK11lpLcE10teLntOqA5gBLY=
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:33 2025 by rpki-client