Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/60-_0R4gKgmTiWG8xBBxO1NtZFE.roa
File: 60-_0R4gKgmTiWG8xBBxO1NtZFE.roa (raw, json)
Hash identifier: o7QcnY3PnuC+DQhtNai6MkA3+982WfZ9QI0C6dhAALU=
Subject key identifier: EB:4F:BF:D1:1E:20:2A:09:93:89:61:BC:C4:10:71:3B:53:6D:64:51
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 019417B6BB1BFDA615201510392C5F794213
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/60-_0R4gKgmTiWG8xBBxO1NtZFE.roa
Signing time: Mon 30 Dec 2024 13:17:18 +0000
ROA not before: Mon 30 Dec 2024 13:17:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48407
IP address blocks: 81.90.16.0/20 maxlen: 20
81.90.17.0/24 maxlen: 24
81.90.18.0/24 maxlen: 24
81.90.19.0/24 maxlen: 24
93.94.50.0/24 maxlen: 24
93.94.55.0/24 maxlen: 24
178.17.48.0/20 maxlen: 20
2a00:8b20::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:17:b6:bb:1b:fd:a6:15:20:15:10:39:2c:5f:79:42:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Dec 30 13:17:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb4fbfd11e202a09938961bcc410713b536d6451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:e0:9c:3d:a0:19:85:59:f4:a6:ab:f5:d6:
46:9c:26:18:48:24:63:58:7d:6e:d2:72:81:47:72:
31:9a:28:20:ed:f6:d6:25:49:48:6a:02:82:b6:f9:
b7:50:9e:39:a0:9c:91:d9:6d:43:69:67:72:d2:e1:
e6:61:d6:d0:58:e4:df:df:ef:ac:79:0e:a7:57:4d:
a4:05:7a:85:1f:fb:a7:6e:7f:ab:78:93:2a:c9:d8:
29:72:97:63:20:0f:84:b6:ed:bc:7c:31:5b:d7:94:
7a:07:35:80:d8:be:33:55:3d:07:7d:89:c0:29:4b:
5a:4d:7a:71:b9:72:25:7c:c9:f5:59:52:6c:37:1a:
01:ec:12:72:8a:80:dc:64:b5:ae:cb:80:15:c3:d7:
bb:5c:09:ac:db:d1:09:fc:d8:e3:55:b9:67:08:1a:
0d:43:61:44:f8:72:a7:86:03:90:52:d1:b9:34:b3:
36:6a:48:61:dc:79:de:7d:1b:7a:e1:b3:24:ee:93:
ca:35:b5:6e:e1:00:3f:3d:40:4e:5e:ad:cd:45:99:
3e:52:7b:14:48:21:90:cc:db:c6:63:b4:a9:13:9a:
2f:0c:bc:3c:2d:7b:1f:df:35:c1:61:30:d5:b4:be:
a9:c9:f5:17:15:05:93:ff:fd:59:2a:e8:d4:8d:1e:
f0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4F:BF:D1:1E:20:2A:09:93:89:61:BC:C4:10:71:3B:53:6D:64:51
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/60-_0R4gKgmTiWG8xBBxO1NtZFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.16.0/20
93.94.50.0/24
93.94.55.0/24
178.17.48.0/20
IPv6:
2a00:8b20::/32
Signature Algorithm: sha256WithRSAEncryption
54:9c:83:df:74:c1:4f:74:f6:c2:d7:07:ad:f0:1a:30:9d:b1:
b0:eb:97:52:d0:84:dc:b2:df:6d:53:1f:e0:8a:b8:66:ab:ab:
ee:6f:a0:a0:58:1a:3f:fd:5f:ff:6e:71:7b:b9:34:d5:97:0c:
90:95:74:2b:66:bf:73:ad:e7:28:dc:0b:88:bf:25:95:61:bc:
7f:1b:23:f6:e2:36:fc:67:af:24:19:57:f9:e3:5e:94:43:9d:
3e:3a:81:0e:33:3d:8f:ea:b8:e3:39:2b:ed:78:a2:98:5f:fa:
52:56:36:3b:da:54:a8:cb:41:1b:ef:3a:82:10:8f:ea:5e:2b:
c6:87:7f:b8:ed:8a:b8:97:6d:77:63:7a:ef:fe:c2:eb:b3:75:
47:21:42:39:99:e2:77:8a:2d:1c:06:08:d1:24:18:6b:07:51:
7f:ef:c3:57:6e:6c:e1:fa:cd:33:12:c1:ad:67:3e:79:95:8e:
27:a2:71:fe:b8:1c:d7:b6:57:16:7c:1d:7d:64:30:bb:1b:41:
0f:68:b2:14:7d:b6:a4:de:51:3b:6e:a4:fc:d9:2d:d5:c3:2c:
51:aa:b7:3c:de:91:00:ad:f0:14:af:87:82:f6:f5:11:68:51:
57:68:a1:7a:b4:2f:b7:f0:03:c0:9a:c8:a7:35:e2:b1:a2:ac:
6b:eb:ee:a1
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQXtrsb/aYVIBUQOSxfeUITMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj
NjNlMjQwHhcNMjQxMjMwMTMxNzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjRmYmZkMTFlMjAyYTA5OTM4OTYxYmNjNDEwNzEzYjUzNmQ2NDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWLgnD2gGYVZ9Kar9dZGnCYYSCRj
WH1u0nKBR3Ixmigg7fbWJUlIagKCtvm3UJ45oJyR2W1DaWdy0uHmYdbQWOTf3++s
eQ6nV02kBXqFH/unbn+reJMqydgpcpdjIA+Etu28fDFb15R6BzWA2L4zVT0HfYnA
KUtaTXpxuXIlfMn1WVJsNxoB7BJyioDcZLWuy4AVw9e7XAms29EJ/NjjVblnCBoN
Q2FE+HKnhgOQUtG5NLM2akhh3HnefRt64bMk7pPKNbVu4QA/PUBOXq3NRZk+UnsU
SCGQzNvGY7SpE5ovDLw8LXsf3zXBYTDVtL6pyfUXFQWT//1ZKujUjR7wPwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFOtPv9EeICoJk4lhvMQQcTtTbWRRMB8GA1UdIwQY
MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt
MGRiYmMyNDllNjU3LzEvNjAtXzBSNGdLZ21UaVdHOHhCQnhPMU50WkZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3
LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEUVoQAwQA
XV4yAwQAXV43AwQEshEwMA0EAgACMAcDBQAqAIsgMA0GCSqGSIb3DQEBCwUAA4IB
AQBUnIPfdMFPdPbC1wet8BownbGw65dS0ITcst9tUx/girhmq6vub6CgWBo//V//
bnF7uTTVlwyQlXQrZr9zreco3AuIvyWVYbx/GyP24jb8Z68kGVf5416UQ50+OoEO
Mz2P6rjjOSvteKKYX/pSVjY72lSoy0Eb7zqCEI/qXivGh3+47Yq4l213Y3rv/sLr
s3VHIUI5meJ3ii0cBgjRJBhrB1F/78NXbmzh+s0zEsGtZz55lY4nonH+uBzXtlcW
fB19ZDC7G0EPaLIUfbak3lE7bqT82S3VwyxRqrc83pEArfAUr4eC9vURaFFXaKF6
tC+38APAmsinNeKxoqxr6+6h
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:36:47 2025 by rpki-client