Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/1RAvuZXh1T9dhwm7xWxHgrCQRto.roa
File: 1RAvuZXh1T9dhwm7xWxHgrCQRto.roa (raw, json)
Hash identifier: UzMwILnQdFS4V/6Vtsizl42DGZ1zDfU1nuYsFQEdLpw=
Subject key identifier: D5:10:2F:B9:95:E1:D5:3F:5D:87:09:BB:C5:6C:47:82:B0:90:46:DA
Certificate issuer: /CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Certificate serial: 018CC50156B9C17CC292FADB4ECAA6E63AE4
Authority key identifier: D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/1RAvuZXh1T9dhwm7xWxHgrCQRto.roa
Signing time: Mon 01 Jan 2024 12:30:48 +0000
ROA not before: Mon 01 Jan 2024 12:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20677
IP address blocks: 46.17.244.0/22 maxlen: 22
185.113.152.0/22 maxlen: 22
185.38.52.0/22 maxlen: 22
185.113.148.0/22 maxlen: 22
212.87.128.0/19 maxlen: 19
185.145.220.0/22 maxlen: 22
2a00:fac0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:56:b9:c1:7c:c2:92:fa:db:4e:ca:a6:e6:3a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Validity
Not Before: Jan 1 12:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5102fb995e1d53f5d8709bbc56c4782b09046da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:6c:3a:e7:4a:0b:78:00:c1:3a:dd:4d:21:
34:c9:9a:5f:84:d0:f0:4b:36:0a:76:99:ff:b6:c1:
10:ee:8d:d2:76:86:94:bf:f5:5b:2f:24:4f:00:29:
f6:5b:e2:9a:0f:f2:98:d2:f8:8c:ce:ff:9e:b9:68:
28:4e:25:ee:5e:cc:5b:a2:5a:3d:76:e0:09:1d:cc:
b5:02:81:e9:fe:e7:f7:eb:27:fd:b1:9a:c7:2c:b4:
86:02:c1:8b:5d:76:e1:cd:6f:ef:42:db:37:45:8d:
c9:a0:0e:29:81:cb:ec:4e:bf:fc:92:c8:c6:de:ba:
c4:9b:07:34:81:1a:bf:b6:3f:7c:25:a3:fd:82:3f:
15:6f:49:4e:d3:99:86:d2:1c:74:43:a9:f2:57:35:
1c:27:8c:4a:ff:6c:0f:62:9b:97:3d:9c:10:1b:c6:
8e:3b:98:2b:b0:77:cd:75:aa:d5:77:f7:27:aa:53:
3b:ef:43:42:d1:21:ad:ce:46:3b:e1:05:c7:14:e4:
b6:7f:f1:18:f0:f8:40:75:a7:7f:71:c9:4c:15:39:
e0:fb:f2:e6:c6:80:04:d0:b1:10:27:ec:bb:6e:58:
b4:fa:52:37:fa:b3:f7:02:f5:c4:ee:a3:26:80:7c:
77:e4:f4:79:d1:d9:ec:0c:50:3d:9f:93:5d:a8:de:
17:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:10:2F:B9:95:E1:D5:3F:5D:87:09:BB:C5:6C:47:82:B0:90:46:DA
X509v3 Authority Key Identifier:
keyid:D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/1RAvuZXh1T9dhwm7xWxHgrCQRto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.244.0/22
185.38.52.0/22
185.113.148.0-185.113.155.255
185.145.220.0/22
212.87.128.0/19
IPv6:
2a00:fac0::/32
Signature Algorithm: sha256WithRSAEncryption
cd:8e:b4:98:32:e2:9d:ae:d0:73:5b:94:6a:bd:e7:c4:cc:87:
ff:02:9e:df:f0:27:33:37:0a:9f:7f:7c:ae:d1:65:ed:4c:1f:
b4:c5:e1:83:17:cc:f7:64:a2:9f:0c:fb:8c:90:62:09:85:f7:
48:52:20:99:83:fb:8b:f2:dc:be:69:e7:23:36:35:4c:39:a1:
52:5b:cb:d8:04:0c:6a:97:dc:d1:5c:a7:dd:83:9b:11:79:82:
cf:e4:fa:5c:d3:af:a4:04:44:8c:ec:18:cd:62:68:dd:c0:6c:
63:d6:86:8c:f5:45:07:d4:ed:4a:41:f9:0a:df:77:20:f5:9f:
bf:b2:e8:7d:31:ee:b9:0d:76:20:36:ec:e2:ed:35:24:a2:29:
e9:7f:3d:17:a5:5b:53:df:87:0b:b5:9f:22:fb:80:60:9c:d1:
33:be:e8:98:dc:6f:df:89:d2:02:c3:2f:e8:f8:5d:85:c9:1c:
84:77:50:14:a9:2a:61:d6:1b:5e:8a:de:25:cb:48:e5:bf:f5:
ec:d3:7c:ba:74:7b:85:c2:2f:a3:29:ee:01:b4:31:3d:af:68:
a8:16:f0:11:ae:25:46:62:00:42:a7:18:a4:2f:14:58:ef:be:
91:fc:e0:50:cc:bf:c0:09:a7:99:d6:5b:c0:b0:cf:c3:c8:39:
c1:c6:48:7e
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAYzFAVa5wXzCkvrbTsqm5jrkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyOGZjYmRmNTcyYmNhZjkzZTE1NDRkZTEwYTE3NmNiMzAx
MTA2YmIwHhcNMjQwMTAxMTIzMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTEwMmZiOTk1ZTFkNTNmNWQ4NzA5YmJjNTZjNDc4MmIwOTA0NmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJxsOudKC3gAwTrdTSE0yZpfhNDw
SzYKdpn/tsEQ7o3SdoaUv/VbLyRPACn2W+KaD/KY0viMzv+euWgoTiXuXsxbolo9
duAJHcy1AoHp/uf36yf9sZrHLLSGAsGLXXbhzW/vQts3RY3JoA4pgcvsTr/8ksjG
3rrEmwc0gRq/tj98JaP9gj8Vb0lO05mG0hx0Q6nyVzUcJ4xK/2wPYpuXPZwQG8aO
O5grsHfNdarVd/cnqlM770NC0SGtzkY74QXHFOS2f/EY8PhAdad/cclMFTng+/Lm
xoAE0LEQJ+y7bli0+lI3+rP3AvXE7qMmgHx35PR50dnsDFA9n5NdqN4XVQIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFNUQL7mV4dU/XYcJu8VsR4KwkEbaMB8GA1UdIwQY
MBaAFNKPy99XK8r5PhVE3hChdsswEQa7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wMWExMDMtNWIyNS00NDQyLWE4OTIt
MGZlODM5OWRlNzI3LzEvMVJBdnVaWGgxVDlkaHdtN3hXeEhnckNRUnRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8wMWExMDMtNWIyNS00NDQyLWE4OTItMGZlODM5OWRlNzI3
LzEvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQCLhH0AwQC
uSY0MAwDBAK5cZQDBAK5cZgDBAK5kdwDBAXUV4AwDQQCAAIwBwMFACoA+sAwDQYJ
KoZIhvcNAQELBQADggEBAM2OtJgy4p2u0HNblGq958TMh/8Cnt/wJzM3Cp9/fK7R
Ze1MH7TF4YMXzPdkop8M+4yQYgmF90hSIJmD+4vy3L5p5yM2NUw5oVJby9gEDGqX
3NFcp92DmxF5gs/k+lzTr6QERIzsGM1iaN3AbGPWhoz1RQfU7UpB+QrfdyD1n7+y
6H0x7rkNdiA27OLtNSSiKel/PRelW1Pfhwu1nyL7gGCc0TO+6Jjcb9+J0gLDL+j4
XYXJHIR3UBSpKmHWG16K3iXLSOW/9ezTfLp0e4XCL6Mp7gG0MT2vaKgW8BGuJUZi
AEKnGKQvFFjvvpH84FDMv8AJp5nWW8Cwz8PIOcHGSH4=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:22 2025 by rpki-client