Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/46ZO3YYKbfqwnw2KeZFW-Pj7VUg.roa
File: 46ZO3YYKbfqwnw2KeZFW-Pj7VUg.roa (raw, json)
Hash identifier: FU32Pgosb8VuBk1MtR1cr2nnj1pCIYFIRUBMDmvaoyA=
Subject key identifier: E3:A6:4E:DD:86:0A:6D:FA:B0:9F:0D:8A:79:91:56:F8:F8:FB:55:48
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018CC80201F8D4A369645A570F6224F72294
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/46ZO3YYKbfqwnw2KeZFW-Pj7VUg.roa
Signing time: Tue 02 Jan 2024 02:30:23 +0000
ROA not before: Tue 02 Jan 2024 02:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21479
IP address blocks: 93.178.96.0/22 maxlen: 22
93.178.104.0/22 maxlen: 22
93.178.126.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 10 Apr 2024 12:21:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:01:f8:d4:a3:69:64:5a:57:0f:62:24:f7:22:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 02:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3a64edd860a6dfab09f0d8a799156f8f8fb5548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:db:6f:23:71:e6:fc:86:b1:0a:1d:dc:8e:5d:
20:26:db:b6:d9:66:1c:c7:db:b3:77:f1:bb:e8:28:
a7:59:4f:b6:2b:9f:85:17:18:5c:a2:0a:0b:45:51:
77:5f:13:7c:71:f0:86:86:d0:9a:fe:0d:5b:80:54:
23:50:75:6e:b9:15:08:e0:3d:57:96:f5:94:0e:f8:
71:00:e9:e6:12:bd:91:e5:f5:92:0f:9d:0c:d5:95:
97:75:05:f2:3a:34:eb:dd:2e:36:60:a3:53:37:8f:
75:07:af:12:a8:2d:ca:a1:e7:95:5d:ae:9e:be:83:
22:80:49:b0:b4:fe:b9:99:bf:7c:da:af:11:57:8d:
37:52:21:58:2b:05:46:3c:6a:5b:12:ef:6f:6c:10:
f0:e8:78:c2:25:f2:b2:7c:51:7d:be:ef:66:3b:d0:
fb:9a:0e:42:56:ce:0e:f6:53:72:27:13:63:b0:07:
11:f8:1c:ac:58:b3:f0:e1:08:d2:e7:da:cf:4e:13:
14:c2:6f:56:91:a5:e2:8a:5f:b5:07:25:7c:9c:d7:
d1:0d:95:6f:41:12:e3:06:af:1c:e4:66:89:ab:22:
2b:65:1c:24:b5:fd:fe:d6:18:9f:43:b7:91:5c:f7:
a6:78:a0:b3:19:1e:5f:05:02:7a:80:db:0d:01:74:
42:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A6:4E:DD:86:0A:6D:FA:B0:9F:0D:8A:79:91:56:F8:F8:FB:55:48
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/46ZO3YYKbfqwnw2KeZFW-Pj7VUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.178.96.0/22
93.178.104.0/22
93.178.126.0/23
Signature Algorithm: sha256WithRSAEncryption
70:88:2d:d5:bc:4f:c5:99:bf:10:7c:93:9e:3a:22:72:8f:17:
fc:ea:7c:a1:9e:ca:da:0a:b8:01:d9:83:ae:e3:4d:a0:00:93:
f3:47:4e:bd:45:dd:fc:c7:4a:99:39:42:b1:d3:e4:a6:a4:2a:
11:66:7a:60:a5:03:4c:00:1f:d0:50:b8:22:66:d8:6b:62:75:
75:1f:d8:cf:d1:04:e1:9a:d5:41:a2:de:cf:2f:a4:02:41:5e:
d9:c8:9b:a2:49:d2:96:53:71:8e:de:f8:1b:5f:8c:c0:8e:b6:
e2:79:f2:ec:e9:a1:62:d8:44:04:9a:65:95:06:de:ee:fd:14:
15:d7:ee:fa:12:ae:50:2a:c9:fa:f2:e1:89:67:48:79:50:8e:
de:84:14:3a:c1:bf:60:62:4b:ff:67:92:f4:6a:c9:a9:72:50:
32:22:f3:0f:b1:1d:77:93:b7:46:7d:01:8e:88:e2:a3:be:df:
40:b3:e2:63:3d:9e:82:6a:7e:43:f0:7c:6f:74:74:c4:68:be:
fa:c7:4c:d0:fa:89:f5:45:a6:60:40:c6:44:cc:b5:45:ad:cc:
a8:25:22:5b:6f:03:24:a8:56:a5:1d:e1:dd:1a:55:5a:ef:c4:
db:2f:74:36:88:9f:44:fb:06:f5:06:75:e3:d6:71:ef:d7:c6:
63:12:c3:e3
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzIAgH41KNpZFpXD2Ik9yKUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjQwMTAyMDIzMDIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2E2NGVkZDg2MGE2ZGZhYjA5ZjBkOGE3OTkxNTZmOGY4ZmI1NTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqttvI3Hm/IaxCh3cjl0gJtu22WYc
x9uzd/G76CinWU+2K5+FFxhcogoLRVF3XxN8cfCGhtCa/g1bgFQjUHVuuRUI4D1X
lvWUDvhxAOnmEr2R5fWSD50M1ZWXdQXyOjTr3S42YKNTN491B68SqC3KoeeVXa6e
voMigEmwtP65mb982q8RV403UiFYKwVGPGpbEu9vbBDw6HjCJfKyfFF9vu9mO9D7
mg5CVs4O9lNyJxNjsAcR+BysWLPw4QjS59rPThMUwm9WkaXiil+1ByV8nNfRDZVv
QRLjBq8c5GaJqyIrZRwktf3+1hifQ7eRXPemeKCzGR5fBQJ6gNsNAXRCaQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOOmTt2GCm36sJ8NinmRVvj4+1VIMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvNDZaTzNZWUtiZnF3bncyS2VaRlctUGo3VlVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCXbJgAwQC
XbJoAwQBXbJ+MA0GCSqGSIb3DQEBCwUAA4IBAQBwiC3VvE/Fmb8QfJOeOiJyjxf8
6nyhnsraCrgB2YOu402gAJPzR069Rd38x0qZOUKx0+SmpCoRZnpgpQNMAB/QULgi
ZthrYnV1H9jP0QThmtVBot7PL6QCQV7ZyJuiSdKWU3GO3vgbX4zAjrbiefLs6aFi
2EQEmmWVBt7u/RQV1+76Eq5QKsn68uGJZ0h5UI7ehBQ6wb9gYkv/Z5L0asmpclAy
IvMPsR13k7dGfQGOiOKjvt9As+JjPZ6Can5D8HxvdHTEaL76x0zQ+on1RaZgQMZE
zLVFrcyoJSJbbwMkqFalHeHdGlVa78TbL3Q2iJ9E+wb1BnXj1nHv18ZjEsPj
-----END CERTIFICATE-----
Generated at Thu Apr 17 10:12:56 2025 by rpki-client