Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/5_Wpdiw3sO_iSZIztCgZAxx9zo8.roa
File: 5_Wpdiw3sO_iSZIztCgZAxx9zo8.roa (raw, json)
Hash identifier: D0vQmeftS6LUm6T9NT/3iIvtwYD6TV2d5ayL5rMAv/8=
Subject key identifier: E7:F5:A9:76:2C:37:B0:EF:E2:49:92:33:B4:28:19:03:1C:7D:CE:8F
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B564C22CEC57B2F630468DF03AEE72
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/5_Wpdiw3sO_iSZIztCgZAxx9zo8.roa
Signing time: Thu 02 Jan 2025 15:49:46 +0000
ROA not before: Thu 02 Jan 2025 15:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56694
IP address blocks: 89.23.96.0/22 maxlen: 22
89.23.100.0/24 maxlen: 24
89.23.101.0/24 maxlen: 24
89.23.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 04:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:64:c2:2c:ec:57:b2:f6:30:46:8d:f0:3a:ee:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7f5a9762c37b0efe2499233b42819031c7dce8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5b:0d:e2:95:11:20:f8:43:fe:85:5f:1b:5b:
1b:72:ab:f5:67:98:e0:8a:f6:76:cd:b9:f2:41:81:
d5:bb:dd:07:d1:0c:c4:25:d3:83:58:f3:27:4d:ae:
a2:43:64:15:2e:de:57:13:ee:18:f4:16:6e:6b:4a:
03:b1:11:38:1f:5f:ec:02:3b:95:1b:a4:95:8f:9b:
58:26:93:49:76:9c:23:ea:eb:1a:6e:16:69:07:73:
06:3e:eb:10:ef:d4:76:57:b4:2a:e6:eb:66:d7:eb:
6e:cd:9d:48:c0:d6:01:87:d2:4d:9b:b4:ff:70:45:
d3:ad:73:a8:41:ad:0d:80:b8:7f:c5:0e:b4:06:a9:
66:4b:88:5e:b8:3e:01:65:e3:1d:9a:9c:7a:53:53:
e9:a5:67:89:d8:67:ad:65:af:12:ee:57:ec:1f:b2:
57:17:2b:c0:46:9b:3f:b4:33:b2:a1:fb:e6:97:c6:
b2:59:da:42:c8:83:91:b1:cc:d2:a0:ea:79:2a:cb:
4f:ad:65:9c:a8:ea:39:3c:5a:94:d6:db:49:58:15:
12:d9:ef:ec:73:14:53:49:f7:cc:ed:4e:f5:18:37:
23:84:0c:ee:cc:d9:e7:71:d6:20:22:8c:ab:8a:b7:
f3:ce:8a:ed:62:75:ae:17:6a:0f:c5:f4:ef:fe:de:
f5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F5:A9:76:2C:37:B0:EF:E2:49:92:33:B4:28:19:03:1C:7D:CE:8F
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/5_Wpdiw3sO_iSZIztCgZAxx9zo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.96.0-89.23.102.255
Signature Algorithm: sha256WithRSAEncryption
54:8b:ab:26:47:09:79:86:3b:40:61:1b:b2:e5:03:b3:35:ef:
16:0b:1b:66:fc:bf:70:4e:80:78:12:8e:aa:c9:7e:19:98:65:
92:67:ba:1b:86:e9:1d:9e:88:8e:d0:c8:1c:da:f8:ce:a4:20:
a5:f8:61:b1:8e:aa:35:95:50:b2:d7:32:d0:dc:12:08:cf:02:
b5:c2:9c:c6:67:44:45:30:ac:00:52:74:ad:77:58:10:a3:43:
16:ad:9e:0b:b2:df:e7:4e:aa:58:5d:8b:20:98:70:45:9c:ff:
cf:f0:83:60:fb:62:f7:9e:e3:0f:96:bc:c8:36:3e:53:0e:a8:
b1:ad:bd:8c:14:fb:4d:86:f7:64:91:4e:3b:93:4a:a2:a2:26:
ca:7f:04:7b:ed:b0:ca:da:5f:b0:34:28:57:20:c6:92:d3:27:
32:a1:33:c9:ae:1d:10:25:5d:ca:9c:1a:9b:7e:2d:32:04:58:
06:98:f8:93:ec:54:68:35:7c:61:39:60:3a:6e:fe:72:1b:b9:
c0:ee:40:71:d9:ba:96:7f:3d:db:af:30:ba:4c:4d:a2:38:d4:
f9:53:c2:f9:5a:d1:10:07:ed:9e:c8:ea:f4:e8:5c:2c:db:0b:
e1:c0:e8:8c:35:66:9d:11:27:43:b6:76:05:cb:83:d0:f0:23:
f3:a3:16:66
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQntWTCLOxXsvYwRo3wOu5yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjUwMTAyMTU0OTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2Y1YTk3NjJjMzdiMGVmZTI0OTkyMzNiNDI4MTkwMzFjN2RjZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1sN4pURIPhD/oVfG1sbcqv1Z5jg
ivZ2zbnyQYHVu90H0QzEJdODWPMnTa6iQ2QVLt5XE+4Y9BZua0oDsRE4H1/sAjuV
G6SVj5tYJpNJdpwj6usabhZpB3MGPusQ79R2V7Qq5utm1+tuzZ1IwNYBh9JNm7T/
cEXTrXOoQa0NgLh/xQ60BqlmS4heuD4BZeMdmpx6U1PppWeJ2GetZa8S7lfsH7JX
FyvARps/tDOyofvml8ayWdpCyIORsczSoOp5KstPrWWcqOo5PFqU1ttJWBUS2e/s
cxRTSffM7U71GDcjhAzuzNnncdYgIoyrirfzzortYnWuF2oPxfTv/t71EwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOf1qXYsN7Dv4kmSM7QoGQMcfc6PMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvNV9XcGRpdzNzT19pU1pJenRDZ1pBeHg5em84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAVZF2AD
BABZF2YwDQYJKoZIhvcNAQELBQADggEBAFSLqyZHCXmGO0BhG7LlA7M17xYLG2b8
v3BOgHgSjqrJfhmYZZJnuhuG6R2eiI7QyBza+M6kIKX4YbGOqjWVULLXMtDcEgjP
ArXCnMZnREUwrABSdK13WBCjQxatnguy3+dOqlhdiyCYcEWc/8/wg2D7Yvee4w+W
vMg2PlMOqLGtvYwU+02G92SRTjuTSqKiJsp/BHvtsMraX7A0KFcgxpLTJzKhM8mu
HRAlXcqcGpt+LTIEWAaY+JPsVGg1fGE5YDpu/nIbucDuQHHZupZ/PduvMLpMTaI4
1PlTwvla0RAH7Z7I6vToXCzbC+HA6Iw1Zp0RJ0O2dgXLg9DwI/OjFmY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:33:22 2025 by rpki-client