Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/xbYUEXATbFECq_IWsA_taZyg3jM.roa
File: xbYUEXATbFECq_IWsA_taZyg3jM.roa (raw, json)
Hash identifier: Qks0B5MGssESAGjhYVV8AjWmdxKlqOsji3DTzR1gisE=
Subject key identifier: C5:B6:14:11:70:13:6C:51:02:AB:F2:16:B0:0F:ED:69:9C:A0:DE:33
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018D466E24C46E14A4B3B629BC2E4B3C1E8E
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/xbYUEXATbFECq_IWsA_taZyg3jM.roa
Signing time: Fri 26 Jan 2024 15:40:39 +0000
ROA not before: Fri 26 Jan 2024 15:40:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42849
IP address blocks: 46.19.201.0/24 maxlen: 24
83.223.138.0/24 maxlen: 24
85.254.41.0/24 maxlen: 24
193.200.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 16:41:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:46:6e:24:c4:6e:14:a4:b3:b6:29:bc:2e:4b:3c:1e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 26 15:40:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5b6141170136c5102abf216b00fed699ca0de33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8c:e3:df:62:14:9f:19:50:c2:60:b8:58:9e:
1b:90:1a:a2:8f:73:f4:8f:cc:81:1e:64:c5:7f:fd:
33:41:72:bf:ac:d2:3b:3a:fd:54:f0:e6:ea:c7:c5:
d6:cd:ac:fc:49:e2:f1:1c:06:10:b3:bc:43:b6:d7:
db:cb:16:97:bf:4f:9e:36:68:ac:b4:cc:db:f8:6c:
4f:90:f1:42:35:ed:44:1c:24:de:ce:0b:af:6b:f8:
9e:20:ef:e9:c3:08:3d:21:c2:47:56:4b:47:16:13:
1c:4c:4c:67:c5:9a:ea:6a:ad:04:af:96:5e:3a:f9:
bc:9b:ea:e7:f7:e1:0f:17:fd:bf:b5:cd:58:52:4c:
37:82:fc:38:bd:5e:4a:a0:1e:23:fd:f7:e6:26:71:
96:f2:af:cc:a3:8d:88:48:69:a3:07:1f:c6:4a:e8:
85:33:e5:63:a1:9e:1f:94:88:9f:af:0c:31:ed:ae:
e0:73:a3:ec:09:e4:e8:18:f6:86:bf:5c:f3:91:5f:
56:c0:c7:c2:2d:8e:47:bd:4e:5a:f8:e9:ea:57:b0:
60:cb:9d:85:67:cc:d6:b1:fb:6a:51:6a:d0:67:ee:
62:a2:33:5e:99:b4:53:79:c0:57:06:f3:73:a4:ab:
36:9e:b7:bd:da:ff:1c:99:8b:b1:4d:37:1f:a0:5c:
10:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B6:14:11:70:13:6C:51:02:AB:F2:16:B0:0F:ED:69:9C:A0:DE:33
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/xbYUEXATbFECq_IWsA_taZyg3jM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.201.0/24
83.223.138.0/24
85.254.41.0/24
193.200.131.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:4b:7f:41:29:a2:cb:95:4a:49:fe:4c:6f:40:21:dd:bd:77:
bb:36:e3:52:ec:41:e7:7a:d6:97:55:3b:35:4d:4b:0d:3c:ac:
cb:a9:95:82:72:45:9e:c0:f3:c0:a9:01:e1:31:07:8f:11:ce:
2d:a2:bd:f7:f1:6d:99:05:60:f7:67:4d:26:d6:e8:95:48:e4:
75:38:aa:df:6c:1c:77:01:36:42:17:73:92:95:9d:1c:0f:71:
2b:72:db:f9:98:ae:ed:a7:18:c3:11:41:31:0d:19:b6:b4:22:
76:ec:8f:8f:2b:40:28:78:2a:5b:27:38:00:c7:38:4e:49:e7:
6e:04:07:df:52:f8:c5:70:f1:6b:c1:2b:aa:eb:78:1e:d1:c7:
b3:9b:af:a8:65:f4:61:da:a4:28:68:ed:ac:8d:e0:59:6f:ec:
3c:72:48:18:a9:ba:b8:3c:3f:79:ae:e7:e5:84:f1:0a:4e:d8:
d3:ba:3e:69:d8:0d:a6:cf:e9:ca:79:76:fa:5f:f0:e6:e8:33:
b1:a7:6e:ee:81:1a:92:b5:e9:3a:18:69:cd:02:94:cf:93:0d:
4b:d4:d2:7e:8e:af:e6:d1:6d:51:ba:4d:25:76:26:55:9f:f9:
c7:56:2c:5b:7f:e8:c6:05:75:57:61:c9:00:f8:7a:7a:26:84:
8b:f0:1e:26
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY1GbiTEbhSks7YpvC5LPB6OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjQwMTI2MTU0MDM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWI2MTQxMTcwMTM2YzUxMDJhYmYyMTZiMDBmZWQ2OTljYTBkZTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4zj32IUnxlQwmC4WJ4bkBqij3P0
j8yBHmTFf/0zQXK/rNI7Ov1U8Obqx8XWzaz8SeLxHAYQs7xDttfbyxaXv0+eNmis
tMzb+GxPkPFCNe1EHCTezguva/ieIO/pwwg9IcJHVktHFhMcTExnxZrqaq0Er5Ze
Ovm8m+rn9+EPF/2/tc1YUkw3gvw4vV5KoB4j/ffmJnGW8q/Mo42ISGmjBx/GSuiF
M+VjoZ4flIifrwwx7a7gc6PsCeToGPaGv1zzkV9WwMfCLY5HvU5a+OnqV7Bgy52F
Z8zWsftqUWrQZ+5iojNembRTecBXBvNzpKs2nre92v8cmYuxTTcfoFwQowIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFMW2FBFwE2xRAqvyFrAP7WmcoN4zMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEveGJZVUVYQVRiRkVDcV9JV3NBX3RhWnlnM2pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALhPJAwQA
U9+KAwQAVf4pAwQAwciDMA0GCSqGSIb3DQEBCwUAA4IBAQCkS39BKaLLlUpJ/kxv
QCHdvXe7NuNS7EHnetaXVTs1TUsNPKzLqZWCckWewPPAqQHhMQePEc4tor338W2Z
BWD3Z00m1uiVSOR1OKrfbBx3ATZCF3OSlZ0cD3Erctv5mK7tpxjDEUExDRm2tCJ2
7I+PK0AoeCpbJzgAxzhOSeduBAffUvjFcPFrwSuq63ge0cezm6+oZfRh2qQoaO2s
jeBZb+w8ckgYqbq4PD95ruflhPEKTtjTuj5p2A2mz+nKeXb6X/Dm6DOxp27ugRqS
tek6GGnNApTPkw1L1NJ+jq/m0W1Ruk0ldiZVn/nHVixbf+jGBXVXYckA+Hp6JoSL
8B4m
-----END CERTIFICATE-----
Generated at Thu May 8 02:48:14 2025 by rpki-client