Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/V5QS8Z-zLDtcGgH5AdFS9aMI_h4.roa
File: V5QS8Z-zLDtcGgH5AdFS9aMI_h4.roa (raw, json)
Hash identifier: eX7m17TCCRuk/EQ6bctRc5Cr+OvSy1bNNcOJxzFOlF4=
Subject key identifier: 57:94:12:F1:9F:B3:2C:3B:5C:1A:01:F9:01:D1:52:F5:A3:08:FE:1E
Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Certificate serial: 019420D60DC87678ACC0B817563BA5DC6538
Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/V5QS8Z-zLDtcGgH5AdFS9aMI_h4.roa
Signing time: Wed 01 Jan 2025 07:48:06 +0000
ROA not before: Wed 01 Jan 2025 07:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16322
IP address blocks: 46.167.128.0/19 maxlen: 19
77.77.64.0/18 maxlen: 18
77.77.64.0/19 maxlen: 19
77.77.96.0/19 maxlen: 19
Validation: Failed, certificate revoked on Wed 15 Jan 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:0d:c8:76:78:ac:c0:b8:17:56:3b:a5:dc:65:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Validity
Not Before: Jan 1 07:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=579412f19fb32c3b5c1a01f901d152f5a308fe1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5b:1b:97:a2:51:72:5f:24:49:ea:a5:f9:a6:
13:69:f9:9e:3e:e2:3b:5a:91:c2:ed:3d:03:97:93:
5e:be:b6:bc:03:e7:03:da:dd:29:44:57:3e:9c:27:
c6:6d:e3:c7:2d:75:59:03:4b:8f:4f:21:2d:a5:aa:
33:b9:c4:45:4b:73:3e:8e:f2:2a:c1:ce:25:39:9c:
8e:63:9e:18:3a:82:30:ae:93:db:5f:89:d4:8b:6f:
27:1b:db:05:a5:9e:fc:f9:87:96:65:a7:65:4f:76:
a3:c4:01:28:70:a8:b8:46:2b:6c:6b:da:6c:a9:e3:
12:ba:d3:0a:4d:c7:50:a3:e2:74:e2:20:d7:fd:f3:
e3:9a:8f:81:14:4f:c5:a2:04:6f:07:c3:54:f2:54:
fd:5c:47:c7:75:99:fd:e0:a7:f8:a3:80:64:6e:ab:
1b:df:63:4d:84:cc:35:cf:91:51:9e:82:67:77:0d:
36:29:76:ac:8f:42:41:0b:67:6f:76:ab:73:45:8d:
de:32:31:b5:66:9d:b9:6b:ce:af:a9:11:23:78:d2:
f7:39:d9:73:74:86:86:68:92:f7:7b:84:2e:2e:75:
c0:5f:2a:35:f8:b1:a9:8c:ec:1f:51:3a:18:92:fa:
62:0c:e4:a2:5e:6e:d6:a6:b4:98:7f:b1:f7:68:46:
84:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:94:12:F1:9F:B3:2C:3B:5C:1A:01:F9:01:D1:52:F5:A3:08:FE:1E
X509v3 Authority Key Identifier:
keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/V5QS8Z-zLDtcGgH5AdFS9aMI_h4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.167.128.0/19
77.77.64.0/18
Signature Algorithm: sha256WithRSAEncryption
18:1f:24:45:cb:a6:c5:ce:3d:cb:d6:25:1e:e3:d5:86:ef:d7:
11:e2:f7:17:62:77:86:e0:50:79:3c:cd:ae:6e:24:86:24:68:
84:85:c9:87:c9:5d:cc:b8:68:e2:19:15:4d:b4:12:81:47:3f:
94:f7:77:8e:3e:3f:fe:88:5e:7d:73:76:81:e4:34:39:50:48:
5c:30:ac:e0:c6:fd:8b:dc:0b:cb:14:85:91:7b:e2:50:1b:35:
ec:d6:66:d7:fb:5a:5c:58:ae:a2:77:6e:8d:df:52:09:56:79:
1c:b4:96:49:75:30:98:c6:90:2a:ad:1b:09:8c:8c:48:2d:c5:
eb:96:aa:b1:36:53:0f:a1:0e:a1:ec:68:6c:e2:66:75:08:4e:
00:a6:99:96:f8:72:85:b7:05:60:3a:dd:99:37:5e:41:f6:66:
1a:64:82:23:d4:e0:ac:05:3b:eb:45:c4:8e:2f:e3:44:7d:d5:
ee:61:82:c6:96:e8:42:97:1f:6a:2f:5b:9a:fb:d0:93:14:8f:
29:64:b9:68:06:30:55:27:98:80:91:fc:96:c3:54:95:53:1e:
54:25:a5:01:9f:9f:f3:6c:5f:a7:23:88:04:ea:ff:3c:2a:37:
dc:b4:41:f1:53:74:58:1d:b7:27:2a:e7:81:80:11:6e:75:95:
1e:17:09:21
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQg1g3IdniswLgXVjul3GU4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODNhOGM2OWEyNjMwY2Q4ZjZmYTcwYWYyYTUzZmUwMTlm
MmNjMDcwHhcNMjUwMTAxMDc0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Nzk0MTJmMTlmYjMyYzNiNWMxYTAxZjkwMWQxNTJmNWEzMDhmZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFsbl6JRcl8kSeql+aYTafmePuI7
WpHC7T0Dl5Nevra8A+cD2t0pRFc+nCfGbePHLXVZA0uPTyEtpaozucRFS3M+jvIq
wc4lOZyOY54YOoIwrpPbX4nUi28nG9sFpZ78+YeWZadlT3ajxAEocKi4Ritsa9ps
qeMSutMKTcdQo+J04iDX/fPjmo+BFE/FogRvB8NU8lT9XEfHdZn94Kf4o4Bkbqsb
32NNhMw1z5FRnoJndw02KXasj0JBC2dvdqtzRY3eMjG1Zp25a86vqREjeNL3Odlz
dIaGaJL3e4QuLnXAXyo1+LGpjOwfUToYkvpiDOSiXm7WprSYf7H3aEaE6QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFeUEvGfsyw7XBoB+QHRUvWjCP4eMB8GA1UdIwQY
MBaAFAKDqMaaJjDNj2+nCvKlP+AZ8swHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYzI0YWQtMjRiNC00Yzk4LWE2NTkt
NTkyYzBkY2RhZjc5LzEvVjVRUzhaLXpMRHRjR2dINUFkRlM5YU1JX2g0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8xYzI0YWQtMjRiNC00Yzk4LWE2NTktNTkyYzBkY2RhZjc5
LzEvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFLqeAAwQG
TU1AMA0GCSqGSIb3DQEBCwUAA4IBAQAYHyRFy6bFzj3L1iUe49WG79cR4vcXYneG
4FB5PM2ubiSGJGiEhcmHyV3MuGjiGRVNtBKBRz+U93eOPj/+iF59c3aB5DQ5UEhc
MKzgxv2L3AvLFIWRe+JQGzXs1mbX+1pcWK6id26N31IJVnkctJZJdTCYxpAqrRsJ
jIxILcXrlqqxNlMPoQ6h7Ghs4mZ1CE4AppmW+HKFtwVgOt2ZN15B9mYaZIIj1OCs
BTvrRcSOL+NEfdXuYYLGluhClx9qL1ua+9CTFI8pZLloBjBVJ5iAkfyWw1SVUx5U
JaUBn5/zbF+nI4gE6v88KjfctEHxU3RYHbcnKueBgBFudZUeFwkh
-----END CERTIFICATE-----
Generated at Mon May 12 04:55:14 2025 by rpki-client