Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/FhTR0elCdvHfBsJQDeKnb4beoQc.roa
File: FhTR0elCdvHfBsJQDeKnb4beoQc.roa (raw, json)
Hash identifier: Jxb7lQQcpEIs/J6U/KRGaeU45HVDXWpD8Pj7y2aE5iA=
Subject key identifier: 16:14:D1:D1:E9:42:76:F1:DF:06:C2:50:0D:E2:A7:6F:86:DE:A1:07
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 01963C6F9F65FC4F96D2ED88A2FB0C5DE5D1
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/FhTR0elCdvHfBsJQDeKnb4beoQc.roa
Signing time: Wed 16 Apr 2025 02:31:10 +0000
ROA not before: Wed 16 Apr 2025 02:31:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.149.153.0/24 maxlen: 24
89.150.49.0/24 maxlen: 24
185.162.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Apr 2025 00:28:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:6f:9f:65:fc:4f:96:d2:ed:88:a2:fb:0c:5d:e5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Apr 16 02:31:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1614d1d1e94276f1df06c2500de2a76f86dea107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:47:ce:53:48:d3:f9:67:a5:4e:03:f3:a7:2a:
f8:cb:7e:2b:ed:14:7d:4f:18:32:a7:22:b4:66:e5:
47:e0:9d:78:69:7b:6c:b0:54:a9:3c:6c:03:ca:34:
66:09:dc:2b:5c:5e:4c:be:be:24:a7:91:d9:ef:a0:
1f:10:62:55:1f:2e:f5:6b:c2:55:a0:01:17:bd:44:
2f:96:57:b8:35:e3:83:65:72:49:02:c2:45:77:a2:
d2:7b:54:28:00:5b:f8:e3:28:16:d1:ee:f5:bd:0c:
95:86:0f:a5:8a:d5:20:6e:e7:75:35:42:83:b2:3e:
e1:d6:35:dd:e0:78:43:7d:53:29:1f:5d:6e:17:d4:
49:a7:bd:31:d5:c2:88:93:3a:06:a2:04:f4:29:8d:
87:28:79:c1:7f:d4:87:c0:d0:3e:d1:17:5a:23:7b:
a2:3f:d1:ee:49:b7:ae:c4:06:29:db:0f:03:66:1b:
2c:a2:5c:5b:7f:1b:b6:a2:db:c0:81:c0:29:9f:8c:
08:97:89:eb:a0:93:b8:cd:36:d7:2c:c3:35:45:c8:
ef:fc:16:15:61:c5:41:ed:d6:36:ab:75:42:c7:ba:
3f:35:00:6f:a5:01:7d:0f:79:0c:2b:34:19:c2:e4:
a7:9d:17:42:ea:c3:95:d9:7b:e5:73:1b:ea:36:c7:
0f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:14:D1:D1:E9:42:76:F1:DF:06:C2:50:0D:E2:A7:6F:86:DE:A1:07
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/FhTR0elCdvHfBsJQDeKnb4beoQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.153.0/24
89.150.49.0/24
185.162.176.0/24
Signature Algorithm: sha256WithRSAEncryption
20:33:56:45:09:f5:64:73:c8:28:f2:c8:58:d4:52:8d:54:1b:
11:ec:5a:10:8f:08:81:b9:48:c5:12:56:d8:b6:84:64:a6:86:
e3:4c:cc:a1:a0:82:1e:b8:63:cf:4d:cd:51:a1:c0:50:85:9b:
e2:62:ce:a1:e7:0f:06:1c:fa:cb:7e:50:2d:0d:14:94:71:57:
54:97:35:59:2a:dd:e4:04:bc:54:db:af:5b:c4:1c:be:63:85:
23:94:b7:dd:b6:4c:48:ff:35:e6:a2:0e:56:87:f0:d4:07:a9:
6b:f3:20:dd:e5:db:55:0c:fc:04:66:41:66:f3:68:b4:e0:b1:
7a:48:82:85:20:3b:26:97:14:fb:e6:47:f6:6e:1b:29:00:2d:
17:74:93:2b:11:9b:39:2d:da:35:7e:13:b9:1f:95:bd:b5:8d:
dc:96:8f:81:1c:ed:57:c0:a0:bc:fe:9b:57:18:ab:7d:74:48:
c0:d8:f0:50:d5:9f:f1:36:c3:52:e3:df:93:24:ad:89:55:70:
59:a5:70:9e:f7:a5:5e:ce:8d:34:26:0f:9e:c1:d5:25:7c:c0:
9d:fb:9c:2e:58:fc:eb:f7:74:43:0d:bc:01:74:cd:df:cf:70:
c6:dc:3d:84:94:00:c8:5b:04:56:6a:df:2d:83:f1:61:28:9f:
24:60:ca:e6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZY8b59l/E+W0u2IovsMXeXRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWY4Yzk0NDdkNjE0Yjg2MTgyNzYzZDkzMzMyNTBlMmQ5
NDEyZTIwHhcNMjUwNDE2MDIzMTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjE0ZDFkMWU5NDI3NmYxZGYwNmMyNTAwZGUyYTc2Zjg2ZGVhMTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EfOU0jT+WelTgPzpyr4y34r7RR9
TxgypyK0ZuVH4J14aXtssFSpPGwDyjRmCdwrXF5Mvr4kp5HZ76AfEGJVHy71a8JV
oAEXvUQvlle4NeODZXJJAsJFd6LSe1QoAFv44ygW0e71vQyVhg+litUgbud1NUKD
sj7h1jXd4HhDfVMpH11uF9RJp70x1cKIkzoGogT0KY2HKHnBf9SHwNA+0RdaI3ui
P9HuSbeuxAYp2w8DZhssolxbfxu2otvAgcApn4wIl4nroJO4zTbXLMM1Rcjv/BYV
YcVB7dY2q3VCx7o/NQBvpQF9D3kMKzQZwuSnnRdC6sOV2XvlcxvqNscPqwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBYU0dHpQnbx3wbCUA3ip2+G3qEHMB8GA1UdIwQY
MBaAFAtfjJRH1hS4YYJ2PZMzJQ4tlBLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzEtTWxFZldGTGhoZ25ZOWt6TWxEaTJVRXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mN2Y2YzAtMDlkMC00OTJjLTkyZTYt
OGE5NWU2Mzc3MzMyLzEvRmhUUjBlbENkdkhmQnNKUURlS25iNGJlb1FjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9mN2Y2YzAtMDlkMC00OTJjLTkyZTYtOGE5NWU2Mzc3MzMy
LzEvQzEtTWxFZldGTGhoZ25ZOWt6TWxEaTJVRXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZWZAwQA
WZYxAwQAuaKwMA0GCSqGSIb3DQEBCwUAA4IBAQAgM1ZFCfVkc8go8shY1FKNVBsR
7FoQjwiBuUjFElbYtoRkpobjTMyhoIIeuGPPTc1RocBQhZviYs6h5w8GHPrLflAt
DRSUcVdUlzVZKt3kBLxU269bxBy+Y4UjlLfdtkxI/zXmog5Wh/DUB6lr8yDd5dtV
DPwEZkFm82i04LF6SIKFIDsmlxT75kf2bhspAC0XdJMrEZs5Ldo1fhO5H5W9tY3c
lo+BHO1XwKC8/ptXGKt9dEjA2PBQ1Z/xNsNS49+TJK2JVXBZpXCe96Vezo00Jg+e
wdUlfMCd+5wuWPzr93RDDbwBdM3fz3DG3D2ElADIWwRWat8tg/FhKJ8kYMrm
-----END CERTIFICATE-----
Generated at Fri May 9 08:53:52 2025 by rpki-client