Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MFNBcA6aBSjcUH3TdaxlUU13_5E.roa
File: MFNBcA6aBSjcUH3TdaxlUU13_5E.roa (raw, json)
Hash identifier: tdqMEl2Bl4x3VI309WdSoF0IbfzlZBGlYbRXEHpg9yA=
Subject key identifier: 30:53:41:70:0E:9A:05:28:DC:50:7D:D3:75:AC:65:51:4D:77:FF:91
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018F667815A003D845104EAE84595B844CFD
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MFNBcA6aBSjcUH3TdaxlUU13_5E.roa
Signing time: Sat 11 May 2024 07:04:56 +0000
ROA not before: Sat 11 May 2024 07:04:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399989
IP address blocks: 45.128.26.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
93.190.246.0/23 maxlen: 23
2a0e:1a81:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 May 2024 07:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:66:78:15:a0:03:d8:45:10:4e:ae:84:59:5b:84:4c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 11 07:04:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=305341700e9a0528dc507dd375ac65514d77ff91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:30:19:82:79:77:2b:a8:00:06:a0:e0:9f:4e:
05:d6:0a:5a:04:03:22:e2:95:d1:7f:c2:81:ed:ad:
32:12:82:fb:da:0a:e4:11:4a:90:fa:0e:d7:0a:44:
e7:85:30:c0:ab:51:a4:b2:a2:99:66:88:5b:c7:93:
b2:a0:8d:df:e0:72:26:87:98:b9:04:9a:9b:78:57:
d2:41:26:cb:43:d0:77:b3:03:99:45:39:32:ba:29:
fc:f5:82:9b:f1:f5:8f:f8:ce:16:66:39:9f:69:b3:
93:a0:5e:19:4d:0f:a7:08:83:4f:7f:37:cd:2d:06:
4f:ac:6f:c9:f9:7a:a6:c9:95:e1:4f:f8:29:38:b3:
24:a2:a9:fa:08:90:ea:5e:34:65:b6:7b:7a:8d:d5:
80:30:a6:48:83:b9:f5:b8:cf:15:96:b7:49:79:5f:
29:f3:8c:24:85:c6:b3:ba:b1:db:87:27:90:00:05:
57:f2:a5:87:ab:10:1f:fb:40:a9:65:f9:62:52:cc:
33:da:0a:31:35:4e:61:3b:6b:c7:fa:3d:45:ab:c6:
9d:d2:c3:81:9e:a0:78:93:01:8f:2e:5d:71:aa:d1:
29:c3:39:80:15:fd:9c:40:30:f3:f7:3c:ec:52:7a:
8b:b7:a5:9b:c7:eb:bf:38:c6:ea:a9:24:d8:d5:4e:
59:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:53:41:70:0E:9A:05:28:DC:50:7D:D3:75:AC:65:51:4D:77:FF:91
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MFNBcA6aBSjcUH3TdaxlUU13_5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.26.0/24
45.129.127.0/24
93.190.246.0/23
IPv6:
2a0e:1a81:1::/48
Signature Algorithm: sha256WithRSAEncryption
58:fd:6a:57:f2:f2:3e:7a:06:4e:7e:90:e4:99:48:40:2b:44:
42:b2:50:09:c1:d1:c0:60:40:89:70:74:ae:2c:f0:3b:87:1c:
72:fb:79:48:c3:5f:82:c7:48:25:66:ab:d4:c7:04:86:c0:30:
8e:58:64:5e:9a:ad:d5:1d:5c:12:f5:3d:49:96:6b:d9:51:cf:
f2:30:1c:44:3c:c1:df:51:6d:4f:63:83:df:92:1e:a7:4f:ab:
82:48:bc:0d:c8:fa:96:5a:e3:2e:31:04:47:e1:d9:a0:83:55:
a5:9b:91:0b:51:ce:da:50:c8:8a:93:fb:f0:3f:88:3f:e9:b8:
83:0b:6f:60:31:17:bd:3b:f7:9b:c2:15:e1:64:49:e3:ce:ea:
56:95:5e:c9:f3:40:33:15:32:e4:42:7f:99:86:68:b7:84:95:
84:62:1d:d3:65:70:5e:18:b4:8a:29:41:6a:ad:a9:db:3b:2d:
26:ab:04:2a:cb:ab:cd:85:66:6f:2e:41:8e:66:a9:0a:0d:10:
e7:a1:ce:3f:d2:30:f3:94:c8:93:53:27:80:94:4a:d6:42:3a:
76:c5:34:0e:87:76:87:6f:ee:2c:ef:03:0f:98:ba:4f:51:d9:
77:ee:2a:e2:9f:ba:44:9b:00:dc:b4:3a:b4:5a:b2:3b:8c:18:
41:9d:ab:b2
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAY9meBWgA9hFEE6uhFlbhEz9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwNTExMDcwNDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDUzNDE3MDBlOWEwNTI4ZGM1MDdkZDM3NWFjNjU1MTRkNzdmZjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTAZgnl3K6gABqDgn04F1gpaBAMi
4pXRf8KB7a0yEoL72grkEUqQ+g7XCkTnhTDAq1GksqKZZohbx5OyoI3f4HImh5i5
BJqbeFfSQSbLQ9B3swOZRTkyuin89YKb8fWP+M4WZjmfabOToF4ZTQ+nCINPfzfN
LQZPrG/J+XqmyZXhT/gpOLMkoqn6CJDqXjRltnt6jdWAMKZIg7n1uM8VlrdJeV8p
84wkhcazurHbhyeQAAVX8qWHqxAf+0CpZfliUswz2goxNU5hO2vH+j1Fq8ad0sOB
nqB4kwGPLl1xqtEpwzmAFf2cQDDz9zzsUnqLt6Wbx+u/OMbqqSTY1U5ZMwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFDBTQXAOmgUo3FB903WsZVFNd/+RMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvTUZOQmNBNmFCU2pjVUgzVGRheGxVVTEzXzVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQALYAaAwQA
LYF/AwQBXb72MA8EAgACMAkDBwAqDhqBAAEwDQYJKoZIhvcNAQELBQADggEBAFj9
alfy8j56Bk5+kOSZSEArREKyUAnB0cBgQIlwdK4s8DuHHHL7eUjDX4LHSCVmq9TH
BIbAMI5YZF6ardUdXBL1PUmWa9lRz/IwHEQ8wd9RbU9jg9+SHqdPq4JIvA3I+pZa
4y4xBEfh2aCDVaWbkQtRztpQyIqT+/A/iD/puIMLb2AxF70795vCFeFkSePO6laV
XsnzQDMVMuRCf5mGaLeElYRiHdNlcF4YtIopQWqtqds7LSarBCrLq82FZm8uQY5m
qQoNEOehzj/SMPOUyJNTJ4CUStZCOnbFNA6Hdodv7izvAw+Yuk9R2XfuKuKfukSb
ANy0OrRasjuMGEGdq7I=
-----END CERTIFICATE-----
Generated at Thu May 8 15:13:22 2025 by rpki-client