Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/esgkv_Nq0TaSfy1eYgPmC9h2jWw.roa
File: esgkv_Nq0TaSfy1eYgPmC9h2jWw.roa (raw, json)
Hash identifier: M+4cGtLhNItj9syu426pEh8rNUadMTySChAa3xHxTWQ=
Subject key identifier: 7A:C8:24:BF:F3:6A:D1:36:92:7F:2D:5E:62:03:E6:0B:D8:76:8D:6C
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01951D0AD0223EF7C863438BD656D2FA4D4D
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/esgkv_Nq0TaSfy1eYgPmC9h2jWw.roa
Signing time: Wed 19 Feb 2025 07:10:02 +0000
ROA not before: Wed 19 Feb 2025 07:10:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 77.242.146.0/23 maxlen: 24
92.52.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 17:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:0a:d0:22:3e:f7:c8:63:43:8b:d6:56:d2:fa:4d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 19 07:10:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ac824bff36ad136927f2d5e6203e60bd8768d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:eb:6d:4a:33:27:9e:7a:27:18:20:b9:aa:be:
db:df:77:fc:cb:2e:37:06:46:c4:3c:97:ba:5a:63:
8c:6e:f9:bd:c8:d9:7c:d9:1f:5b:2b:c2:d4:f1:93:
c7:cf:85:77:e5:36:80:90:fe:23:d7:f7:04:bf:4f:
74:3a:06:4c:91:57:fe:11:73:26:76:59:b9:4f:33:
8b:93:5c:56:39:28:c9:ae:5a:7d:d6:7a:d1:fc:f5:
d3:60:8c:b3:c5:fd:3d:27:83:70:ef:da:44:71:3d:
b2:90:23:12:09:06:01:34:53:94:d8:ce:8b:4f:eb:
de:c0:d8:78:1f:81:35:cc:ba:a2:16:21:66:6c:44:
b8:c2:ab:65:ae:87:3f:ad:ad:a3:57:2a:ed:b7:49:
fd:f1:25:d2:6f:d7:76:e5:34:10:a6:88:fe:43:3f:
5f:c4:86:ab:c6:1b:6d:6c:29:8b:bc:23:fd:6e:76:
fd:3e:73:46:8a:4f:2a:76:e4:f5:dc:a0:a1:00:94:
1e:ff:9e:d9:c5:2f:45:46:17:d5:1f:ba:50:85:98:
c5:70:1d:76:cf:7c:96:60:39:14:24:0d:fa:d2:8c:
49:14:6a:6e:9a:01:64:4b:b7:4f:4a:57:f8:71:63:
8f:ef:6c:4f:04:9c:c3:1f:0a:91:1d:04:4d:5a:9c:
0a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C8:24:BF:F3:6A:D1:36:92:7F:2D:5E:62:03:E6:0B:D8:76:8D:6C
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/esgkv_Nq0TaSfy1eYgPmC9h2jWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.146.0/23
92.52.219.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:7f:29:95:c6:c3:b1:45:73:e0:6e:41:95:a7:cb:0c:79:2f:
52:c5:55:43:11:a5:d0:73:d8:59:63:0e:54:95:55:0d:5e:de:
5b:e1:2c:9a:f4:fa:78:1f:1b:d2:a8:ff:42:63:70:8b:c3:57:
02:98:7a:e8:22:90:4b:3e:02:49:d9:06:5e:7b:ad:f0:d4:29:
ea:82:c3:1b:ab:ea:88:0b:e2:4c:d2:20:7d:8a:b7:54:7e:d8:
25:08:fb:56:50:b1:72:e1:d3:c9:54:9f:a1:77:d2:36:dd:ca:
8d:da:5f:66:d8:ae:ed:a6:23:69:bf:47:aa:8b:47:ab:1f:8a:
3c:54:1f:bb:f1:dc:c0:43:56:05:64:e8:5e:19:2d:65:de:5d:
68:f0:e6:75:99:ae:d0:dd:db:78:bf:32:d9:54:14:ac:b1:91:
09:e0:20:0b:b7:b0:bd:95:86:34:b7:78:1a:e5:1a:32:20:17:
1c:5b:a0:2c:c5:ed:64:2a:ec:57:f2:f0:5b:28:68:2e:ea:d6:
17:fb:fa:79:97:5b:a9:05:ca:ef:e8:dd:9b:a8:ab:48:cc:ba:
93:2f:4b:04:95:c6:dc:d6:fb:9c:a3:57:6b:ab:48:d6:5e:0c:
5f:38:c2:fb:97:9e:15:c8:1d:d0:67:5b:03:4d:03:1b:b6:ac:
27:a1:a8:0d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZUdCtAiPvfIY0OL1lbS+k1NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjUwMjE5MDcxMDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWM4MjRiZmYzNmFkMTM2OTI3ZjJkNWU2MjAzZTYwYmQ4NzY4ZDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyettSjMnnnonGCC5qr7b33f8yy43
BkbEPJe6WmOMbvm9yNl82R9bK8LU8ZPHz4V35TaAkP4j1/cEv090OgZMkVf+EXMm
dlm5TzOLk1xWOSjJrlp91nrR/PXTYIyzxf09J4Nw79pEcT2ykCMSCQYBNFOU2M6L
T+vewNh4H4E1zLqiFiFmbES4wqtlroc/ra2jVyrtt0n98SXSb9d25TQQpoj+Qz9f
xIarxhttbCmLvCP9bnb9PnNGik8qduT13KChAJQe/57ZxS9FRhfVH7pQhZjFcB12
z3yWYDkUJA360oxJFGpumgFkS7dPSlf4cWOP72xPBJzDHwqRHQRNWpwKSQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHrIJL/zatE2kn8tXmID5gvYdo1sMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvZXNna3ZfTnEwVGFTZnkxZVlnUG1DOWgyald3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBTfKSAwQA
XDTbMA0GCSqGSIb3DQEBCwUAA4IBAQAvfymVxsOxRXPgbkGVp8sMeS9SxVVDEaXQ
c9hZYw5UlVUNXt5b4Sya9Pp4HxvSqP9CY3CLw1cCmHroIpBLPgJJ2QZee63w1Cnq
gsMbq+qIC+JM0iB9irdUftglCPtWULFy4dPJVJ+hd9I23cqN2l9m2K7tpiNpv0eq
i0erH4o8VB+78dzAQ1YFZOheGS1l3l1o8OZ1ma7Q3dt4vzLZVBSssZEJ4CALt7C9
lYY0t3ga5RoyIBccW6Asxe1kKuxX8vBbKGgu6tYX+/p5l1upBcrv6N2bqKtIzLqT
L0sElcbc1vuco1drq0jWXgxfOML7l54VyB3QZ1sDTQMbtqwnoagN
-----END CERTIFICATE-----
Generated at Mon May 12 00:51:44 2025 by rpki-client