Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/ETV70COcvWrgZRY9_KujHyZlaoA.roa
File: ETV70COcvWrgZRY9_KujHyZlaoA.roa (raw, json)
Hash identifier: PVSx/WAhjC1FG8plowgQmnB+5GvvD3RvFFuCbT49FlU=
Subject key identifier: 11:35:7B:D0:23:9C:BD:6A:E0:65:16:3D:FC:AB:A3:1F:26:65:6A:80
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 01958B03150284BE99F769189E3DC71AB9D5
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/ETV70COcvWrgZRY9_KujHyZlaoA.roa
Signing time: Wed 12 Mar 2025 15:39:49 +0000
ROA not before: Wed 12 Mar 2025 15:39:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 91.188.245.0/24 maxlen: 24
176.119.143.0/24 maxlen: 24
2a09:af82::/32 maxlen: 32
2a09:dd04::/32 maxlen: 32
2a09:e702::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 17 Mar 2025 12:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:03:15:02:84:be:99:f7:69:18:9e:3d:c7:1a:b9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Mar 12 15:39:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11357bd0239cbd6ae065163dfcaba31f26656a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:90:14:d9:e4:f7:e9:0f:e9:71:19:f7:d5:
8f:d3:cc:22:31:59:28:16:56:97:bc:19:d6:1c:84:
3c:d7:82:ec:d9:67:9d:41:8d:85:2d:4c:40:f0:53:
ed:b4:aa:29:5f:37:33:83:00:fe:a5:5c:52:8a:02:
8d:64:3d:3d:55:01:37:d7:73:bf:23:fd:2c:a9:1d:
f1:ec:db:e3:75:67:fd:e9:5b:c5:7c:33:53:79:23:
ea:45:fa:24:bc:06:81:31:42:c0:fc:5c:74:1a:91:
fe:d4:55:c0:0e:6c:32:51:73:73:a5:08:f3:79:58:
70:92:71:e6:4d:98:01:5d:80:0e:be:44:5e:47:48:
aa:6e:bf:46:15:84:c1:3b:42:e4:af:ed:47:43:54:
f0:cb:e8:ec:77:a2:11:5f:0d:26:9c:96:91:a7:bd:
32:17:f6:b7:2d:95:e3:81:98:c3:8d:f5:14:9a:e7:
13:43:ec:87:11:4f:95:85:b5:49:96:29:83:13:aa:
c7:b9:56:f8:79:75:54:53:88:61:50:9f:56:72:84:
54:82:9a:bd:d6:9c:85:67:0d:84:0f:cc:d0:2f:08:
42:de:17:10:1b:5c:c3:8e:8e:e8:f3:e2:0b:89:83:
eb:16:e6:20:32:a4:d3:33:68:3a:4c:c2:23:66:96:
91:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:35:7B:D0:23:9C:BD:6A:E0:65:16:3D:FC:AB:A3:1F:26:65:6A:80
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/ETV70COcvWrgZRY9_KujHyZlaoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.245.0/24
176.119.143.0/24
IPv6:
2a09:af82::/32
2a09:dd04::/32
2a09:e702::/32
Signature Algorithm: sha256WithRSAEncryption
33:7e:e6:2f:1b:6f:cd:e8:8d:43:c8:75:65:cf:49:17:9e:3b:
35:cf:ba:b6:5e:51:5f:b2:a4:86:df:74:3c:03:e7:7c:23:f8:
3d:d1:90:11:45:a2:1f:b2:27:86:e6:11:7e:33:96:e0:49:5c:
a9:36:a1:0d:cc:89:80:aa:cc:7a:00:8d:1d:0c:89:a6:e2:3c:
fb:96:26:29:5d:3d:e7:67:9c:58:d0:03:2f:81:76:bd:91:6f:
4f:d8:e0:89:9f:4e:36:0d:3e:f9:0e:38:ff:15:b2:a0:95:c0:
ef:da:6e:08:68:5c:a4:f6:14:f0:f9:9d:02:2e:15:00:f8:4e:
4b:35:4d:40:ca:46:45:12:54:dd:22:9f:ea:31:c4:c1:47:b3:
cc:d3:c7:25:58:95:7a:6e:6c:d8:3d:87:46:43:c2:e7:90:bf:
0b:4f:68:af:a3:2e:2b:dd:49:62:87:a8:08:1e:e4:04:47:2a:
53:5b:fe:5c:46:cc:13:ff:4e:3c:48:ea:e9:34:3d:df:c8:6f:
16:ef:14:0b:a8:c2:2c:cb:fa:88:ae:28:35:cc:63:6d:31:03:
39:d2:71:b9:ea:cc:91:18:b8:a6:e7:88:1e:e9:dc:13:99:8e:
67:8b:f9:c5:8f:c3:f5:ac:ca:2f:47:01:32:9e:fc:83:48:fa:
84:be:37:68
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZWLAxUChL6Z92kYnj3HGrnVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc2MTU5YmZkOWUzMzc1MjNlZTkzMGYzZGYxMTFkNmJh
ZTczMDYwHhcNMjUwMzEyMTUzOTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTM1N2JkMDIzOWNiZDZhZTA2NTE2M2RmY2FiYTMxZjI2NjU2YTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyqQFNnk9+kP6XEZ99WP08wiMVko
FlaXvBnWHIQ814Ls2WedQY2FLUxA8FPttKopXzczgwD+pVxSigKNZD09VQE313O/
I/0sqR3x7NvjdWf96VvFfDNTeSPqRfokvAaBMULA/Fx0GpH+1FXADmwyUXNzpQjz
eVhwknHmTZgBXYAOvkReR0iqbr9GFYTBO0Lkr+1HQ1Twy+jsd6IRXw0mnJaRp70y
F/a3LZXjgZjDjfUUmucTQ+yHEU+VhbVJlimDE6rHuVb4eXVUU4hhUJ9WcoRUgpq9
1pyFZw2ED8zQLwhC3hcQG1zDjo7o8+ILiYPrFuYgMqTTM2g6TMIjZpaRLQIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFBE1e9AjnL1q4GUWPfyrox8mZWqAMB8GA1UdIwQY
MBaAFMzXYVm/2eM3Uj7pMPPfER1rrnMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgt
Zjg1ODlmNjgyNjkxLzEvRVRWNzBDT2N2V3JnWlJZOV9LdWpIeVpsYW9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgtZjg1ODlmNjgyNjkx
LzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTASBAIAATAMAwQAW7z1AwQA
sHePMBsEAgACMBUDBQAqCa+CAwUAKgndBAMFACoJ5wIwDQYJKoZIhvcNAQELBQAD
ggEBADN+5i8bb83ojUPIdWXPSReeOzXPurZeUV+ypIbfdDwD53wj+D3RkBFFoh+y
J4bmEX4zluBJXKk2oQ3MiYCqzHoAjR0MiabiPPuWJildPednnFjQAy+Bdr2Rb0/Y
4ImfTjYNPvkOOP8VsqCVwO/abghoXKT2FPD5nQIuFQD4Tks1TUDKRkUSVN0in+ox
xMFHs8zTxyVYlXpubNg9h0ZDwueQvwtPaK+jLivdSWKHqAge5ARHKlNb/lxGzBP/
TjxI6uk0Pd/IbxbvFAuowizL+oiuKDXMY20xAznScbnqzJEYuKbniB7p3BOZjmeL
+cWPw/Wsyi9HATKe/INI+oS+N2g=
-----END CERTIFICATE-----
Generated at Wed Apr 30 11:49:42 2025 by rpki-client