Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/cTvhhKRaCd53HQjS8P_K-jIU62Q.roa
File: cTvhhKRaCd53HQjS8P_K-jIU62Q.roa (raw, json)
Hash identifier: iSWaSsAg7Al8skTTeGhgt4PaDk9jhhhH1caBG4Z7XDg=
Subject key identifier: 71:3B:E1:84:A4:5A:09:DE:77:1D:08:D2:F0:FF:CA:FA:32:14:EB:64
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0194E6DAB5905970EF5F4C038825B2B58E07
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/cTvhhKRaCd53HQjS8P_K-jIU62Q.roa
Signing time: Sat 08 Feb 2025 18:38:00 +0000
ROA not before: Sat 08 Feb 2025 18:38:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 46.243.7.0/24 maxlen: 24
92.62.119.0/24 maxlen: 24
94.232.248.0/24 maxlen: 24
2a06:ddc0::/29 maxlen: 29
2a0b:8040::/29 maxlen: 29
2a0c:6980::/29 maxlen: 29
2a0c:f642::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 13 Feb 2025 08:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e6:da:b5:90:59:70:ef:5f:4c:03:88:25:b2:b5:8e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Feb 8 18:38:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=713be184a45a09de771d08d2f0ffcafa3214eb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:da:79:e6:27:30:99:b0:b7:88:82:80:5f:
c9:5c:54:c1:0e:d5:fd:56:4c:9f:b6:69:52:a5:13:
5a:68:ff:3c:64:9d:39:81:1f:65:0b:e9:94:12:58:
b1:aa:2b:35:39:86:ca:21:e5:d9:62:ab:ad:df:7c:
eb:30:1c:0e:28:ee:b6:97:aa:87:4c:65:59:29:14:
c1:a1:4e:41:60:8c:27:08:6f:63:c1:ef:aa:26:8f:
43:62:d4:43:73:a8:17:5e:ac:ee:c8:2d:da:7a:97:
6e:7e:f1:51:88:6a:b8:d7:34:e6:c1:ad:c3:c3:ae:
41:7f:ee:ba:3e:2a:c6:8a:42:09:43:bc:1d:c5:4e:
53:06:b5:dd:15:40:1d:e0:59:fb:aa:31:36:56:d8:
79:7f:a7:69:60:0b:ad:b6:95:dc:ff:ed:b3:0a:ac:
9e:83:0d:13:4d:09:f9:70:9e:05:0e:a1:31:d6:de:
d1:5e:2a:c4:d3:03:4f:d9:6c:48:1e:ab:9f:d7:3f:
16:b4:72:fc:0e:2d:79:e8:a5:90:7c:bc:2c:bf:43:
94:3e:78:05:7a:1b:3d:fa:04:53:a7:89:b8:45:80:
37:c4:67:7c:54:cc:72:b7:7f:53:d7:4d:a4:e0:d0:
8a:b7:52:0a:89:34:5d:b5:e4:70:41:28:61:64:8e:
87:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3B:E1:84:A4:5A:09:DE:77:1D:08:D2:F0:FF:CA:FA:32:14:EB:64
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/cTvhhKRaCd53HQjS8P_K-jIU62Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.7.0/24
92.62.119.0/24
94.232.248.0/24
IPv6:
2a06:ddc0::/29
2a0b:8040::/29
2a0c:6980::/29
2a0c:f642::/32
Signature Algorithm: sha256WithRSAEncryption
af:eb:5d:fe:ee:62:6c:c7:0e:27:6c:77:3a:a2:17:76:ac:a7:
75:84:08:e7:a5:63:06:e8:ba:27:29:8d:95:c5:9d:82:4d:52:
ce:cc:d6:43:67:d3:2c:e2:7a:fe:0a:f7:08:c9:40:04:11:d5:
b4:57:1d:90:92:7b:ad:83:7d:08:06:ef:9b:f3:09:7a:99:ea:
e7:d1:d1:d0:f2:1b:2f:a4:16:c7:01:9f:92:92:6c:23:19:c3:
14:54:f9:a4:11:f8:7c:c1:0c:7b:04:ea:b5:e3:e3:88:56:d5:
cb:88:0f:65:93:32:7f:5c:6d:7a:33:14:7b:a6:d9:4b:5d:0a:
01:6d:dd:55:59:e9:5a:a7:8c:03:fc:c2:c7:7b:f3:36:21:14:
72:12:47:d1:d9:47:98:f9:0b:13:f2:16:5f:14:e7:d6:2a:67:
9f:f4:78:d3:ee:f3:f5:f5:44:da:c3:9e:83:75:0c:54:21:a8:
25:5e:68:74:17:c6:51:b3:06:a0:f7:ca:07:54:8a:aa:79:b6:
73:17:ee:d7:55:10:0d:5e:c6:0a:54:ab:98:ea:d6:65:b1:b8:
1e:a4:02:0a:9f:8c:11:c6:f4:3a:b5:d4:c0:97:27:39:bf:dc:
99:5e:dd:0e:fd:94:1c:53:b0:bc:b8:5f:f5:84:d8:3a:e7:f1:
b5:59:ea:46
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZTm2rWQWXDvX0wDiCWytY4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx
ZmE4MzkwHhcNMjUwMjA4MTgzODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTNiZTE4NGE0NWEwOWRlNzcxZDA4ZDJmMGZmY2FmYTMyMTRlYjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnzaeeYnMJmwt4iCgF/JXFTBDtX9
VkyftmlSpRNaaP88ZJ05gR9lC+mUElixqis1OYbKIeXZYqut33zrMBwOKO62l6qH
TGVZKRTBoU5BYIwnCG9jwe+qJo9DYtRDc6gXXqzuyC3aepdufvFRiGq41zTmwa3D
w65Bf+66PirGikIJQ7wdxU5TBrXdFUAd4Fn7qjE2Vth5f6dpYAuttpXc/+2zCqye
gw0TTQn5cJ4FDqEx1t7RXirE0wNP2WxIHquf1z8WtHL8Di156KWQfLwsv0OUPngF
ehs9+gRTp4m4RYA3xGd8VMxyt39T102k4NCKt1IKiTRdteRwQShhZI6HkwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFHE74YSkWgnedx0I0vD/yvoyFOtkMB8GA1UdIwQY
MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt
MzA0OTVmNDAzNzg0LzEvY1R2aGhLUmFDZDUzSFFqUzhQX0staklVNjJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0
LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAYBAIAATASAwQALvMHAwQA
XD53AwQAXuj4MCIEAgACMBwDBQMqBt3AAwUDKguAQAMFAyoMaYADBQAqDPZCMA0G
CSqGSIb3DQEBCwUAA4IBAQCv613+7mJsxw4nbHc6ohd2rKd1hAjnpWMG6LonKY2V
xZ2CTVLOzNZDZ9Ms4nr+CvcIyUAEEdW0Vx2Qknutg30IBu+b8wl6mern0dHQ8hsv
pBbHAZ+SkmwjGcMUVPmkEfh8wQx7BOq14+OIVtXLiA9lkzJ/XG16MxR7ptlLXQoB
bd1VWelap4wD/MLHe/M2IRRyEkfR2UeY+QsT8hZfFOfWKmef9HjT7vP19UTaw56D
dQxUIaglXmh0F8ZRswag98oHVIqqebZzF+7XVRANXsYKVKuY6tZlsbgepAIKn4wR
xvQ6tdTAlyc5v9yZXt0O/ZQcU7C8uF/1hNg65/G1WepG
-----END CERTIFICATE-----
Generated at Fri Jun 20 20:50:53 2025 by rpki-client