Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/PuWfHyeBzHR3CJutJRMkWSFYYb8.roa
File: PuWfHyeBzHR3CJutJRMkWSFYYb8.roa (raw, json)
Hash identifier: 9yJsH86123IoWkVjweP5fTm3iL/rNvltdg89rRSKGfs=
Subject key identifier: 3E:E5:9F:1F:27:81:CC:74:77:08:9B:AD:25:13:24:59:21:58:61:BF
Certificate issuer: /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial: 019416BF8AA71A0E6509222F5BCABA569ABD
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/PuWfHyeBzHR3CJutJRMkWSFYYb8.roa
Signing time: Mon 30 Dec 2024 08:47:19 +0000
ROA not before: Mon 30 Dec 2024 08:47:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9026
IP address blocks: 62.212.0.0/19 maxlen: 19
185.120.40.0/22 maxlen: 22
2a02:20::/29 maxlen: 29
2a02:20::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:16:bf:8a:a7:1a:0e:65:09:22:2f:5b:ca:ba:56:9a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Validity
Not Before: Dec 30 08:47:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ee59f1f2781cc7477089bad25132459215861bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0b:77:cb:66:5b:65:27:af:cb:02:cb:7b:e5:
17:04:03:6f:f2:4c:2c:00:1e:ea:93:5f:3e:67:2f:
33:c2:77:ed:ad:c3:da:28:32:53:d3:1c:f3:2b:55:
b1:ad:c5:0b:ee:e6:6e:92:37:df:a5:99:bb:76:af:
9f:42:79:ff:59:a0:14:94:b9:79:e0:b4:ff:fc:40:
37:8b:67:b0:20:d4:f6:c1:d6:70:48:30:09:31:1f:
fc:e0:13:f2:34:e2:c0:fc:ee:c2:eb:a0:37:1b:15:
19:db:96:7a:18:eb:68:80:48:ad:46:cf:64:3e:1b:
3f:f4:aa:cb:ae:2b:0b:03:28:6a:d7:d6:d1:1d:57:
3b:a3:7f:d7:70:cd:af:a3:71:df:f3:b0:90:d3:a6:
5b:60:62:76:df:4a:64:5e:37:a9:29:7b:b0:19:b9:
2b:cc:73:93:35:b2:b8:7b:7f:f7:a2:10:5b:d1:6f:
69:f0:7a:c9:5e:c6:48:aa:94:58:47:75:c3:6f:93:
e0:c9:3a:ff:81:cc:ca:ca:e5:8f:e0:cb:cc:8b:32:
29:f7:8a:96:63:2d:06:7f:57:40:c6:b7:9d:5c:65:
0c:e4:5e:bb:d2:1e:1c:a5:75:6c:bb:2b:41:2b:24:
c6:6f:45:80:ae:0a:1f:4d:c6:15:9c:fe:29:d7:f0:
fa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E5:9F:1F:27:81:CC:74:77:08:9B:AD:25:13:24:59:21:58:61:BF
X509v3 Authority Key Identifier:
keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/PuWfHyeBzHR3CJutJRMkWSFYYb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.212.0.0/19
185.120.40.0/22
IPv6:
2a02:20::/29
Signature Algorithm: sha256WithRSAEncryption
66:c5:34:31:bc:46:a9:0f:08:fb:82:ff:66:95:f7:c7:e5:e6:
da:c3:ee:70:d5:6b:e9:4f:3a:47:13:24:96:70:43:13:47:b9:
42:52:64:f6:3f:e8:d7:06:77:54:d1:8b:db:26:7c:9b:a4:08:
64:16:1b:8e:2c:38:1a:65:d8:9b:1c:21:73:42:fb:97:d8:43:
50:73:85:bf:88:da:be:a1:c9:00:7b:af:54:47:a0:eb:fc:c6:
4f:b1:c7:e9:ec:9d:40:58:d9:90:3c:ec:9b:ae:04:9f:6d:01:
86:c2:f8:3e:18:24:08:32:57:6c:a9:3f:60:31:03:c1:52:66:
b9:b1:1b:a8:59:5a:9f:77:d0:14:8d:66:45:b8:11:2f:f3:fa:
e7:10:71:e6:59:f7:19:5d:65:33:eb:75:bd:63:3d:79:e0:ad:
07:d5:9a:25:d3:6c:20:0c:4b:78:2c:01:b1:c1:d7:9b:13:ad:
7a:58:3b:b9:1b:70:d0:39:4e:85:84:be:88:1c:6b:d4:50:ec:
8c:d2:41:b5:3e:20:59:24:6a:22:80:c6:31:80:1f:54:8e:0d:
ff:f6:bc:9f:dd:cd:4d:5d:c4:86:73:83:1d:b2:12:1e:2f:0b:
15:a9:91:39:a4:52:66:4a:9c:ef:d3:81:38:5c:79:57:19:c8:
1e:da:27:4f
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQWv4qnGg5lCSIvW8q6Vpq9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZWVhMTBhZmFjZjNhOWMyNmVhMWIxZWM0ODhlOTU1ZTRk
ZmEwNmEwHhcNMjQxMjMwMDg0NzE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWU1OWYxZjI3ODFjYzc0NzcwODliYWQyNTEzMjQ1OTIxNTg2MWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwt3y2ZbZSevywLLe+UXBANv8kws
AB7qk18+Zy8zwnftrcPaKDJT0xzzK1WxrcUL7uZukjffpZm7dq+fQnn/WaAUlLl5
4LT//EA3i2ewINT2wdZwSDAJMR/84BPyNOLA/O7C66A3GxUZ25Z6GOtogEitRs9k
Phs/9KrLrisLAyhq19bRHVc7o3/XcM2vo3Hf87CQ06ZbYGJ230pkXjepKXuwGbkr
zHOTNbK4e3/3ohBb0W9p8HrJXsZIqpRYR3XDb5PgyTr/gczKyuWP4MvMizIp94qW
Yy0Gf1dAxredXGUM5F670h4cpXVsuytBKyTGb0WArgofTcYVnP4p1/D6BQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFD7lnx8ngcx0dwibrSUTJFkhWGG/MB8GA1UdIwQY
MBaAFPbuoQr6zzqcJuobHsSI6VXk36BqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEt
NTRkOGY2YjA2YjgzLzEvUHVXZkh5ZUJ6SFIzQ0p1dEpSTWtXU0ZZWWI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEtNTRkOGY2YjA2Yjgz
LzEvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFPtQAAwQC
uXgoMA0EAgACMAcDBQMqAgAgMA0GCSqGSIb3DQEBCwUAA4IBAQBmxTQxvEapDwj7
gv9mlffH5ebaw+5w1WvpTzpHEySWcEMTR7lCUmT2P+jXBndU0YvbJnybpAhkFhuO
LDgaZdibHCFzQvuX2ENQc4W/iNq+ockAe69UR6Dr/MZPscfp7J1AWNmQPOybrgSf
bQGGwvg+GCQIMldsqT9gMQPBUma5sRuoWVqfd9AUjWZFuBEv8/rnEHHmWfcZXWUz
63W9Yz154K0H1Zol02wgDEt4LAGxwdebE616WDu5G3DQOU6FhL6IHGvUUOyM0kG1
PiBZJGoigMYxgB9Ujg3/9ryf3c1NXcSGc4MdshIeLwsVqZE5pFJmSpzv04E4XHlX
Gcge2idP
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:01:19 2025 by rpki-client