Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/ScaLe41idvJEQwl9oYH2ffmb3T4.roa
File: ScaLe41idvJEQwl9oYH2ffmb3T4.roa (raw, json)
Hash identifier: pLVbEQO4JnJ8sZvGkkPIXrOi/3gh4jqB9Rt+CK3Q4oo=
Subject key identifier: 49:C6:8B:7B:8D:62:76:F2:44:43:09:7D:A1:81:F6:7D:F9:9B:DD:3E
Certificate issuer: /CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Certificate serial: 0193F3468392AFAEAD3C28F9B0064B1C52B9
Authority key identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/ScaLe41idvJEQwl9oYH2ffmb3T4.roa
Signing time: Mon 23 Dec 2024 11:28:24 +0000
ROA not before: Mon 23 Dec 2024 11:28:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43885
IP address blocks: 109.70.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f3:46:83:92:af:ae:ad:3c:28:f9:b0:06:4b:1c:52:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Validity
Not Before: Dec 23 11:28:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49c68b7b8d6276f24443097da181f67df99bdd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:e3:b8:78:c6:ad:7b:ca:57:65:3c:8d:2b:
c4:07:dc:54:a5:c3:72:36:4b:07:02:7b:04:6d:89:
5e:75:15:dd:c9:72:67:d9:fa:68:88:71:b1:39:ea:
f9:76:0e:b3:cc:c1:87:79:09:cb:a4:33:b8:47:c2:
67:ad:14:68:8e:25:b7:63:dc:3a:e8:8f:6f:bf:a1:
42:fc:a0:6b:e6:b8:f3:27:f7:57:32:97:46:d9:4f:
7f:93:cb:00:69:c9:44:93:09:0c:0d:af:53:69:99:
99:6a:e8:d6:0d:ad:80:6d:54:be:ee:43:f1:9b:a9:
84:43:aa:30:5e:1a:3b:b6:14:0a:3b:3d:90:e8:47:
ce:71:f8:62:45:f8:e4:22:2e:b8:f3:68:a0:a5:d1:
15:73:61:15:cb:bb:4e:7b:46:c1:90:16:93:ff:40:
53:fd:bf:42:c8:96:85:f6:db:47:39:32:7b:29:88:
7d:d0:57:4d:8e:16:7a:be:12:ad:25:8e:f8:12:75:
79:df:7a:98:cf:21:8c:97:91:ae:24:9d:83:a4:57:
54:6f:00:f6:9f:1e:4f:54:77:1f:25:1f:b3:93:07:
81:8a:ba:94:22:26:1f:0c:d4:9d:49:3a:93:3e:74:
69:32:e2:ad:69:a1:77:53:6f:4e:3a:d5:12:b0:15:
7b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C6:8B:7B:8D:62:76:F2:44:43:09:7D:A1:81:F6:7D:F9:9B:DD:3E
X509v3 Authority Key Identifier:
keyid:08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/ScaLe41idvJEQwl9oYH2ffmb3T4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.70.235.0/24
Signature Algorithm: sha256WithRSAEncryption
57:68:7f:62:f4:69:c2:db:17:69:1c:ab:ca:59:1e:3e:59:97:
ab:6b:53:bc:36:fc:bd:a1:79:ca:a2:f8:d6:e1:b4:8b:8d:4b:
97:c4:ec:4c:b9:be:9a:73:f0:ed:b3:06:9d:0e:d9:0a:d2:c8:
2c:df:dd:2b:a0:81:8c:55:52:f6:11:af:88:d3:2c:92:3a:c7:
51:61:da:80:57:45:14:a9:50:1d:ee:ca:ee:34:79:ea:d1:5d:
f6:5f:27:f2:9b:bd:98:4c:84:76:eb:04:f3:33:cf:9e:3f:40:
64:87:11:0f:43:4d:0b:d6:b6:52:c0:fa:70:b3:78:a7:51:4e:
3c:7b:1f:9a:3d:32:72:16:d1:44:10:32:0e:38:a2:8d:d1:80:
80:f9:17:3d:14:94:bc:80:31:af:7b:f5:34:95:9b:de:ae:af:
93:aa:31:cf:b9:0d:eb:dc:b2:2c:54:4b:c7:19:89:15:c5:23:
d3:5f:c7:44:4d:ca:b7:12:f4:a8:b6:0b:bf:7a:9f:fb:79:9e:
4d:85:3a:0c:13:c1:7a:90:51:a5:37:fe:1b:41:04:37:03:24:
68:dc:33:6d:34:70:56:11:80:c5:90:4c:4d:05:eb:81:e9:b6:
d3:e2:cb:43:de:cc:25:cf:09:19:d6:cf:c3:57:b4:60:db:f9:
60:98:11:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPzRoOSr66tPCj5sAZLHFK5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YjNlYjVmYjNiYTc2NTZlMTEzNTc4MzQ4MjllZWNhZjQ0
MTIxMmUwHhcNMjQxMjIzMTEyODI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWM2OGI3YjhkNjI3NmYyNDQ0MzA5N2RhMTgxZjY3ZGY5OWJkZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQDjuHjGrXvKV2U8jSvEB9xUpcNy
NksHAnsEbYledRXdyXJn2fpoiHGxOer5dg6zzMGHeQnLpDO4R8JnrRRojiW3Y9w6
6I9vv6FC/KBr5rjzJ/dXMpdG2U9/k8sAaclEkwkMDa9TaZmZaujWDa2AbVS+7kPx
m6mEQ6owXho7thQKOz2Q6EfOcfhiRfjkIi6482igpdEVc2EVy7tOe0bBkBaT/0BT
/b9CyJaF9ttHOTJ7KYh90FdNjhZ6vhKtJY74EnV533qYzyGMl5GuJJ2DpFdUbwD2
nx5PVHcfJR+zkweBirqUIiYfDNSdSTqTPnRpMuKtaaF3U29OOtUSsBV7EwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEnGi3uNYnbyREMJfaGB9n35m90+MB8GA1UdIwQY
MBaAFAiz61+zunZW4RNXg0gp7sr0QSEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xNmM4OTAtMTdlNy00YTUxLWEzODct
M2U4ZGYzMzEwMjMyLzEvU2NhTGU0MWlkdkpFUXdsOW9ZSDJmZm1iM1Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8xNmM4OTAtMTdlNy00YTUxLWEzODctM2U4ZGYzMzEwMjMy
LzEvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUbrMA0G
CSqGSIb3DQEBCwUAA4IBAQBXaH9i9GnC2xdpHKvKWR4+WZera1O8Nvy9oXnKovjW
4bSLjUuXxOxMub6ac/DtswadDtkK0sgs390roIGMVVL2Ea+I0yySOsdRYdqAV0UU
qVAd7sruNHnq0V32Xyfym72YTIR26wTzM8+eP0BkhxEPQ00L1rZSwPpws3inUU48
ex+aPTJyFtFEEDIOOKKN0YCA+Rc9FJS8gDGve/U0lZverq+TqjHPuQ3r3LIsVEvH
GYkVxSPTX8dETcq3EvSotgu/ep/7eZ5NhToME8F6kFGlN/4bQQQ3AyRo3DNtNHBW
EYDFkExNBeuB6bbT4stD3swlzwkZ1s/DV7Rg2/lgmBHn
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:07 2025 by rpki-client