Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/v_zeVeFbJhr4B6ufM2bxk1woB_U.roa
File: v_zeVeFbJhr4B6ufM2bxk1woB_U.roa (raw, json)
Hash identifier: Xxr/jf8VRNqAASLi8Ny6Fm3Y1OW9FxmerKByRMKFa64=
Subject key identifier: BF:FC:DE:55:E1:5B:26:1A:F8:07:AB:9F:33:66:F1:93:5C:28:07:F5
Certificate issuer: /CN=b215270e3b5976b44f3adece57047d1e0787ba75
Certificate serial: 019299F22810E10FA7AA516E53B103103DBA
Authority key identifier: B2:15:27:0E:3B:59:76:B4:4F:3A:DE:CE:57:04:7D:1E:07:87:BA:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/v_zeVeFbJhr4B6ufM2bxk1woB_U.roa
Signing time: Thu 17 Oct 2024 10:07:16 +0000
ROA not before: Thu 17 Oct 2024 10:07:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210230
IP address blocks: 193.38.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:99:f2:28:10:e1:0f:a7:aa:51:6e:53:b1:03:10:3d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b215270e3b5976b44f3adece57047d1e0787ba75
Validity
Not Before: Oct 17 10:07:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bffcde55e15b261af807ab9f3366f1935c2807f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:86:bb:26:00:da:34:68:1f:a2:46:19:01:
f6:d8:6e:de:cc:85:26:27:f5:7e:f2:b9:4f:99:f6:
fa:23:89:df:5f:13:20:94:1a:ae:45:c2:b5:15:ec:
3c:f3:41:b8:72:a8:76:59:70:ac:b3:24:2b:04:6b:
3e:1e:1d:e3:dc:ea:00:b6:a8:05:af:02:9c:d5:9d:
5a:36:9d:47:cd:85:29:62:4c:0d:2a:27:60:a8:40:
9f:24:ed:47:d7:fa:2c:22:bb:b2:8d:84:ac:44:d1:
e4:51:76:ee:b5:3d:24:7d:b3:9b:6c:c3:49:bd:55:
8d:bd:2f:46:29:ed:68:bf:75:99:23:5e:0c:23:5d:
47:56:05:09:b1:94:15:8d:82:39:eb:05:05:b2:3e:
c3:3b:57:db:fe:f1:ca:4a:c3:70:78:21:c2:89:0e:
af:d8:59:19:89:d6:82:2c:15:08:f2:1c:37:1e:07:
85:63:5a:61:34:1f:d1:82:c4:da:67:fc:10:27:cc:
48:44:2f:ad:89:a2:25:53:6f:9e:c4:fe:7f:b3:9f:
42:c9:55:4c:a5:1e:54:61:ef:e3:98:7f:c2:e9:8d:
19:73:2f:16:17:92:0a:1c:3f:1c:7c:d6:6c:ab:7e:
5b:29:5d:ea:9b:7c:e1:5b:9b:cc:46:ba:0a:21:78:
01:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FC:DE:55:E1:5B:26:1A:F8:07:AB:9F:33:66:F1:93:5C:28:07:F5
X509v3 Authority Key Identifier:
keyid:B2:15:27:0E:3B:59:76:B4:4F:3A:DE:CE:57:04:7D:1E:07:87:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/v_zeVeFbJhr4B6ufM2bxk1woB_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.146.0/24
Signature Algorithm: sha256WithRSAEncryption
66:1a:6f:d3:38:71:42:44:47:e0:64:58:1d:4b:31:29:57:93:
33:7f:b5:18:6e:50:cf:09:0b:9e:4b:5f:97:f1:f8:7e:a6:25:
30:63:55:b8:a0:b6:90:0d:07:17:14:e7:0b:b6:14:8e:f7:2d:
45:67:61:e8:de:b0:db:23:ae:36:70:2c:5f:b5:f9:23:70:4a:
e0:d0:be:da:63:d5:9e:c3:29:f6:7a:3c:77:41:7f:5d:aa:c9:
6c:5f:21:0c:70:d1:0a:d3:08:b8:f3:ec:db:92:65:eb:a4:5a:
44:04:1a:aa:64:c4:85:20:09:5b:47:b5:a1:ca:05:36:15:53:
33:5c:14:b1:c0:19:27:34:4d:fa:df:b6:bf:49:67:56:de:82:
8b:0d:87:d1:a4:92:a7:96:00:87:a9:df:68:30:d5:29:df:dd:
af:24:87:52:ac:b7:24:e5:21:32:08:92:e1:d4:ba:97:b1:98:
15:e7:04:2f:91:cf:c4:7a:dd:d4:81:35:f0:ac:a3:cf:4a:62:
ef:18:39:cc:3d:1f:4c:d8:47:2f:5b:fb:0f:64:ab:06:35:a0:
4e:df:16:73:b4:2a:c2:9e:21:7f:db:6a:a6:27:87:a1:75:43:
89:da:0e:af:ca:12:2e:11:63:4a:5b:17:3d:db:39:74:3e:9b:
33:54:af:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKZ8igQ4Q+nqlFuU7EDED26MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMTUyNzBlM2I1OTc2YjQ0ZjNhZGVjZTU3MDQ3ZDFlMDc4
N2JhNzUwHhcNMjQxMDE3MTAwNzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmZjZGU1NWUxNWIyNjFhZjgwN2FiOWYzMzY2ZjE5MzVjMjgwN2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnmGuyYA2jRoH6JGGQH22G7ezIUm
J/V+8rlPmfb6I4nfXxMglBquRcK1Few880G4cqh2WXCssyQrBGs+Hh3j3OoAtqgF
rwKc1Z1aNp1HzYUpYkwNKidgqECfJO1H1/osIruyjYSsRNHkUXbutT0kfbObbMNJ
vVWNvS9GKe1ov3WZI14MI11HVgUJsZQVjYI56wUFsj7DO1fb/vHKSsNweCHCiQ6v
2FkZidaCLBUI8hw3HgeFY1phNB/RgsTaZ/wQJ8xIRC+tiaIlU2+exP5/s59CyVVM
pR5UYe/jmH/C6Y0Zcy8WF5IKHD8cfNZsq35bKV3qm3zhW5vMRroKIXgBswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL/83lXhWyYa+AernzNm8ZNcKAf1MB8GA1UdIwQY
MBaAFLIVJw47WXa0TzrezlcEfR4Hh7p1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2hVbkRqdFpkclJQT3Q3T1Z3UjlIZ2VIdW5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iZDU5YWUtNWI3ZC00YzI2LThlMTQt
MjRiOWU4MjExODg1LzEvdl96ZVZlRmJKaHI0QjZ1Zk0yYnhrMXdvQl9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9iZDU5YWUtNWI3ZC00YzI2LThlMTQtMjRiOWU4MjExODg1
LzEvc2hVbkRqdFpkclJQT3Q3T1Z3UjlIZ2VIdW5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSaSMA0G
CSqGSIb3DQEBCwUAA4IBAQBmGm/TOHFCREfgZFgdSzEpV5Mzf7UYblDPCQueS1+X
8fh+piUwY1W4oLaQDQcXFOcLthSO9y1FZ2Ho3rDbI642cCxftfkjcErg0L7aY9We
wyn2ejx3QX9dqslsXyEMcNEK0wi48+zbkmXrpFpEBBqqZMSFIAlbR7WhygU2FVMz
XBSxwBknNE3637a/SWdW3oKLDYfRpJKnlgCHqd9oMNUp392vJIdSrLck5SEyCJLh
1LqXsZgV5wQvkc/Eet3UgTXwrKPPSmLvGDnMPR9M2EcvW/sPZKsGNaBO3xZztCrC
niF/22qmJ4ehdUOJ2g6vyhIuEWNKWxc92zl0PpszVK+Y
-----END CERTIFICATE-----
Generated at Mon Apr 21 11:04:34 2025 by rpki-client