Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/kMaW4OBwTHlZfsqt252D_R-2IZo.roa
File: kMaW4OBwTHlZfsqt252D_R-2IZo.roa (raw, json)
Hash identifier: 5JltDW/WHkKWSk7cFkShvqUMkJNjhLat354EJklw/4o=
Subject key identifier: 90:C6:96:E0:E0:70:4C:79:59:7E:CA:AD:DB:9D:83:FD:1F:B6:21:9A
Certificate issuer: /CN=993900f66e70b2fffd9c0ce92602f2f45c659961
Certificate serial: 0193BEFD5072B93C4E8C924D12DE694E377E
Authority key identifier: 99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/kMaW4OBwTHlZfsqt252D_R-2IZo.roa
Signing time: Fri 13 Dec 2024 07:48:12 +0000
ROA not before: Fri 13 Dec 2024 07:48:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39032
IP address blocks: 87.237.232.0/21 maxlen: 21
89.236.216.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 13 Dec 2024 12:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:be:fd:50:72:b9:3c:4e:8c:92:4d:12:de:69:4e:37:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993900f66e70b2fffd9c0ce92602f2f45c659961
Validity
Not Before: Dec 13 07:48:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90c696e0e0704c79597ecaaddb9d83fd1fb6219a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5f:8a:75:8f:c7:66:03:4d:cf:7a:3d:b3:78:
e2:d5:ff:14:7c:97:6a:14:32:62:f1:48:33:93:0b:
df:01:01:4c:60:b3:f8:c9:21:a1:42:5e:09:05:b9:
54:9f:e7:04:31:0c:e0:97:ab:54:e7:c4:32:0d:1d:
1c:51:07:5f:53:78:db:0c:e0:90:7f:a2:41:04:a8:
a6:08:73:00:93:cf:e8:b5:b5:91:b2:77:21:0e:b2:
29:ad:4c:b8:6d:29:b0:44:a4:ba:37:e0:16:22:e0:
b8:6b:ce:b0:eb:d9:4b:af:0f:05:27:88:8e:7b:36:
35:88:82:4d:f4:13:65:c4:72:da:bc:70:d5:e6:5f:
d0:81:37:da:c1:46:6e:ba:4d:d3:33:ce:d0:2e:65:
90:eb:48:bc:90:53:4f:da:03:ea:c5:4d:24:a8:44:
5d:1e:ed:fd:78:b3:69:b8:86:92:cd:f9:e6:f5:63:
39:67:d1:4a:fa:24:ea:a0:d2:00:cd:86:51:bc:2d:
34:45:6a:90:f3:1f:ff:1d:8c:43:c3:b9:b4:9a:21:
c3:c5:1c:6b:3e:b3:26:67:20:4c:3d:e6:11:4a:b8:
38:6d:99:7e:27:b9:1b:66:d5:ad:41:fc:2d:f6:57:
24:c4:cb:ce:e1:07:30:df:64:68:6e:95:40:c6:fe:
0f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C6:96:E0:E0:70:4C:79:59:7E:CA:AD:DB:9D:83:FD:1F:B6:21:9A
X509v3 Authority Key Identifier:
keyid:99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/kMaW4OBwTHlZfsqt252D_R-2IZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.232.0/21
89.236.216.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:7a:24:dc:ec:96:35:c5:7b:39:ce:df:e1:74:dc:2b:9e:a8:
5f:05:fe:e1:0f:08:58:a8:ff:87:77:e6:6e:01:f2:9d:67:19:
03:dc:db:6c:7d:d3:d2:fc:83:58:bf:55:dc:3d:51:56:eb:61:
7b:c9:41:bb:9c:23:9f:5c:0a:c1:d2:d1:3a:ef:0f:c0:ec:79:
48:e7:cc:fa:eb:a0:99:16:b7:b1:ca:61:3d:54:61:f8:d9:7e:
4a:3f:50:d8:27:3f:51:21:c0:f9:d9:d7:4b:a7:5c:de:aa:41:
5f:44:1c:8d:90:0f:ed:0b:d4:72:c1:12:11:aa:95:44:dd:cd:
a6:f6:5d:f4:01:f3:7a:0e:39:9e:ed:1f:68:42:07:f7:17:f0:
66:17:4c:35:55:18:e2:ac:ca:97:cd:79:2c:6b:7f:b6:ce:45:
94:df:2c:77:b2:51:1f:d2:9d:1c:2f:40:d9:9a:60:c0:7b:be:
27:a4:74:49:8f:e7:8e:be:3a:18:73:35:86:43:63:c4:26:71:
19:15:7b:16:b5:e9:55:aa:1b:d1:d6:43:c7:8a:20:3f:a5:81:
32:4e:61:20:14:35:d0:b7:18:2a:7d:c8:f3:15:c9:a2:5a:9a:
57:e0:f5:cc:2e:03:9b:1d:d4:8f:2c:14:a6:78:63:23:0b:3c:
ef:ab:d5:78
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZO+/VByuTxOjJJNEt5pTjd+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MzkwMGY2NmU3MGIyZmZmZDljMGNlOTI2MDJmMmY0NWM2
NTk5NjEwHhcNMjQxMjEzMDc0ODEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGM2OTZlMGUwNzA0Yzc5NTk3ZWNhYWRkYjlkODNmZDFmYjYyMTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F+KdY/HZgNNz3o9s3ji1f8UfJdq
FDJi8UgzkwvfAQFMYLP4ySGhQl4JBblUn+cEMQzgl6tU58QyDR0cUQdfU3jbDOCQ
f6JBBKimCHMAk8/otbWRsnchDrIprUy4bSmwRKS6N+AWIuC4a86w69lLrw8FJ4iO
ezY1iIJN9BNlxHLavHDV5l/QgTfawUZuuk3TM87QLmWQ60i8kFNP2gPqxU0kqERd
Hu39eLNpuIaSzfnm9WM5Z9FK+iTqoNIAzYZRvC00RWqQ8x//HYxDw7m0miHDxRxr
PrMmZyBMPeYRSrg4bZl+J7kbZtWtQfwt9lckxMvO4Qcw32RobpVAxv4PcwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJDGluDgcEx5WX7Krdudg/0ftiGaMB8GA1UdIwQY
MBaAFJk5APZucLL//ZwM6SYC8vRcZZlhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVRrQTltNXdzdl85bkF6cEpnTHk5RnhsbVdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jMWNmNmYtNTRjZC00MzRhLTgzN2Qt
ZGVmNmVmYjQ0MzE5LzEva01hVzRPQndUSGxaZnNxdDI1MkRfUi0ySVpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9jMWNmNmYtNTRjZC00MzRhLTgzN2QtZGVmNmVmYjQ0MzE5
LzEvbVRrQTltNXdzdl85bkF6cEpnTHk5RnhsbVdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDV+3oAwQC
WezYMA0GCSqGSIb3DQEBCwUAA4IBAQBueiTc7JY1xXs5zt/hdNwrnqhfBf7hDwhY
qP+Hd+ZuAfKdZxkD3NtsfdPS/INYv1XcPVFW62F7yUG7nCOfXArB0tE67w/A7HlI
58z666CZFrexymE9VGH42X5KP1DYJz9RIcD52ddLp1zeqkFfRByNkA/tC9RywRIR
qpVE3c2m9l30AfN6Djme7R9oQgf3F/BmF0w1VRjirMqXzXksa3+2zkWU3yx3slEf
0p0cL0DZmmDAe74npHRJj+eOvjoYczWGQ2PEJnEZFXsWtelVqhvR1kPHiiA/pYEy
TmEgFDXQtxgqfcjzFcmiWppX4PXMLgObHdSPLBSmeGMjCzzvq9V4
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:11:18 2025 by rpki-client