Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/_d9smzzXoHuY5itAHDWwyUyesI8.roa
File: _d9smzzXoHuY5itAHDWwyUyesI8.roa (raw, json)
Hash identifier: T16Cl/LmQwwbTsk3JSBXpOIZFlY1ddG0Febso5rLPIc=
Subject key identifier: FD:DF:6C:9B:3C:D7:A0:7B:98:E6:2B:40:1C:35:B0:C9:4C:9E:B0:8F
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CC86F92BFFAABFA41535CB6999608D584
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/_d9smzzXoHuY5itAHDWwyUyesI8.roa
Signing time: Tue 02 Jan 2024 04:30:04 +0000
ROA not before: Tue 02 Jan 2024 04:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48546
IP address blocks: 87.110.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:92:bf:fa:ab:fa:41:53:5c:b6:99:96:08:d5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 04:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fddf6c9b3cd7a07b98e62b401c35b0c94c9eb08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:97:2a:c9:67:02:bf:87:da:67:2b:e5:00:
81:43:b0:53:de:6e:01:f9:e1:1f:6e:04:9e:12:72:
2a:74:d1:11:20:01:e0:6e:16:52:89:c5:d5:48:2a:
19:09:2c:64:11:2d:35:f2:67:33:68:c5:bb:2a:d7:
bc:ec:55:f9:3a:a1:4a:a3:ec:0f:92:0d:f7:04:5f:
05:06:86:58:13:ea:63:8d:3d:8d:92:42:ec:bf:be:
79:d9:8d:9a:6a:2e:65:c7:1d:2d:b7:ff:fc:74:f9:
d1:4f:4f:c5:05:e6:24:80:31:dd:8a:b0:79:84:b4:
dd:e5:00:2e:41:78:3b:74:d0:5b:e1:d8:56:3c:95:
60:08:86:7a:35:8e:b8:d9:8e:a2:d6:87:86:88:c5:
aa:57:9f:e9:57:c0:17:da:fb:0a:d3:f8:30:d1:ef:
7b:41:ae:9d:cc:e8:d6:a1:8a:14:7e:9e:71:22:c8:
87:57:fb:45:d0:c1:07:12:1a:5d:fb:f1:37:57:b6:
06:42:b4:31:01:ec:9d:e8:1f:b1:0c:f2:f9:df:7a:
18:93:38:6b:51:ec:e2:86:d8:b9:28:b6:1d:a7:c7:
e9:49:b7:aa:22:5f:5d:55:d5:47:87:fe:c7:81:25:
1d:3b:9a:f3:d6:ed:e3:6c:ac:45:fd:0a:7b:b1:56:
7c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DF:6C:9B:3C:D7:A0:7B:98:E6:2B:40:1C:35:B0:C9:4C:9E:B0:8F
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/_d9smzzXoHuY5itAHDWwyUyesI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.110.211.0/24
Signature Algorithm: sha256WithRSAEncryption
19:49:19:08:a8:5d:d7:d8:1b:1c:fd:7f:73:66:97:e1:fa:ce:
3b:76:e1:65:c5:25:fd:89:ac:66:7f:8f:d4:48:51:9d:8c:95:
a3:e7:7a:5b:ac:0b:9a:5b:7c:05:7c:01:67:74:6c:79:54:4c:
cd:c9:12:1f:85:d5:e0:0b:c9:a6:19:1a:98:c4:ed:72:58:dd:
2c:16:52:c5:e3:6f:34:01:ce:58:a2:92:f4:93:d8:fd:3c:90:
c8:0c:ee:c9:32:f2:7d:14:ff:ca:97:0a:28:52:7a:54:ee:2c:
86:c6:46:a4:6d:52:b6:14:c1:cf:ef:e1:31:de:36:5b:b5:81:
27:55:b6:95:cc:a6:98:a5:b7:28:9c:3e:9a:79:3f:4a:d8:7c:
f9:d6:9a:d2:8e:14:45:83:af:f0:5f:1f:d6:69:ff:11:dd:d6:
0f:68:c3:06:5f:96:9f:a4:4f:f7:30:41:70:f0:61:9c:89:27:
30:53:ee:c3:a1:e9:39:e8:ad:f3:93:51:12:ce:e8:ac:04:e7:
b9:ca:38:49:66:7e:ed:50:57:43:ad:96:51:e8:0a:ce:be:5b:
20:89:76:66:66:4c:ea:79:b0:4d:2c:d4:b9:91:3b:73:b5:47:
f5:bf:5f:04:15:24:7a:a1:fb:a1:50:a7:96:18:40:63:f8:8e:
dd:35:a5:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb5K/+qv6QVNctpmWCNWEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl
NjE0OTEwHhcNMjQwMTAyMDQzMDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGRmNmM5YjNjZDdhMDdiOThlNjJiNDAxYzM1YjBjOTRjOWViMDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCaXKslnAr+H2mcr5QCBQ7BT3m4B
+eEfbgSeEnIqdNERIAHgbhZSicXVSCoZCSxkES018mczaMW7Kte87FX5OqFKo+wP
kg33BF8FBoZYE+pjjT2NkkLsv7552Y2aai5lxx0tt//8dPnRT0/FBeYkgDHdirB5
hLTd5QAuQXg7dNBb4dhWPJVgCIZ6NY642Y6i1oeGiMWqV5/pV8AX2vsK0/gw0e97
Qa6dzOjWoYoUfp5xIsiHV/tF0MEHEhpd+/E3V7YGQrQxAeyd6B+xDPL533oYkzhr
Uezihti5KLYdp8fpSbeqIl9dVdVHh/7HgSUdO5rz1u3jbKxF/Qp7sVZ8PwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP3fbJs816B7mOYrQBw1sMlMnrCPMB8GA1UdIwQY
MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt
ZDRlZTFkMzg5ZTBkLzEvX2Q5c216elhvSHVZNWl0QUhEV3d5VXllc0k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk
LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV27TMA0G
CSqGSIb3DQEBCwUAA4IBAQAZSRkIqF3X2Bsc/X9zZpfh+s47duFlxSX9iaxmf4/U
SFGdjJWj53pbrAuaW3wFfAFndGx5VEzNyRIfhdXgC8mmGRqYxO1yWN0sFlLF4280
Ac5YopL0k9j9PJDIDO7JMvJ9FP/KlwooUnpU7iyGxkakbVK2FMHP7+Ex3jZbtYEn
VbaVzKaYpbconD6aeT9K2Hz51prSjhRFg6/wXx/Waf8R3dYPaMMGX5afpE/3MEFw
8GGciScwU+7Doek56K3zk1ESzuisBOe5yjhJZn7tUFdDrZZR6ArOvlsgiXZmZkzq
ebBNLNS5kTtztUf1v18EFSR6ofuhUKeWGEBj+I7dNaVT
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:51:11 2025 by rpki-client