Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/eVXogcfuAvieUy210SmtTXu3ZBU.roa
File: eVXogcfuAvieUy210SmtTXu3ZBU.roa (raw, json)
Hash identifier: oLHKCH8RE3AVWZzPaPEw+Cx+JAm5gE1y63XfZngVYFY=
Subject key identifier: 79:55:E8:81:C7:EE:02:F8:9E:53:2D:B5:D1:29:AD:4D:7B:B7:64:15
Certificate issuer: /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Certificate serial: 0193DF50A2CC4C223C4CCDB35CDE25DA6ED4
Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/eVXogcfuAvieUy210SmtTXu3ZBU.roa
Signing time: Thu 19 Dec 2024 14:27:03 +0000
ROA not before: Thu 19 Dec 2024 14:27:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213811
IP address blocks: 193.143.16.0/23 maxlen: 24
2a14:b000::/29 maxlen: 64
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:df:50:a2:cc:4c:22:3c:4c:cd:b3:5c:de:25:da:6e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Validity
Not Before: Dec 19 14:27:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7955e881c7ee02f89e532db5d129ad4d7bb76415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8d:4f:31:13:de:ad:9f:48:6d:08:a9:24:4c:
f1:f7:3f:b5:8c:d9:55:b4:77:e6:4b:51:b7:43:94:
47:bc:a9:9c:77:99:c2:73:80:81:2d:56:47:53:a5:
a4:56:e9:20:87:8b:4e:db:3c:fd:4f:3c:bd:6e:e7:
7b:0a:19:26:bc:51:9d:2d:91:ee:25:a2:4b:91:b5:
2c:1c:92:ea:3b:fb:e5:a2:4f:44:fc:5a:bc:30:b9:
fb:56:ec:91:2f:dc:e2:af:ef:0f:40:25:66:71:b8:
85:b6:4e:0f:11:0b:1f:91:77:a7:72:c8:da:19:0e:
7a:16:c0:30:c1:a8:1a:0a:92:da:6b:55:9f:10:f7:
f0:c3:37:53:37:38:56:1c:5c:cc:44:b1:3b:0a:4d:
40:b1:65:77:a8:61:97:90:c9:a6:11:93:28:26:6e:
5f:6f:4a:9e:7b:96:13:06:d7:03:5c:fd:3d:0b:d8:
5f:8c:60:e0:db:1b:02:69:bb:bb:fc:0b:d5:b3:bc:
98:d6:dd:a4:1a:bb:9d:ad:db:41:49:ba:8d:04:bf:
28:3f:01:27:bf:bf:8e:35:97:6f:a9:f0:ae:bf:3b:
e0:0e:35:14:33:03:15:1d:9f:62:98:76:8a:5c:4f:
92:c8:87:93:af:95:07:5c:84:dd:39:bd:c4:92:d2:
41:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:55:E8:81:C7:EE:02:F8:9E:53:2D:B5:D1:29:AD:4D:7B:B7:64:15
X509v3 Authority Key Identifier:
keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/eVXogcfuAvieUy210SmtTXu3ZBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.16.0/23
IPv6:
2a14:b000::/29
Signature Algorithm: sha256WithRSAEncryption
4a:1c:ad:b0:7d:62:83:e9:72:20:bb:5e:58:9e:5b:91:ae:5e:
76:df:49:f8:7e:21:e3:4c:b8:43:65:ac:80:ec:01:3f:c1:52:
78:71:47:93:73:82:34:81:7e:d7:c7:8c:6b:fb:d7:ca:b1:5f:
ee:1c:54:f7:82:9d:db:b9:2d:89:ad:a3:1d:1f:ab:dc:c9:d5:
34:c9:14:35:c8:e4:a9:c9:a8:3d:47:4c:c2:c7:cb:de:8a:77:
37:e9:b0:a1:25:6c:40:dc:2c:5f:2b:8a:b5:e4:d6:18:9d:c4:
d4:22:ae:95:e7:d3:f2:70:dc:ab:e5:66:04:6a:4b:81:f7:5e:
19:c9:7d:7d:1d:d3:38:c7:85:b5:52:63:61:4b:a5:8c:13:7d:
e6:58:f0:91:b8:20:bf:08:74:69:bb:b3:a1:c2:ec:fd:82:80:
0b:d9:07:b7:ec:fe:19:f3:5f:a7:e6:93:f6:46:6c:b3:f8:08:
18:19:cb:a4:13:53:c3:43:17:7a:ed:49:0d:84:d2:a3:35:80:
af:f5:0e:eb:0f:93:eb:19:4a:5d:70:23:76:c9:93:b9:14:44:
20:3c:e4:63:2e:9e:73:68:7c:96:4d:2e:0e:7b:29:7c:70:0c:
64:70:d1:63:0a:ae:40:d4:1d:d7:13:bb:44:a5:2a:9c:e2:e5:
4d:98:89:39
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZPfUKLMTCI8TM2zXN4l2m7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1OGUwYzNiOTMzM2NiNmZkNDEzOWU0NTVhNWFiYmFmZDU2
OTUzMmEwHhcNMjQxMjE5MTQyNzAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTU1ZTg4MWM3ZWUwMmY4OWU1MzJkYjVkMTI5YWQ0ZDdiYjc2NDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA741PMRPerZ9IbQipJEzx9z+1jNlV
tHfmS1G3Q5RHvKmcd5nCc4CBLVZHU6WkVukgh4tO2zz9Tzy9bud7ChkmvFGdLZHu
JaJLkbUsHJLqO/vlok9E/Fq8MLn7VuyRL9zir+8PQCVmcbiFtk4PEQsfkXencsja
GQ56FsAwwagaCpLaa1WfEPfwwzdTNzhWHFzMRLE7Ck1AsWV3qGGXkMmmEZMoJm5f
b0qee5YTBtcDXP09C9hfjGDg2xsCabu7/AvVs7yY1t2kGrudrdtBSbqNBL8oPwEn
v7+ONZdvqfCuvzvgDjUUMwMVHZ9imHaKXE+SyIeTr5UHXITdOb3EktJBxwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHlV6IHH7gL4nlMttdEprU17t2QVMB8GA1UdIwQY
MBaAFPWODDuTM8tv1BOeRVpau6/VaVMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVk0TU81TXp5Ml9VRTU1RldscTdyOVZwVXlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMWNhNTEtNzVkZC00MWM5LTk0ODQt
MmJjMWFlM2RiZGJlLzEvZVZYb2djZnVBdmllVXkyMTBTbXRUWHUzWkJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9iMWNhNTEtNzVkZC00MWM5LTk0ODQtMmJjMWFlM2RiZGJl
LzEvOVk0TU81TXp5Ml9VRTU1RldscTdyOVZwVXlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBwY8QMA0E
AgACMAcDBQMqFLAAMA0GCSqGSIb3DQEBCwUAA4IBAQBKHK2wfWKD6XIgu15YnluR
rl5230n4fiHjTLhDZayA7AE/wVJ4cUeTc4I0gX7Xx4xr+9fKsV/uHFT3gp3buS2J
raMdH6vcydU0yRQ1yOSpyag9R0zCx8veinc36bChJWxA3CxfK4q15NYYncTUIq6V
59PycNyr5WYEakuB914ZyX19HdM4x4W1UmNhS6WME33mWPCRuCC/CHRpu7Ohwuz9
goAL2Qe37P4Z81+n5pP2Rmyz+AgYGcukE1PDQxd67UkNhNKjNYCv9Q7rD5PrGUpd
cCN2yZO5FEQgPORjLp5zaHyWTS4Oeyl8cAxkcNFjCq5A1B3XE7tEpSqc4uVNmIk5
-----END CERTIFICATE-----
Generated at Wed Apr 23 09:15:33 2025 by rpki-client