Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2Q7v6sCdn8XCGLLvDjNR5tYaM-c.roa
File: 2Q7v6sCdn8XCGLLvDjNR5tYaM-c.roa (raw, json)
Hash identifier: UCNkJBbPRH4yJ6v8J3/dXaVrFdnILfsCKAdDb0HfXjk=
Subject key identifier: D9:0E:EF:EA:C0:9D:9F:C5:C2:18:B2:EF:0E:33:51:E6:D6:1A:33:E7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282482E6A0E0C35E0DB19A975D0C9351
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2Q7v6sCdn8XCGLLvDjNR5tYaM-c.roa
Signing time: Thu 02 Jan 2025 17:51:08 +0000
ROA not before: Thu 02 Jan 2025 17:51:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48090
IP address blocks: 195.178.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:82:e6:a0:e0:c3:5e:0d:b1:9a:97:5d:0c:93:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d90eefeac09d9fc5c218b2ef0e3351e6d61a33e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:da:5e:83:bf:7f:99:57:98:73:bc:52:dc:8b:
2e:25:f0:a4:c9:8b:6f:07:18:b3:b4:99:c7:ba:fd:
67:91:ca:eb:a4:a6:f7:b1:29:f9:31:fb:8c:44:51:
ec:5b:ce:6f:0f:64:97:87:61:5d:37:68:87:2a:9a:
6c:a0:fa:14:64:97:f1:1e:e6:87:bf:8a:ea:52:60:
c7:42:03:06:ce:6e:c0:04:c5:13:84:0b:2d:21:8a:
af:54:33:3c:e4:aa:30:1c:bd:f9:8d:2a:b3:e7:a5:
01:3f:b5:72:f7:7b:76:81:59:36:5e:7a:93:06:d6:
05:03:71:a1:9f:82:27:be:b6:96:a0:f9:48:e6:43:
86:4e:8e:27:08:05:ae:71:3c:86:f5:71:32:0a:fa:
ef:5f:21:83:46:45:a5:d8:dd:07:33:34:21:bc:3f:
89:2a:ff:e5:b8:2a:99:b6:72:ea:c6:0e:b2:32:33:
83:28:c2:e9:63:e9:5f:9b:38:d6:67:f0:7d:29:cf:
f2:bc:fc:7e:1a:b6:f1:34:46:e0:7d:1c:64:99:80:
e8:28:c0:6c:b6:7d:7e:d9:17:27:ff:66:d9:a9:3d:
9b:b9:8d:6b:df:4c:59:a8:51:02:7d:b5:db:84:ac:
3d:fd:44:34:8b:6e:f6:0c:3a:76:66:a3:24:14:e1:
9e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0E:EF:EA:C0:9D:9F:C5:C2:18:B2:EF:0E:33:51:E6:D6:1A:33:E7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2Q7v6sCdn8XCGLLvDjNR5tYaM-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.110.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:9d:e8:7d:6f:1e:37:35:d4:fa:1b:c5:90:11:35:b5:ab:ec:
82:46:e3:e8:dc:05:97:0a:75:80:61:f3:e2:cf:3a:41:c7:48:
0a:bc:eb:d0:a1:84:1d:36:c5:4d:5f:5b:ac:b5:eb:5a:73:7e:
bb:98:fe:94:96:49:54:14:f7:2f:d0:87:6c:b1:7e:35:e1:df:
23:b9:13:29:8e:d4:47:48:bd:63:4e:27:5d:b2:39:d8:48:81:
d7:93:51:a2:13:4e:0d:78:32:ba:37:5f:ef:e5:65:bd:81:f3:
3c:3b:79:1e:89:7c:ba:d5:00:5e:03:56:29:01:43:08:3f:de:
29:08:4a:69:cc:70:f8:1d:9b:41:14:ec:a9:25:54:48:fc:b9:
7a:4b:be:b3:0e:b7:90:d0:a7:14:57:f4:0e:9a:1a:37:e7:82:
47:7c:60:4e:03:21:2b:30:92:a0:5f:dc:a4:bc:88:b9:1a:a1:
e4:42:86:55:8f:06:e9:33:f4:0f:9e:66:69:ba:6f:d0:f8:8c:
57:bc:cc:35:35:b6:44:92:94:7e:93:23:cb:38:96:f7:67:d0:
fc:1a:43:01:cc:b3:94:6d:b6:f5:2a:78:20:e6:e3:09:c0:ef:
74:16:33:81:3a:b1:f6:c3:b5:7d:af:6a:44:3a:67:e4:4b:b5:
5c:82:db:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJILmoODDXg2xmpddDJNRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTBlZWZlYWMwOWQ5ZmM1YzIxOGIyZWYwZTMzNTFlNmQ2MWEzM2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19peg79/mVeYc7xS3IsuJfCkyYtv
BxiztJnHuv1nkcrrpKb3sSn5MfuMRFHsW85vD2SXh2FdN2iHKppsoPoUZJfxHuaH
v4rqUmDHQgMGzm7ABMUThAstIYqvVDM85KowHL35jSqz56UBP7Vy93t2gVk2XnqT
BtYFA3Ghn4InvraWoPlI5kOGTo4nCAWucTyG9XEyCvrvXyGDRkWl2N0HMzQhvD+J
Kv/luCqZtnLqxg6yMjODKMLpY+lfmzjWZ/B9Kc/yvPx+GrbxNEbgfRxkmYDoKMBs
tn1+2Rcn/2bZqT2buY1r30xZqFECfbXbhKw9/UQ0i272DDp2ZqMkFOGe/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNkO7+rAnZ/Fwhiy7w4zUebWGjPnMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvMlE3djZzQ2RuOFhDR0xMdkRqTlI1dFlhTS1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7JuMA0G
CSqGSIb3DQEBCwUAA4IBAQCeneh9bx43NdT6G8WQETW1q+yCRuPo3AWXCnWAYfPi
zzpBx0gKvOvQoYQdNsVNX1ustetac367mP6UlklUFPcv0IdssX414d8juRMpjtRH
SL1jTiddsjnYSIHXk1GiE04NeDK6N1/v5WW9gfM8O3keiXy61QBeA1YpAUMIP94p
CEppzHD4HZtBFOypJVRI/Ll6S76zDreQ0KcUV/QOmho354JHfGBOAyErMJKgX9yk
vIi5GqHkQoZVjwbpM/QPnmZpum/Q+IxXvMw1NbZEkpR+kyPLOJb3Z9D8GkMBzLOU
bbb1Kngg5uMJwO90FjOBOrH2w7V9r2pEOmfkS7Vcgtsh
-----END CERTIFICATE-----
Generated at Wed Apr 16 19:19:47 2025 by rpki-client