Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PgZZwwAfcTy6g3SeuZtZxHMBw9Q.roa
File: PgZZwwAfcTy6g3SeuZtZxHMBw9Q.roa (raw, json)
Hash identifier: NJUUBdDRQnG55xmUm9ctt2YfLcBSkBfSf/QSJxuuMm0=
Subject key identifier: 3E:06:59:C3:00:1F:71:3C:BA:83:74:9E:B9:9B:59:C4:73:01:C3:D4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193E349CAD0A250DBD3AE442B011356A63E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PgZZwwAfcTy6g3SeuZtZxHMBw9Q.roa
Signing time: Fri 20 Dec 2024 08:58:04 +0000
ROA not before: Fri 20 Dec 2024 08:58:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201814
IP address blocks: 194.180.48.0/24 maxlen: 24
194.180.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:49:ca:d0:a2:50:db:d3:ae:44:2b:01:13:56:a6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 20 08:58:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e0659c3001f713cba83749eb99b59c47301c3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c1:35:38:85:d2:e9:0f:3a:a9:d3:a0:58:0a:
e6:a2:27:04:30:4a:18:96:08:a5:05:d5:15:73:d6:
da:38:d3:0c:ad:ec:c4:d3:fa:97:b4:14:f7:15:48:
c9:b8:55:bd:86:f7:c2:3e:7f:87:8a:b1:5e:00:81:
5d:83:2b:dc:22:e8:17:ed:12:82:f3:af:fc:93:c8:
c7:38:48:90:1d:7f:53:90:e4:2e:23:0e:c5:af:29:
78:fe:b4:84:f4:85:59:56:83:42:31:64:5a:92:85:
54:60:a9:82:f6:82:e2:11:de:53:01:4f:c3:1c:bc:
25:d7:f3:4c:ad:81:dc:19:c3:47:29:45:0f:30:33:
5f:31:f3:b9:46:f1:86:8c:55:ce:df:dc:a0:d9:eb:
fa:8d:79:e3:5b:af:8a:47:68:28:b2:55:2e:1b:ee:
93:33:05:1e:af:5d:ee:33:ff:2f:93:3e:28:4d:f9:
8d:44:97:38:37:59:fe:bc:58:08:4a:e3:5e:32:d7:
7c:63:f6:a6:04:5a:86:a2:62:23:46:35:6f:b8:08:
04:60:a0:68:7c:6a:50:d8:39:b8:0a:4e:b9:e2:92:
46:f5:15:d1:8c:71:01:82:db:e1:52:7e:17:2a:fb:
6d:3d:03:2b:8b:80:ba:e8:e0:7f:3a:c7:f7:e6:bb:
bb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:06:59:C3:00:1F:71:3C:BA:83:74:9E:B9:9B:59:C4:73:01:C3:D4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PgZZwwAfcTy6g3SeuZtZxHMBw9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.48.0/23
Signature Algorithm: sha256WithRSAEncryption
66:fc:54:80:f3:c2:49:d2:39:25:b2:f6:2e:1f:16:68:7b:fe:
01:95:86:2d:58:39:23:eb:7e:00:64:70:3e:94:bb:8c:fd:32:
a2:79:28:80:c1:ef:ad:b8:70:4c:65:bc:17:6d:88:20:fd:a4:
f7:11:aa:ce:43:34:2b:23:09:4a:89:c0:45:23:71:b7:4f:5e:
10:69:16:70:aa:54:0f:73:af:5a:53:f0:32:25:45:a1:3c:16:
7a:f4:b6:54:88:28:78:a6:93:1a:b1:f1:e2:70:57:1e:0d:d8:
6f:d5:47:2e:21:86:fe:51:ac:a1:ee:f7:5b:75:5d:fb:55:d5:
d8:3d:e1:7f:39:c4:63:30:5b:d8:05:50:15:c0:1b:0d:02:9a:
97:74:e5:f8:b0:9f:18:ac:84:31:10:06:85:d0:b3:eb:12:f5:
c3:39:45:20:59:69:9a:93:03:e3:51:88:34:7c:c7:a0:74:18:
da:2f:4a:d4:15:df:d1:06:65:f4:b5:77:08:de:0f:12:1f:bf:
79:5c:8c:19:47:5c:b8:fe:a6:e7:a0:52:27:a7:c5:13:48:fc:
83:59:7a:da:96:50:33:fc:31:ac:1c:09:d4:64:f3:6a:83:bd:
8f:ef:ca:8d:2b:02:13:5b:10:c7:13:4b:2f:dd:dd:3f:d6:24:
dc:8c:2d:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPjScrQolDb065EKwETVqY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMjIwMDg1ODA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTA2NTljMzAwMWY3MTNjYmE4Mzc0OWViOTliNTljNDczMDFjM2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8E1OIXS6Q86qdOgWArmoicEMEoY
lgilBdUVc9baONMMrezE0/qXtBT3FUjJuFW9hvfCPn+HirFeAIFdgyvcIugX7RKC
86/8k8jHOEiQHX9TkOQuIw7Fryl4/rSE9IVZVoNCMWRakoVUYKmC9oLiEd5TAU/D
HLwl1/NMrYHcGcNHKUUPMDNfMfO5RvGGjFXO39yg2ev6jXnjW6+KR2goslUuG+6T
MwUer13uM/8vkz4oTfmNRJc4N1n+vFgISuNeMtd8Y/amBFqGomIjRjVvuAgEYKBo
fGpQ2Dm4Ck654pJG9RXRjHEBgtvhUn4XKvttPQMri4C66OB/Osf35ru7gwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD4GWcMAH3E8uoN0nrmbWcRzAcPUMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvUGdaWnd3QWZjVHk2ZzNTZXVadFp4SE1CdzlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwrQwMA0G
CSqGSIb3DQEBCwUAA4IBAQBm/FSA88JJ0jklsvYuHxZoe/4BlYYtWDkj634AZHA+
lLuM/TKieSiAwe+tuHBMZbwXbYgg/aT3EarOQzQrIwlKicBFI3G3T14QaRZwqlQP
c69aU/AyJUWhPBZ69LZUiCh4ppMasfHicFceDdhv1UcuIYb+Uayh7vdbdV37VdXY
PeF/OcRjMFvYBVAVwBsNApqXdOX4sJ8YrIQxEAaF0LPrEvXDOUUgWWmakwPjUYg0
fMegdBjaL0rUFd/RBmX0tXcI3g8SH795XIwZR1y4/qbnoFInp8UTSPyDWXrallAz
/DGsHAnUZPNqg72P78qNKwITWxDHE0sv3d0/1iTcjC3L
-----END CERTIFICATE-----
Generated at Thu Apr 17 10:40:56 2025 by rpki-client