Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gEecKIny0vyb9C2JrL0TIRDJ2DA.roa
File: gEecKIny0vyb9C2JrL0TIRDJ2DA.roa (raw, json)
Hash identifier: 56+en6on+LWS8cOupf71BItlz7dn4j9BVxq72nWAyhI=
Subject key identifier: 80:47:9C:28:89:F2:D2:FC:9B:F4:2D:89:AC:BD:13:21:10:C9:D8:30
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824C6059938ADF0F63F2A3CF3EE1867
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gEecKIny0vyb9C2JrL0TIRDJ2DA.roa
Signing time: Thu 02 Jan 2025 17:51:25 +0000
ROA not before: Thu 02 Jan 2025 17:51:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214417
IP address blocks: 176.125.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Jan 2025 06:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:c6:05:99:38:ad:f0:f6:3f:2a:3c:f3:ee:18:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80479c2889f2d2fc9bf42d89acbd132110c9d830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:19:d6:e9:dd:ef:9e:67:8f:7e:65:c2:22:57:
7d:32:b2:43:ec:97:cc:76:11:58:f1:42:45:85:f3:
23:92:98:2c:7a:94:4c:39:51:66:18:c7:79:d4:2a:
95:8b:81:82:a9:d5:03:1d:e7:b7:d6:0e:70:5e:93:
0b:00:4f:47:48:c5:81:de:e9:d1:d3:3b:1d:b6:18:
6f:68:61:da:75:2b:50:30:7f:c9:a3:b8:50:55:4f:
1d:c0:06:87:04:c3:3a:70:8c:b0:18:d4:3a:6c:96:
f4:a2:55:71:13:ea:b5:29:fe:a7:0f:a9:de:0c:6c:
e7:59:b6:cf:ad:0a:46:1d:29:0b:ec:06:f9:57:48:
c3:db:03:c4:4f:56:3b:0d:12:a1:f2:43:e1:8e:e4:
f3:16:98:ad:cf:f5:26:94:76:2c:6a:bc:0d:f3:39:
11:70:8a:04:e6:90:90:b9:34:e9:69:31:29:f8:bc:
f6:2d:08:81:1d:32:d8:1a:df:7b:47:ec:f5:82:3f:
4f:51:05:07:68:5d:65:0e:8e:28:fa:da:ff:78:b0:
34:7b:94:db:dd:f2:67:e8:24:af:9f:2f:82:f9:eb:
49:e9:9f:50:8e:91:ee:40:95:af:ce:4a:18:90:c3:
a7:f2:0e:77:b3:0a:03:fd:42:c5:04:aa:b9:56:4e:
14:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:47:9C:28:89:F2:D2:FC:9B:F4:2D:89:AC:BD:13:21:10:C9:D8:30
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gEecKIny0vyb9C2JrL0TIRDJ2DA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.254.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:c3:41:7a:74:c1:c6:67:60:31:4d:3b:22:5d:4d:20:f8:c9:
41:c2:cb:35:ca:c9:69:60:40:fe:47:d5:cf:04:cd:15:47:ee:
b1:66:9b:59:06:6c:2f:04:02:92:14:58:3d:8b:1a:74:da:ae:
bc:65:28:1b:ea:1e:a2:06:3a:11:7d:a7:a5:15:b2:57:6a:ef:
3d:e7:91:7a:47:b5:7f:8d:13:72:25:85:5e:31:f2:2d:1b:fb:
19:16:e8:be:58:d3:e0:1d:d9:60:b0:62:f5:a1:20:e1:47:ea:
2f:52:b1:e4:b6:a3:f5:3d:58:0c:d1:3f:d4:a9:ba:65:19:97:
1d:c0:b9:ca:60:ec:99:45:11:e4:ae:fe:0e:10:92:e9:0e:6c:
79:b3:58:b5:6a:16:52:d4:08:fb:af:67:ca:f1:91:fe:59:c2:
73:e8:7c:2f:35:32:21:39:1d:8f:53:3d:6d:96:2f:a7:cd:2e:
58:86:b5:3a:93:6f:a6:16:60:d7:04:b0:61:0e:60:2a:4c:83:
66:d9:92:35:27:3f:df:95:cd:61:1b:1d:ad:29:b0:2c:ad:e7:
a9:69:68:29:03:54:c8:42:63:29:48:97:57:56:00:78:6c:5f:
85:cc:7d:26:ba:f0:81:71:36:8b:5a:a6:80:0a:87:9c:46:4b:
27:5f:ef:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJMYFmTit8PY/Kjzz7hhnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDQ3OWMyODg5ZjJkMmZjOWJmNDJkODlhY2JkMTMyMTEwYzlkODMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRnW6d3vnmePfmXCIld9MrJD7JfM
dhFY8UJFhfMjkpgsepRMOVFmGMd51CqVi4GCqdUDHee31g5wXpMLAE9HSMWB3unR
0zsdthhvaGHadStQMH/Jo7hQVU8dwAaHBMM6cIywGNQ6bJb0olVxE+q1Kf6nD6ne
DGznWbbPrQpGHSkL7Ab5V0jD2wPET1Y7DRKh8kPhjuTzFpitz/UmlHYsarwN8zkR
cIoE5pCQuTTpaTEp+Lz2LQiBHTLYGt97R+z1gj9PUQUHaF1lDo4o+tr/eLA0e5Tb
3fJn6CSvny+C+etJ6Z9QjpHuQJWvzkoYkMOn8g53swoD/ULFBKq5Vk4ULwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIBHnCiJ8tL8m/Qtiay9EyEQydgwMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvZ0VlY0tJbnkwdnliOUMySnJMMFRJUkRKMkRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsH3+MA0G
CSqGSIb3DQEBCwUAA4IBAQAvw0F6dMHGZ2AxTTsiXU0g+MlBwss1yslpYED+R9XP
BM0VR+6xZptZBmwvBAKSFFg9ixp02q68ZSgb6h6iBjoRfaelFbJXau8955F6R7V/
jRNyJYVeMfItG/sZFui+WNPgHdlgsGL1oSDhR+ovUrHktqP1PVgM0T/UqbplGZcd
wLnKYOyZRRHkrv4OEJLpDmx5s1i1ahZS1Aj7r2fK8ZH+WcJz6HwvNTIhOR2PUz1t
li+nzS5YhrU6k2+mFmDXBLBhDmAqTINm2ZI1Jz/flc1hGx2tKbAsreepaWgpA1TI
QmMpSJdXVgB4bF+FzH0muvCBcTaLWqaACoecRksnX+/7
-----END CERTIFICATE-----
Generated at Wed Apr 16 19:22:09 2025 by rpki-client