Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/keb0S-AroE8YMFufQPTELujKvYY.roa
File: keb0S-AroE8YMFufQPTELujKvYY.roa (raw, json)
Hash identifier: AfsRGNay0F6iYYbiMlHXu5TIvnzoWdnodIYz41SB6zo=
Subject key identifier: 91:E6:F4:4B:E0:2B:A0:4F:18:30:5B:9F:40:F4:C4:2E:E8:CA:BD:86
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019396585018F58B1D7A38A2F789016A24B5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/keb0S-AroE8YMFufQPTELujKvYY.roa
Signing time: Thu 05 Dec 2024 10:23:10 +0000
ROA not before: Thu 05 Dec 2024 10:23:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33480
IP address blocks: 193.58.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:96:58:50:18:f5:8b:1d:7a:38:a2:f7:89:01:6a:24:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 5 10:23:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91e6f44be02ba04f18305b9f40f4c42ee8cabd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:2e:2b:c6:58:f1:6a:47:2a:93:4f:ec:5c:
37:a7:7e:32:ec:96:db:1f:3c:65:74:7c:77:89:5c:
a6:14:c6:a1:4d:51:7f:93:2a:b8:6d:ef:e9:f1:d1:
88:1f:46:15:79:9e:5a:ab:a3:45:6c:68:6f:21:e6:
50:41:bb:a6:5a:d9:16:48:20:cc:5b:1c:c8:74:1a:
9d:b9:10:c8:c3:e1:28:45:ef:f8:e4:d2:15:4f:fc:
07:3f:8f:df:7c:c6:83:94:4d:b3:fd:42:54:85:fa:
b0:78:e0:c9:05:44:3c:a3:66:78:0b:6e:89:74:ff:
d9:f0:31:83:7d:2d:36:d0:8d:8d:16:ff:13:c7:92:
c6:74:32:d4:9a:6f:46:f7:9a:43:56:4f:58:f1:26:
98:a9:1b:26:31:d3:aa:81:94:10:ad:73:ac:29:b9:
c7:8d:04:63:db:01:a1:9d:28:66:fd:8f:58:c1:a4:
97:3e:f5:52:be:34:75:b0:82:09:4a:21:98:e6:7d:
20:d6:0f:55:be:4d:49:b9:83:e1:a6:b2:9d:41:72:
18:ad:83:fd:dc:b1:fb:b2:3c:cc:69:a7:f1:2c:c3:
36:ce:02:55:fa:be:32:e7:9e:07:22:b4:ee:41:a4:
09:47:a3:56:bf:0a:a1:43:31:87:4f:22:6f:71:e4:
46:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E6:F4:4B:E0:2B:A0:4F:18:30:5B:9F:40:F4:C4:2E:E8:CA:BD:86
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/keb0S-AroE8YMFufQPTELujKvYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.123.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:8a:1a:e5:a7:b7:c5:96:29:5b:69:53:ec:28:18:92:f6:53:
b0:55:ba:39:4a:4c:bc:f6:d2:a4:69:7d:06:c0:64:bc:37:89:
5d:f4:e5:83:6d:c0:55:82:64:52:4b:ce:27:19:21:58:69:46:
d1:dc:ef:9e:a8:94:c1:4c:c4:94:2a:c1:b0:c3:c6:90:9b:37:
29:4a:90:82:6d:fc:64:fd:09:79:18:d9:96:c2:72:7e:db:10:
d1:97:01:65:d4:4f:0c:77:cc:12:9e:fa:3f:2b:ed:ff:7c:19:
ef:8b:b9:dd:a7:3d:e4:ee:5c:65:36:f0:b2:3a:93:c1:e2:d2:
e4:3e:83:57:ef:7b:8b:89:dc:5e:d5:af:8d:6d:05:c8:c1:cc:
57:48:fe:d6:5d:c7:b7:f7:5e:13:90:e1:00:89:00:f8:de:d8:
2c:88:75:b8:aa:89:4e:1a:31:b3:e7:bd:6b:7b:46:73:aa:4c:
d7:9e:a6:f6:17:ab:e8:e6:67:f0:29:c8:82:71:ec:20:93:bf:
8d:37:1f:b8:ad:8c:ac:68:f9:1e:3a:05:11:3e:61:1a:77:34:
e4:0a:6d:30:7c:57:5f:1c:40:d4:1a:ef:97:86:ed:02:12:37:
34:ff:15:89:f2:ae:16:11:60:b7:fc:cb:d7:d6:9a:f6:f2:ce:
ec:83:ce:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOWWFAY9Ysdejii94kBaiS1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMjA1MTAyMzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWU2ZjQ0YmUwMmJhMDRmMTgzMDViOWY0MGY0YzQyZWU4Y2FiZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSouK8ZY8WpHKpNP7Fw3p34y7Jbb
HzxldHx3iVymFMahTVF/kyq4be/p8dGIH0YVeZ5aq6NFbGhvIeZQQbumWtkWSCDM
WxzIdBqduRDIw+EoRe/45NIVT/wHP4/ffMaDlE2z/UJUhfqweODJBUQ8o2Z4C26J
dP/Z8DGDfS020I2NFv8Tx5LGdDLUmm9G95pDVk9Y8SaYqRsmMdOqgZQQrXOsKbnH
jQRj2wGhnShm/Y9YwaSXPvVSvjR1sIIJSiGY5n0g1g9Vvk1JuYPhprKdQXIYrYP9
3LH7sjzMaafxLMM2zgJV+r4y554HIrTuQaQJR6NWvwqhQzGHTyJvceRGiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJHm9EvgK6BPGDBbn0D0xC7oyr2GMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEva2ViMFMtQXJvRThZTUZ1ZlFQVEVMdWpLdllZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTp7MA0G
CSqGSIb3DQEBCwUAA4IBAQCMihrlp7fFlilbaVPsKBiS9lOwVbo5Sky89tKkaX0G
wGS8N4ld9OWDbcBVgmRSS84nGSFYaUbR3O+eqJTBTMSUKsGww8aQmzcpSpCCbfxk
/Ql5GNmWwnJ+2xDRlwFl1E8Md8wSnvo/K+3/fBnvi7ndpz3k7lxlNvCyOpPB4tLk
PoNX73uLidxe1a+NbQXIwcxXSP7WXce3914TkOEAiQD43tgsiHW4qolOGjGz571r
e0ZzqkzXnqb2F6vo5mfwKciCcewgk7+NNx+4rYysaPkeOgURPmEadzTkCm0wfFdf
HEDUGu+Xhu0CEjc0/xWJ8q4WEWC3/MvX1pr28s7sg84u
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:33:17 2025 by rpki-client