Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vJRB5mG8QKFg4w4LcequBiZB4V0.roa
File: vJRB5mG8QKFg4w4LcequBiZB4V0.roa (raw, json)
Hash identifier: t0VJ9MFYvnC9EQ//YJxoYc+HP4EYuLhgusFxBO7X3tg=
Subject key identifier: BC:94:41:E6:61:BC:40:A1:60:E3:0E:0B:71:EA:AE:06:26:41:E1:5D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195443A404140E36FBFFE709048B22473DE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vJRB5mG8QKFg4w4LcequBiZB4V0.roa
Signing time: Wed 26 Feb 2025 21:47:03 +0000
ROA not before: Wed 26 Feb 2025 21:47:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213702
IP address blocks: 93.123.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 15:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:44:3a:40:41:40:e3:6f:bf:fe:70:90:48:b2:24:73:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 26 21:47:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc9441e661bc40a160e30e0b71eaae062641e15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:64:c8:2c:27:68:53:4e:dd:a2:15:8a:18:
c1:c3:3f:3d:9c:32:8e:3d:d3:84:e3:62:d4:e9:fe:
e8:81:b3:83:42:cd:0f:52:5c:75:bb:d5:5f:41:5f:
a0:0e:04:18:21:94:13:a7:f6:b3:be:5b:61:58:de:
e9:55:e0:4d:41:56:a3:59:d1:23:04:52:45:7b:e6:
38:00:4d:38:8b:79:71:32:b7:eb:46:86:7a:04:d1:
64:bc:25:e3:5b:2f:f8:b5:ee:1e:bd:ae:c8:62:85:
91:18:68:09:88:67:04:b4:01:2d:9f:06:88:2b:ba:
ef:a8:e2:0a:d3:1e:16:27:55:fa:4c:81:4a:c3:6c:
b4:25:4b:1a:ff:a3:41:e7:65:84:b1:7e:de:86:ef:
4c:50:da:37:0f:e7:68:6b:96:20:f3:04:9a:82:19:
89:5f:d8:07:9f:52:cb:50:b3:10:4f:03:ac:2e:03:
d7:ce:63:42:a8:b0:76:b0:4e:b8:0c:2c:b6:7a:e9:
c6:4b:95:08:09:15:ec:75:d0:1d:0c:23:27:4e:12:
39:e9:af:3a:da:49:cd:c6:f2:63:7e:e6:af:af:c9:
d5:e5:29:64:52:2c:8b:4f:af:c4:c1:21:89:8c:83:
e7:d6:2f:06:ab:37:72:f4:16:e9:bd:12:62:33:a6:
da:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:94:41:E6:61:BC:40:A1:60:E3:0E:0B:71:EA:AE:06:26:41:E1:5D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vJRB5mG8QKFg4w4LcequBiZB4V0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.39.0/24
Signature Algorithm: sha256WithRSAEncryption
46:5e:84:bb:4d:78:f9:12:1a:e8:5f:1e:0a:d9:36:30:75:9c:
42:87:81:73:e8:37:94:02:d4:83:a1:9a:d0:ea:a2:2e:37:aa:
10:9b:8d:55:da:25:64:da:de:d1:bd:8e:cd:ea:2d:3a:d1:58:
2f:80:f7:b4:05:ed:0f:84:92:25:32:49:0c:9a:25:c9:a3:f5:
ea:36:52:2d:a9:eb:02:12:72:4e:e5:ac:06:aa:1e:99:b4:30:
58:6d:36:8f:d4:67:c5:ed:5e:de:5f:33:f2:3c:73:81:f0:db:
50:39:b6:f2:18:59:5b:fd:ce:12:2c:98:f8:93:b2:91:75:4e:
c1:0f:5c:39:f1:1e:95:8c:03:18:5a:9c:a6:6c:64:43:d6:26:
66:b3:20:b8:a2:54:36:c0:48:a7:91:50:42:ce:16:f6:c4:8e:
b4:52:c7:fd:20:50:80:39:b5:da:13:77:7b:93:81:53:09:f6:
f3:3f:71:57:e1:2b:0f:db:d4:25:60:96:7e:05:46:6b:2b:e7:
b7:3a:a4:79:76:4d:f3:27:8d:dc:8e:79:ed:c1:ca:4f:2e:be:
54:79:ae:76:55:f1:4a:9b:dc:60:bb:32:d5:19:2e:cb:e2:20:
f6:ab:1a:6a:1b:a7:d3:0e:8a:f6:6e:7b:1d:e3:c8:8d:37:b3:
4c:fc:0c:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVEOkBBQONvv/5wkEiyJHPeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMjI2MjE0NzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzk0NDFlNjYxYmM0MGExNjBlMzBlMGI3MWVhYWUwNjI2NDFlMTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHtkyCwnaFNO3aIVihjBwz89nDKO
PdOE42LU6f7ogbODQs0PUlx1u9VfQV+gDgQYIZQTp/azvlthWN7pVeBNQVajWdEj
BFJFe+Y4AE04i3lxMrfrRoZ6BNFkvCXjWy/4te4eva7IYoWRGGgJiGcEtAEtnwaI
K7rvqOIK0x4WJ1X6TIFKw2y0JUsa/6NB52WEsX7ehu9MUNo3D+doa5Yg8wSaghmJ
X9gHn1LLULMQTwOsLgPXzmNCqLB2sE64DCy2eunGS5UICRXsddAdDCMnThI56a86
2knNxvJjfuavr8nV5SlkUiyLT6/EwSGJjIPn1i8Gqzdy9BbpvRJiM6batwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLyUQeZhvEChYOMOC3HqrgYmQeFdMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvdkpSQjVtRzhRS0ZnNHc0TGNlcXVCaVpCNFYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXsnMA0G
CSqGSIb3DQEBCwUAA4IBAQBGXoS7TXj5EhroXx4K2TYwdZxCh4Fz6DeUAtSDoZrQ
6qIuN6oQm41V2iVk2t7RvY7N6i060VgvgPe0Be0PhJIlMkkMmiXJo/XqNlItqesC
EnJO5awGqh6ZtDBYbTaP1GfF7V7eXzPyPHOB8NtQObbyGFlb/c4SLJj4k7KRdU7B
D1w58R6VjAMYWpymbGRD1iZmsyC4olQ2wEinkVBCzhb2xI60Usf9IFCAObXaE3d7
k4FTCfbzP3FX4SsP29QlYJZ+BUZrK+e3OqR5dk3zJ43cjnntwcpPLr5Uea52VfFK
m9xguzLVGS7L4iD2qxpqG6fTDor2bnsd48iNN7NM/Awt
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:21:58 2025 by rpki-client