Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/7dkxCUjHYJ_7UoUYU7Sc9WxvqL4.roa
File: 7dkxCUjHYJ_7UoUYU7Sc9WxvqL4.roa (raw, json)
Hash identifier: ftCzgcKtBtvzua3ACQAM/zVbplhfatDmZlKT8G96gNo=
Subject key identifier: ED:D9:31:09:48:C7:60:9F:FB:52:85:18:53:B4:9C:F5:6C:6F:A8:BE
Certificate issuer: /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Certificate serial: 01942369A6E8350AE93DC8958B302242DB3D
Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/7dkxCUjHYJ_7UoUYU7Sc9WxvqL4.roa
Signing time: Wed 01 Jan 2025 19:48:34 +0000
ROA not before: Wed 01 Jan 2025 19:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30857
IP address blocks: 91.206.134.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 05 Jan 2025 12:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:a6:e8:35:0a:e9:3d:c8:95:8b:30:22:42:db:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Validity
Not Before: Jan 1 19:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edd9310948c7609ffb52851853b49cf56c6fa8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:18:f3:96:0c:25:32:13:ea:28:e4:74:ff:68:
6a:d5:72:07:6b:3e:2c:54:60:7f:f5:b7:67:50:45:
be:30:e3:89:99:84:37:cd:e5:0d:d4:d6:5d:e4:c1:
93:4f:95:73:94:3a:a3:07:f8:74:72:f3:13:40:61:
14:ad:0e:9e:b3:8d:9e:03:0d:0a:70:ac:8a:4d:3f:
1d:4a:8a:3b:e5:a6:e5:e0:a5:f9:b0:34:fe:78:c0:
7b:1a:a7:35:78:b1:8e:30:76:29:d3:ca:8e:aa:78:
db:1e:2d:ef:48:b3:8c:48:b9:3f:ab:47:c8:c0:91:
01:fe:9d:28:14:ea:32:91:b2:37:a8:b0:4b:c3:87:
d5:c1:48:34:63:36:48:ed:48:e4:de:5c:09:59:a5:
17:fd:18:09:1b:69:d5:5b:35:8d:bc:a7:3d:6c:75:
c4:3d:87:73:70:f2:00:eb:1e:dd:5f:d8:a5:9b:ed:
0b:63:8e:71:94:76:4f:8e:cc:53:a0:fb:0c:b6:17:
37:de:9a:1b:19:48:62:ab:cf:73:25:48:84:20:c1:
37:e4:75:8c:41:4c:44:63:b3:98:c7:ba:9b:95:e5:
47:3d:ff:0d:c2:7b:bc:fd:1c:8c:cf:2e:55:63:4f:
95:1a:43:93:70:71:f3:04:22:f2:ad:91:9f:67:c7:
fe:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D9:31:09:48:C7:60:9F:FB:52:85:18:53:B4:9C:F5:6C:6F:A8:BE
X509v3 Authority Key Identifier:
keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/7dkxCUjHYJ_7UoUYU7Sc9WxvqL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.134.0/23
Signature Algorithm: sha256WithRSAEncryption
95:cd:61:c5:1c:43:1e:53:57:48:dd:05:53:37:29:18:e4:58:
7a:dd:2d:38:5e:5b:b6:25:4b:ab:b0:5b:df:96:df:8d:60:15:
9a:2f:e9:10:24:52:cb:08:3a:7e:19:a3:ee:27:06:71:da:56:
7e:94:97:bb:75:ac:86:11:88:28:c0:fa:0d:e0:08:2a:d2:1e:
81:e2:4a:8d:e3:c8:2b:12:37:c5:f1:d6:28:00:f2:35:32:2a:
ff:67:08:0d:95:18:1f:dd:b2:ab:85:03:fc:d2:a5:1f:9d:d9:
5c:08:37:ff:76:36:31:5c:a1:84:c8:e6:79:7d:2c:73:72:33:
ed:28:73:8d:25:6e:6b:ac:80:73:5f:60:2a:ee:dd:56:24:28:
0c:74:f1:37:67:c1:f2:d1:5a:5f:14:73:da:ac:40:9d:57:5a:
27:ad:29:57:22:80:1c:dc:35:77:d2:76:d6:53:f8:b3:29:77:
ec:11:72:f9:19:55:c5:86:3e:b0:48:b5:94:1e:b0:f0:8c:7d:
a3:5e:59:6a:1a:82:f1:4f:72:b2:da:95:51:46:a5:35:7a:a3:
84:bd:43:4a:85:6a:61:21:0b:5e:e3:79:ec:50:43:e2:06:68:
85:0b:e0:a7:4b:8c:56:59:c2:66:37:83:f9:53:ad:ba:86:49:
b8:1f:9e:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaaboNQrpPciVizAiQts9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNDc4Y2NkYzA0ODBhNmI0M2JhY2Q4YWFlZTAwNzliMTZl
YzJlNjgwHhcNMjUwMTAxMTk0ODM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGQ5MzEwOTQ4Yzc2MDlmZmI1Mjg1MTg1M2I0OWNmNTZjNmZhOGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhjzlgwlMhPqKOR0/2hq1XIHaz4s
VGB/9bdnUEW+MOOJmYQ3zeUN1NZd5MGTT5VzlDqjB/h0cvMTQGEUrQ6es42eAw0K
cKyKTT8dSoo75abl4KX5sDT+eMB7Gqc1eLGOMHYp08qOqnjbHi3vSLOMSLk/q0fI
wJEB/p0oFOoykbI3qLBLw4fVwUg0YzZI7Ujk3lwJWaUX/RgJG2nVWzWNvKc9bHXE
PYdzcPIA6x7dX9ilm+0LY45xlHZPjsxToPsMthc33pobGUhiq89zJUiEIME35HWM
QUxEY7OYx7qbleVHPf8Nwnu8/RyMzy5VY0+VGkOTcHHzBCLyrZGfZ8f+AQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO3ZMQlIx2Cf+1KFGFO0nPVsb6i+MB8GA1UdIwQY
MBaAFK9HjM3ASAprQ7rNiq7gB5sW7C5oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85OTA1MDYtNDFiYy00MDk4LWFmN2Yt
Y2M4YmYzZmJlZjk5LzEvN2RreENVakhZSl83VW9VWVU3U2M5V3h2cUw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85OTA1MDYtNDFiYy00MDk4LWFmN2YtY2M4YmYzZmJlZjk5
LzEvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW86GMA0G
CSqGSIb3DQEBCwUAA4IBAQCVzWHFHEMeU1dI3QVTNykY5Fh63S04Xlu2JUursFvf
lt+NYBWaL+kQJFLLCDp+GaPuJwZx2lZ+lJe7dayGEYgowPoN4Agq0h6B4kqN48gr
EjfF8dYoAPI1Mir/ZwgNlRgf3bKrhQP80qUfndlcCDf/djYxXKGEyOZ5fSxzcjPt
KHONJW5rrIBzX2Aq7t1WJCgMdPE3Z8Hy0VpfFHParECdV1onrSlXIoAc3DV30nbW
U/izKXfsEXL5GVXFhj6wSLWUHrDwjH2jXllqGoLxT3Ky2pVRRqU1eqOEvUNKhWph
IQte43nsUEPiBmiFC+CnS4xWWcJmN4P5U626hkm4H56z
-----END CERTIFICATE-----
Generated at Thu Apr 17 20:14:49 2025 by rpki-client