Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/SG6rPZUeVIkWWGvkwttUPi3K0CY.roa
File: SG6rPZUeVIkWWGvkwttUPi3K0CY.roa (raw, json)
Hash identifier: NE4/X2+g5cOnV/Y70jSWYwXxDOf5d8sWeQhkyynz/P0=
Subject key identifier: 48:6E:AB:3D:95:1E:54:89:16:58:6B:E4:C2:DB:54:3E:2D:CA:D0:26
Certificate issuer: /CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Certificate serial: 018CC9BBCAB97E60C49D6ED15FC7B749AB49
Authority key identifier: 8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/SG6rPZUeVIkWWGvkwttUPi3K0CY.roa
Signing time: Tue 02 Jan 2024 10:32:56 +0000
ROA not before: Tue 02 Jan 2024 10:32:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 193.239.162.0/24 maxlen: 24
193.239.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:ca:b9:7e:60:c4:9d:6e:d1:5f:c7:b7:49:ab:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Validity
Not Before: Jan 2 10:32:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=486eab3d951e548916586be4c2db543e2dcad026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:17:ef:55:66:ad:4e:3e:9a:c0:1d:12:b1:da:
2b:a5:76:f8:77:cf:2c:54:64:5e:29:3c:2c:1d:d9:
b8:49:45:62:f7:70:fa:ce:c0:21:4c:45:26:07:24:
76:f2:42:d0:ae:df:f2:16:37:ad:18:b3:c4:c1:9e:
53:d1:bb:3f:ea:80:dc:a5:38:ba:68:92:cb:32:65:
3b:1a:6d:3e:0e:21:e5:16:6e:34:b4:14:90:72:23:
cf:04:93:1c:1c:fa:7d:ce:0f:c9:c4:71:2d:3d:01:
9a:cf:1c:3c:9f:ec:89:4a:ff:7a:ba:13:2d:f1:04:
91:56:70:2d:0d:d7:2a:b8:cc:95:7f:d3:0d:b2:4c:
38:5d:18:2a:de:a9:9b:cd:ec:e5:2b:39:0f:e8:5e:
68:71:1c:e1:43:b7:cc:f6:c0:5c:f3:1a:55:30:24:
8b:b7:c6:55:0b:06:91:b3:c1:e5:a3:60:d5:00:e3:
e6:6a:41:96:c5:c0:f6:f2:8d:c7:be:c1:dd:8f:a1:
06:3d:a5:77:8a:a6:af:d7:f2:ff:46:b2:d4:00:bf:
38:c6:3b:72:3e:53:a0:6d:83:06:31:01:db:eb:93:
bd:01:52:1e:a6:01:a4:ea:ef:d6:3f:64:c9:7e:ba:
fb:20:2d:9c:55:b3:78:b7:0b:ca:2b:55:96:7a:ae:
4f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6E:AB:3D:95:1E:54:89:16:58:6B:E4:C2:DB:54:3E:2D:CA:D0:26
X509v3 Authority Key Identifier:
keyid:8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/SG6rPZUeVIkWWGvkwttUPi3K0CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.162.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:06:3e:60:70:26:c5:c3:1e:a6:f3:f0:be:a1:45:63:ff:4a:
05:6f:32:1a:e0:e7:a5:7d:db:ea:53:fc:13:73:66:4f:50:a7:
3e:dc:2b:d1:da:54:77:77:28:44:28:0d:c1:89:cf:a6:8a:e3:
7f:cf:59:cc:19:4e:c9:6d:06:88:40:05:be:2b:ff:92:c1:28:
ef:87:ff:e6:ec:33:76:68:78:db:57:14:b4:b2:1d:69:7f:3c:
e2:21:00:9c:c1:68:f2:9a:c1:3b:6b:3f:b5:84:a6:fb:15:e1:
bd:98:6a:1d:93:ea:2c:06:c7:c0:37:5e:24:95:11:7b:9d:10:
85:f5:28:c9:ae:6c:6b:de:41:8b:75:91:62:24:ef:d4:54:d0:
d0:e2:57:93:ce:3c:0f:9e:99:a9:dd:be:91:0e:f4:e2:ee:4a:
57:62:7c:f0:e9:1b:23:e0:a5:61:30:0c:2a:b1:0d:18:6d:00:
e7:ca:6e:a9:ac:53:c6:5a:55:5c:d4:1e:fb:1b:d4:b3:18:1d:
6c:f7:43:9e:e1:d6:e7:0f:e7:7c:69:2e:2a:12:f7:91:45:10:
97:b3:4b:9d:6a:a2:07:4e:8d:09:5a:b6:25:aa:9a:32:dd:0b:
d2:cc:99:5e:39:5b:78:64:25:07:6a:16:5c:da:00:5a:54:2e:
42:7c:4a:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJu8q5fmDEnW7RX8e3SatJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNTFiNWI4MTMyZjllMzA3YjcxN2EzZTFlNTRkMWY3ZjQ1
YWU1MTcwHhcNMjQwMTAyMTAzMjU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODZlYWIzZDk1MWU1NDg5MTY1ODZiZTRjMmRiNTQzZTJkY2FkMDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRfvVWatTj6awB0SsdorpXb4d88s
VGReKTwsHdm4SUVi93D6zsAhTEUmByR28kLQrt/yFjetGLPEwZ5T0bs/6oDcpTi6
aJLLMmU7Gm0+DiHlFm40tBSQciPPBJMcHPp9zg/JxHEtPQGazxw8n+yJSv96uhMt
8QSRVnAtDdcquMyVf9MNskw4XRgq3qmbzezlKzkP6F5ocRzhQ7fM9sBc8xpVMCSL
t8ZVCwaRs8Hlo2DVAOPmakGWxcD28o3HvsHdj6EGPaV3iqav1/L/RrLUAL84xjty
PlOgbYMGMQHb65O9AVIepgGk6u/WP2TJfrr7IC2cVbN4twvKK1WWeq5PbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEhuqz2VHlSJFlhr5MLbVD4tytAmMB8GA1UdIwQY
MBaAFI9RtbgTL54we3F6Ph5U0ff0WuUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajFHMXVCTXZuakI3Y1hvLUhsVFI5X1JhNVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kYTI0MjctYjMzYi00YjgxLWFmMzct
ZTIyNTFlNDg5Y2JiLzEvU0c2clBaVWVWSWtXV0d2a3d0dFVQaTNLMENZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kYTI0MjctYjMzYi00YjgxLWFmMzctZTIyNTFlNDg5Y2Ji
LzEvajFHMXVCTXZuakI3Y1hvLUhsVFI5X1JhNVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwe+iMA0G
CSqGSIb3DQEBCwUAA4IBAQBfBj5gcCbFwx6m8/C+oUVj/0oFbzIa4OelfdvqU/wT
c2ZPUKc+3CvR2lR3dyhEKA3Bic+miuN/z1nMGU7JbQaIQAW+K/+SwSjvh//m7DN2
aHjbVxS0sh1pfzziIQCcwWjymsE7az+1hKb7FeG9mGodk+osBsfAN14klRF7nRCF
9SjJrmxr3kGLdZFiJO/UVNDQ4leTzjwPnpmp3b6RDvTi7kpXYnzw6Rsj4KVhMAwq
sQ0YbQDnym6prFPGWlVc1B77G9SzGB1s90Oe4dbnD+d8aS4qEveRRRCXs0udaqIH
To0JWrYlqpoy3QvSzJleOVt4ZCUHahZc2gBaVC5CfEom
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:59 2025 by rpki-client