Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fLSrx4NjOYFPzDudkOQq_oazsN0.roa
File: fLSrx4NjOYFPzDudkOQq_oazsN0.roa (raw, json)
Hash identifier: K9DHIYaMf88SijHcRkoA+MvvAXw2N9BWKNiEv+hgVoc=
Subject key identifier: 7C:B4:AB:C7:83:63:39:81:4F:CC:3B:9D:90:E4:2A:FE:86:B3:B0:DD
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01957425A8EC51EEF1AC930C8E50FE6726CB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fLSrx4NjOYFPzDudkOQq_oazsN0.roa
Signing time: Sat 08 Mar 2025 05:06:19 +0000
ROA not before: Sat 08 Mar 2025 05:06:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 94.103.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Mar 2025 15:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:74:25:a8:ec:51:ee:f1:ac:93:0c:8e:50:fe:67:26:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 8 05:06:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cb4abc7836339814fcc3b9d90e42afe86b3b0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fa:c9:1e:df:e4:fc:8c:e6:68:5e:e7:0e:62:
a0:0e:18:98:8b:59:7f:d6:51:bf:0d:5a:a4:07:6d:
33:8e:6e:5b:ce:46:09:2e:43:67:65:2d:13:17:73:
cb:2a:d7:c6:ad:2d:61:86:02:8f:ce:dc:d7:91:a2:
e6:3e:49:62:13:9f:49:42:14:d4:e7:5b:90:04:c8:
20:c2:64:d6:da:5a:db:e4:8c:ab:59:a3:f5:ee:9b:
c1:93:8f:4d:12:16:62:29:ba:ce:f7:48:12:49:26:
5c:19:a9:1e:c1:33:4b:d6:7a:ae:6a:cf:c2:56:f7:
8b:38:0a:88:34:29:5b:28:59:07:a1:67:ad:2e:3a:
37:7f:44:e6:e2:72:ce:73:00:02:e6:f3:68:9d:14:
f3:28:26:9f:ce:09:70:b8:9f:88:cf:4f:7a:92:8a:
e5:8e:3b:f0:2b:64:43:a2:e9:6d:e5:7b:29:1f:82:
29:29:2b:5a:17:c0:73:c9:11:c7:dc:b1:7f:78:57:
ec:db:ee:b6:8e:55:33:3c:0b:50:14:d1:82:e3:05:
14:46:90:1d:84:e7:77:0a:cc:46:f5:9f:ff:03:ba:
b1:95:89:12:4b:ab:a2:19:fb:f5:3e:b9:62:8a:0b:
5c:97:8c:56:f4:c2:3c:47:8c:9d:64:e3:57:dd:1a:
a6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B4:AB:C7:83:63:39:81:4F:CC:3B:9D:90:E4:2A:FE:86:B3:B0:DD
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fLSrx4NjOYFPzDudkOQq_oazsN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.166.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:40:2a:7f:ac:93:6b:ce:dd:22:3e:78:ec:88:cc:8d:93:f3:
b3:55:37:9f:59:83:df:60:00:1a:14:39:ac:32:ed:a0:1b:c3:
b9:ea:40:fc:a0:e1:0e:69:8b:3b:61:64:b4:6f:39:40:c0:e3:
93:31:ee:04:fe:22:bf:4c:51:9b:75:19:ad:bd:ee:da:82:bf:
74:e4:93:a4:fd:8e:6d:58:78:7e:1a:6d:3c:40:13:b0:6c:09:
c0:45:51:b1:fc:25:cd:09:97:df:06:84:41:9c:b3:a2:72:6c:
dd:67:3e:8e:fd:8c:b3:48:ce:93:0c:5a:0f:f7:0e:29:05:77:
40:ed:04:c2:6e:9a:73:92:71:b6:11:c3:b8:ec:9c:00:45:f9:
8d:12:00:d9:61:ca:5b:54:a1:3f:63:d2:54:fd:52:57:3c:e7:
91:69:08:d4:c5:db:09:3b:39:80:56:31:97:9c:21:ff:b2:ca:
8b:3a:ac:43:2e:51:22:31:8e:b5:50:52:62:7a:40:20:2b:a0:
4b:24:42:35:88:6c:c9:16:6a:22:c5:a7:42:50:01:ee:46:7c:
9b:b5:5b:ac:78:e5:0d:d1:33:e9:2f:95:28:fa:ae:68:3d:97:
c7:6d:37:31:20:0c:2a:10:12:eb:ee:55:41:43:9e:48:2a:21:
f1:d5:8e:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZV0JajsUe7xrJMMjlD+ZybLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMzA4MDUwNjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2I0YWJjNzgzNjMzOTgxNGZjYzNiOWQ5MGU0MmFmZTg2YjNiMGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPrJHt/k/IzmaF7nDmKgDhiYi1l/
1lG/DVqkB20zjm5bzkYJLkNnZS0TF3PLKtfGrS1hhgKPztzXkaLmPkliE59JQhTU
51uQBMggwmTW2lrb5IyrWaP17pvBk49NEhZiKbrO90gSSSZcGakewTNL1nquas/C
VveLOAqINClbKFkHoWetLjo3f0Tm4nLOcwAC5vNonRTzKCafzglwuJ+Iz096korl
jjvwK2RDoult5XspH4IpKStaF8BzyRHH3LF/eFfs2+62jlUzPAtQFNGC4wUURpAd
hOd3CsxG9Z//A7qxlYkSS6uiGfv1Prliigtcl4xW9MI8R4ydZONX3RqmpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHy0q8eDYzmBT8w7nZDkKv6Gs7DdMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvZkxTcng0TmpPWUZQekR1ZGtPUXFfb2F6c04wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXmemMA0G
CSqGSIb3DQEBCwUAA4IBAQB9QCp/rJNrzt0iPnjsiMyNk/OzVTefWYPfYAAaFDms
Mu2gG8O56kD8oOEOaYs7YWS0bzlAwOOTMe4E/iK/TFGbdRmtve7agr905JOk/Y5t
WHh+Gm08QBOwbAnARVGx/CXNCZffBoRBnLOicmzdZz6O/YyzSM6TDFoP9w4pBXdA
7QTCbppzknG2EcO47JwARfmNEgDZYcpbVKE/Y9JU/VJXPOeRaQjUxdsJOzmAVjGX
nCH/ssqLOqxDLlEiMY61UFJiekAgK6BLJEI1iGzJFmoixadCUAHuRnybtVuseOUN
0TPpL5Uo+q5oPZfHbTcxIAwqEBLr7lVBQ55IKiHx1Y5M
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:28:04 2025 by rpki-client