Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/PKADM7BzkU02RxWHXHSIPs84Ebc.roa
File: PKADM7BzkU02RxWHXHSIPs84Ebc.roa (raw, json)
Hash identifier: vc3nLT0VMPZyBRWfyhsyFtLjFF9MHE2ksLG1QOXTyqk=
Subject key identifier: 3C:A0:03:33:B0:73:91:4D:36:47:15:87:5C:74:88:3E:CF:38:11:B7
Certificate issuer: /CN=ba79c50080297cb9cc0cc934ee389f50c3e73d4a
Certificate serial: 018F05978ACBA2286B97FEFA72980BEE9D6F
Authority key identifier: BA:79:C5:00:80:29:7C:B9:CC:0C:C9:34:EE:38:9F:50:C3:E7:3D:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unnFAIApfLnMDMk07jifUMPnPUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/PKADM7BzkU02RxWHXHSIPs84Ebc.roa
Signing time: Mon 22 Apr 2024 11:36:08 +0000
ROA not before: Mon 22 Apr 2024 11:36:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49337
IP address blocks: 193.26.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:05:97:8a:cb:a2:28:6b:97:fe:fa:72:98:0b:ee:9d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba79c50080297cb9cc0cc934ee389f50c3e73d4a
Validity
Not Before: Apr 22 11:36:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ca00333b073914d364715875c74883ecf3811b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:89:62:d3:3f:b8:37:2b:a0:34:b5:1d:3c:
d1:21:17:85:9c:c9:c0:8b:89:a8:f8:4c:a8:22:0c:
04:6b:95:36:8f:9b:a4:63:7d:dd:54:a3:d3:8f:5d:
dc:cd:94:0f:41:f3:27:a4:9a:97:0a:63:3d:65:d0:
95:e7:a6:ef:1f:bd:d6:d5:4f:55:d8:6a:61:2f:04:
8c:df:5f:a4:4b:d3:0d:fd:39:74:b0:6f:db:2a:da:
5e:a7:c8:d4:76:03:9d:33:e8:87:65:1a:c5:e3:65:
1f:a5:e2:ef:4b:1f:a5:8e:93:6b:c7:c3:2a:79:e8:
96:5f:1d:f3:da:ff:86:07:63:c5:06:d5:14:22:b9:
45:99:01:97:a1:31:2a:28:26:17:dd:18:5e:f9:79:
f6:91:d2:6e:31:f5:86:78:ac:0b:79:bc:09:77:8b:
6f:bd:ff:a3:67:fc:2a:02:77:79:13:90:c8:5d:80:
31:93:5f:36:9a:dc:eb:0c:67:89:7f:2b:12:21:76:
4d:c3:bd:d3:53:f0:de:7b:50:e1:02:5a:00:77:83:
c8:64:59:f6:26:f4:23:4d:98:b4:c9:8d:63:57:c6:
7a:90:ff:3e:80:8f:8f:03:2c:42:29:7d:5f:96:92:
9a:41:7c:9f:5a:aa:4c:d9:db:8e:e0:87:78:5f:19:
1a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A0:03:33:B0:73:91:4D:36:47:15:87:5C:74:88:3E:CF:38:11:B7
X509v3 Authority Key Identifier:
keyid:BA:79:C5:00:80:29:7C:B9:CC:0C:C9:34:EE:38:9F:50:C3:E7:3D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unnFAIApfLnMDMk07jifUMPnPUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/PKADM7BzkU02RxWHXHSIPs84Ebc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.209.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:f5:75:42:c5:08:4f:c7:72:15:54:4c:af:2f:45:62:0b:cf:
e7:07:3e:6a:00:0b:d8:53:79:2a:99:aa:7e:b3:ff:e2:1b:f9:
47:09:00:33:d1:d4:da:37:5a:2b:e2:6b:0a:36:47:1d:13:bf:
82:e3:6e:62:e1:7e:8b:d7:6d:a1:d3:75:da:bd:91:a2:d5:77:
c2:6b:ad:d3:7f:57:9d:0f:16:fe:93:1d:39:d4:9b:99:b6:5b:
89:e7:f7:77:36:69:c7:67:7c:b3:a0:dd:be:b7:c2:db:5f:4b:
99:1e:60:64:59:e0:bf:d7:50:15:8e:a4:d4:90:cf:24:a8:f4:
f8:3d:4a:cd:74:df:41:22:7a:45:de:2f:6e:34:a7:71:f5:95:
11:f2:d3:6f:e3:9a:95:7d:59:1b:77:2e:d5:c5:f0:12:7b:b6:
d4:5e:a7:8a:71:c0:bd:9b:85:29:c2:13:42:71:24:1f:2f:aa:
df:c0:4e:3e:09:67:45:b6:11:fa:20:a8:34:0f:68:fd:1d:fb:
cb:9b:00:fb:9e:72:45:18:e0:a6:44:56:22:ae:91:ca:5d:d0:
1b:77:74:61:46:ef:49:33:a4:ab:d2:92:7c:3b:ce:0e:2d:a0:
b7:51:f7:00:53:1f:cb:89:ed:89:06:87:1e:dd:a9:9f:a5:d4:
c8:5b:7b:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY8Fl4rLoihrl/76cpgL7p1vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNzljNTAwODAyOTdjYjljYzBjYzkzNGVlMzg5ZjUwYzNl
NzNkNGEwHhcNMjQwNDIyMTEzNjA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2EwMDMzM2IwNzM5MTRkMzY0NzE1ODc1Yzc0ODgzZWNmMzgxMWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6CJYtM/uDcroDS1HTzRIReFnMnA
i4mo+EyoIgwEa5U2j5ukY33dVKPTj13czZQPQfMnpJqXCmM9ZdCV56bvH73W1U9V
2GphLwSM31+kS9MN/Tl0sG/bKtpep8jUdgOdM+iHZRrF42UfpeLvSx+ljpNrx8Mq
eeiWXx3z2v+GB2PFBtUUIrlFmQGXoTEqKCYX3Rhe+Xn2kdJuMfWGeKwLebwJd4tv
vf+jZ/wqAnd5E5DIXYAxk182mtzrDGeJfysSIXZNw73TU/Dee1DhAloAd4PIZFn2
JvQjTZi0yY1jV8Z6kP8+gI+PAyxCKX1flpKaQXyfWqpM2duO4Id4Xxka0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDygAzOwc5FNNkcVh1x0iD7POBG3MB8GA1UdIwQY
MBaAFLp5xQCAKXy5zAzJNO44n1DD5z1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW5uRkFJQXBmTG5NRE1rMDdqaWZVTVBuUFVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hNjIxYTgtZTA3OS00YTE0LTk4YmEt
ZTM2YTk3OTNlYTZkLzEvUEtBRE03QnprVTAyUnhXSFhIU0lQczg0RWJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9hNjIxYTgtZTA3OS00YTE0LTk4YmEtZTM2YTk3OTNlYTZk
LzEvdW5uRkFJQXBmTG5NRE1rMDdqaWZVTVBuUFVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRrRMA0G
CSqGSIb3DQEBCwUAA4IBAQBs9XVCxQhPx3IVVEyvL0ViC8/nBz5qAAvYU3kqmap+
s//iG/lHCQAz0dTaN1or4msKNkcdE7+C425i4X6L122h03XavZGi1XfCa63Tf1ed
Dxb+kx051JuZtluJ5/d3NmnHZ3yzoN2+t8LbX0uZHmBkWeC/11AVjqTUkM8kqPT4
PUrNdN9BInpF3i9uNKdx9ZUR8tNv45qVfVkbdy7VxfASe7bUXqeKccC9m4UpwhNC
cSQfL6rfwE4+CWdFthH6IKg0D2j9HfvLmwD7nnJFGOCmRFYirpHKXdAbd3RhRu9J
M6Sr0pJ8O84OLaC3UfcAUx/Lie2JBoce3amfpdTIW3s0
-----END CERTIFICATE-----
Generated at Sun Mar 9 18:04:25 2025 by rpki-client