Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/A_KVa4cbWwZqJ6iWtb0Xo41LUes.roa
File: A_KVa4cbWwZqJ6iWtb0Xo41LUes.roa (raw, json)
Hash identifier: 3P2wEB7ADLM1/TJjzaITRran+v2PT3SvWIPwjFICNVY=
Subject key identifier: 03:F2:95:6B:87:1B:5B:06:6A:27:A8:96:B5:BD:17:A3:8D:4B:51:EB
Certificate issuer: /CN=1bd21dfb24f7d8ce2311ba4076775474bd50be64
Certificate serial: 019006234A5ABCCC47553C63B89B6C02C593
Authority key identifier: 1B:D2:1D:FB:24:F7:D8:CE:23:11:BA:40:76:77:54:74:BD:50:BE:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9Id-yT32M4jEbpAdndUdL1QvmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/A_KVa4cbWwZqJ6iWtb0Xo41LUes.roa
Signing time: Tue 11 Jun 2024 07:11:34 +0000
ROA not before: Tue 11 Jun 2024 07:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7155
IP address blocks: 130.255.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:23:4a:5a:bc:cc:47:55:3c:63:b8:9b:6c:02:c5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd21dfb24f7d8ce2311ba4076775474bd50be64
Validity
Not Before: Jun 11 07:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03f2956b871b5b066a27a896b5bd17a38d4b51eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:c5:e2:45:6f:13:cf:c9:5d:ee:37:71:a7:
4d:51:7b:1d:da:bc:00:72:53:6f:28:10:a5:04:4f:
cf:25:a0:e2:e1:ae:5d:d1:40:a6:34:54:a6:d9:1e:
03:69:7e:dd:8a:63:8c:1c:e3:c1:ab:06:0b:fc:f8:
00:8a:f8:ac:dd:79:ab:e8:1a:6a:5d:af:ab:b2:1f:
09:f1:27:9d:0e:eb:7b:c4:c6:26:6a:24:58:30:c1:
c0:07:d0:f3:83:a5:51:e5:d3:fe:a8:e3:02:37:20:
59:41:32:48:44:2e:81:f6:ae:12:4d:48:39:f2:4c:
d7:7c:cc:a2:2a:01:f8:18:c6:23:88:b9:30:2c:9c:
28:8d:d6:87:87:36:11:6a:b5:e7:41:60:86:d8:26:
e9:87:40:56:a1:42:8a:ad:67:71:3d:15:68:f8:cf:
aa:91:80:6c:32:3c:cc:32:65:9f:f7:5e:1b:c0:11:
54:3a:dc:cf:f7:c4:44:83:a1:96:a6:87:ae:f8:3f:
d5:cf:bb:a0:7b:a4:04:9a:e2:53:53:c9:f6:e1:ea:
01:a2:71:fa:ba:c8:b5:83:05:2a:6f:2e:93:c7:ee:
1d:9c:6f:16:a9:ca:89:3b:85:94:6e:6d:42:b9:16:
57:d0:1f:c2:b9:47:d9:6c:0b:d3:d9:6a:6a:f1:d1:
3a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F2:95:6B:87:1B:5B:06:6A:27:A8:96:B5:BD:17:A3:8D:4B:51:EB
X509v3 Authority Key Identifier:
keyid:1B:D2:1D:FB:24:F7:D8:CE:23:11:BA:40:76:77:54:74:BD:50:BE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9Id-yT32M4jEbpAdndUdL1QvmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/A_KVa4cbWwZqJ6iWtb0Xo41LUes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.27.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a7:9c:b8:4f:ce:47:03:1f:1d:7b:95:25:01:84:7a:0a:da:
21:90:1d:ff:a0:e5:c3:de:d2:b1:05:cb:c2:83:63:16:a7:29:
1e:ba:e8:b0:45:94:3c:b0:41:f9:84:8b:6e:d1:c3:3d:e9:42:
ba:5a:e5:e9:dc:81:21:7d:e0:0a:01:17:a1:18:ea:09:67:f3:
28:be:9b:80:77:78:01:d2:c7:c6:96:06:4f:b1:45:2d:ea:85:
57:9e:a9:28:24:61:b2:69:be:be:00:db:67:d5:88:d6:1a:43:
e6:c1:40:9e:9f:ae:ef:41:33:3d:fc:b3:69:f8:fd:0d:2e:e3:
3d:84:f1:f4:14:ae:b9:fc:b2:0e:73:7b:c5:eb:61:d7:dd:a7:
a2:ae:44:95:c4:43:49:1a:88:dc:97:a6:b5:c1:2a:18:c9:6c:
42:00:f0:d9:3c:26:31:1a:11:22:14:4c:4b:15:ac:f6:59:3b:
04:01:75:96:50:6c:bd:05:eb:05:55:eb:b2:8c:a2:b3:b0:36:
f7:80:a0:df:8b:78:94:07:de:34:fc:24:1b:4d:3a:e5:ca:c8:
01:b6:dc:e3:8e:d2:ac:9a:fb:74:e9:08:98:97:c9:14:7f:38:
08:d9:7e:77:82:ae:ed:33:43:da:44:a4:ec:6f:50:21:e2:7f:
03:b7:1e:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZAGI0pavMxHVTxjuJtsAsWTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZDIxZGZiMjRmN2Q4Y2UyMzExYmE0MDc2Nzc1NDc0YmQ1
MGJlNjQwHhcNMjQwNjExMDcxMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2YyOTU2Yjg3MWI1YjA2NmEyN2E4OTZiNWJkMTdhMzhkNGI1MWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/7F4kVvE8/JXe43cadNUXsd2rwA
clNvKBClBE/PJaDi4a5d0UCmNFSm2R4DaX7dimOMHOPBqwYL/PgAivis3Xmr6Bpq
Xa+rsh8J8SedDut7xMYmaiRYMMHAB9Dzg6VR5dP+qOMCNyBZQTJIRC6B9q4STUg5
8kzXfMyiKgH4GMYjiLkwLJwojdaHhzYRarXnQWCG2Cbph0BWoUKKrWdxPRVo+M+q
kYBsMjzMMmWf914bwBFUOtzP98REg6GWpoeu+D/Vz7uge6QEmuJTU8n24eoBonH6
usi1gwUqby6Tx+4dnG8WqcqJO4WUbm1CuRZX0B/CuUfZbAvT2Wpq8dE6lQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAPylWuHG1sGaieolrW9F6ONS1HrMB8GA1UdIwQY
MBaAFBvSHfsk99jOIxG6QHZ3VHS9UL5kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzlJZC15VDMyTTRqRWJwQWRuZFVkTDFRdm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wOGUxNWItNGEyNC00Y2UwLTk0NTQt
Zjg3YTMyMmE3Nzc2LzEvQV9LVmE0Y2JXd1pxSjZpV3RiMFhvNDFMVWVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wOGUxNWItNGEyNC00Y2UwLTk0NTQtZjg3YTMyMmE3Nzc2
LzEvRzlJZC15VDMyTTRqRWJwQWRuZFVkTDFRdm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv8bMA0G
CSqGSIb3DQEBCwUAA4IBAQA9p5y4T85HAx8de5UlAYR6CtohkB3/oOXD3tKxBcvC
g2MWpykeuuiwRZQ8sEH5hItu0cM96UK6WuXp3IEhfeAKARehGOoJZ/MovpuAd3gB
0sfGlgZPsUUt6oVXnqkoJGGyab6+ANtn1YjWGkPmwUCen67vQTM9/LNp+P0NLuM9
hPH0FK65/LIOc3vF62HX3aeirkSVxENJGojcl6a1wSoYyWxCAPDZPCYxGhEiFExL
Faz2WTsEAXWWUGy9BesFVeuyjKKzsDb3gKDfi3iUB940/CQbTTrlysgBttzjjtKs
mvt06QiYl8kUfzgI2X53gq7tM0PaRKTsb1Ah4n8Dtx6N
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:18 2025 by rpki-client