Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/e3TW-aRRjNwOO0hA8DU04Pc3KU4.roa
File: e3TW-aRRjNwOO0hA8DU04Pc3KU4.roa (raw, json)
Hash identifier: fH1LbUr+CmiHRj3dyFvXlWIXIzfeYnjM4se2PqRGZyM=
Subject key identifier: 7B:74:D6:F9:A4:51:8C:DC:0E:3B:48:40:F0:35:34:E0:F7:37:29:4E
Certificate issuer: /CN=cdff5b3cdaf2ead1bc3309411bf9492cd987afba
Certificate serial: 0194228D8CE6505B2CB79C1FCEEC345DDAC6
Authority key identifier: CD:FF:5B:3C:DA:F2:EA:D1:BC:33:09:41:1B:F9:49:2C:D9:87:AF:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zf9bPNry6tG8MwlBG_lJLNmHr7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/e3TW-aRRjNwOO0hA8DU04Pc3KU4.roa
Signing time: Wed 01 Jan 2025 15:48:09 +0000
ROA not before: Wed 01 Jan 2025 15:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 193.247.117.0/24 maxlen: 24
193.247.118.0/23 maxlen: 23
193.247.118.0/24 maxlen: 24
193.247.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 13:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:8c:e6:50:5b:2c:b7:9c:1f:ce:ec:34:5d:da:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdff5b3cdaf2ead1bc3309411bf9492cd987afba
Validity
Not Before: Jan 1 15:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b74d6f9a4518cdc0e3b4840f03534e0f737294e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:59:bd:1d:66:4d:c6:7a:0d:e0:b6:e8:f9:7d:
21:2b:d2:b2:49:9d:39:51:29:7f:61:f2:00:84:45:
ea:b5:c4:3d:6c:ef:f8:33:54:dc:08:1d:df:27:2e:
eb:06:18:32:11:6b:77:56:98:f5:c7:2c:c8:00:ca:
59:da:12:26:fe:e3:4e:1c:27:5b:39:d6:09:ca:20:
f5:64:e0:76:23:03:4d:33:56:dc:89:2a:ab:fb:77:
ec:fb:93:56:c2:a1:9c:11:e9:2b:4d:d1:b4:a6:cd:
5a:0f:4d:fb:ae:65:6e:25:7c:85:78:45:94:35:9f:
7a:22:1b:71:de:53:f1:f1:53:ae:e9:7e:fa:57:e7:
7f:b5:2b:4d:2f:ba:82:84:a9:47:68:4e:57:2a:26:
20:39:1e:66:80:20:b3:c4:68:13:8d:38:67:ae:89:
e2:f9:0e:80:82:71:a2:44:96:ca:30:f8:4d:94:db:
e8:f8:d0:89:25:a7:29:00:f6:17:d6:1a:6b:07:00:
b6:3d:ee:9b:65:76:52:e9:c5:ee:20:51:5a:10:33:
1e:14:e8:15:28:2c:fc:56:50:70:07:f2:51:e2:67:
c3:01:26:d1:55:4d:ee:ce:32:c2:d2:23:dc:a1:b9:
43:be:1b:02:10:f3:94:46:e9:01:e2:dd:f1:56:37:
6c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:74:D6:F9:A4:51:8C:DC:0E:3B:48:40:F0:35:34:E0:F7:37:29:4E
X509v3 Authority Key Identifier:
keyid:CD:FF:5B:3C:DA:F2:EA:D1:BC:33:09:41:1B:F9:49:2C:D9:87:AF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zf9bPNry6tG8MwlBG_lJLNmHr7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/e3TW-aRRjNwOO0hA8DU04Pc3KU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.117.0-193.247.119.255
Signature Algorithm: sha256WithRSAEncryption
5b:a4:41:b9:3a:ba:98:5a:8b:56:6e:fa:72:fd:64:a5:ed:83:
20:8f:b6:c5:e6:a6:b3:4d:a4:40:06:8e:8d:65:79:64:23:fa:
bb:36:e2:d9:f8:a1:0f:a5:50:dd:fc:d8:fe:65:41:2b:89:53:
67:7a:81:7f:b3:0d:3f:58:ff:f4:47:69:35:5c:74:a4:6f:3f:
2d:af:ad:30:cd:d7:b2:7e:fe:0b:91:c8:0b:df:0a:10:3e:6e:
2f:4c:1a:74:24:54:76:eb:4d:66:60:71:d4:1e:00:f1:93:2c:
fd:55:a1:b4:0d:1e:90:3b:fe:5a:19:9b:1a:3d:45:a7:6b:ca:
55:2b:22:ff:ee:3e:4b:9c:4a:72:ea:7a:8a:1a:05:9a:bc:6e:
e5:92:c7:ea:92:85:c5:15:bb:da:54:74:af:bf:3c:26:5a:93:
9a:c4:78:be:99:f4:00:11:b1:d1:08:50:c8:0a:37:cb:23:0e:
03:30:54:24:61:4a:02:38:0e:4c:e2:22:97:27:4f:62:b1:35:
c1:8c:36:7e:27:e6:63:a7:76:78:27:dd:54:5a:e8:5d:f3:71:
1b:b7:95:25:cd:9f:e4:90:f9:29:20:dd:e0:b1:bd:f0:63:9b:
1f:51:9a:1f:49:10:8f:af:f8:26:10:f0:de:36:0c:6d:af:d7:
3f:06:36:5b
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQijYzmUFsst5wfzuw0XdrGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZmY1YjNjZGFmMmVhZDFiYzMzMDk0MTFiZjk0OTJjZDk4
N2FmYmEwHhcNMjUwMTAxMTU0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Yjc0ZDZmOWE0NTE4Y2RjMGUzYjQ4NDBmMDM1MzRlMGY3MzcyOTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Vm9HWZNxnoN4Lbo+X0hK9KySZ05
USl/YfIAhEXqtcQ9bO/4M1TcCB3fJy7rBhgyEWt3Vpj1xyzIAMpZ2hIm/uNOHCdb
OdYJyiD1ZOB2IwNNM1bciSqr+3fs+5NWwqGcEekrTdG0ps1aD037rmVuJXyFeEWU
NZ96Ihtx3lPx8VOu6X76V+d/tStNL7qChKlHaE5XKiYgOR5mgCCzxGgTjThnroni
+Q6AgnGiRJbKMPhNlNvo+NCJJacpAPYX1hprBwC2Pe6bZXZS6cXuIFFaEDMeFOgV
KCz8VlBwB/JR4mfDASbRVU3uzjLC0iPcoblDvhsCEPOURukB4t3xVjdsmQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFHt01vmkUYzcDjtIQPA1NOD3NylOMB8GA1UdIwQY
MBaAFM3/Wzza8urRvDMJQRv5SSzZh6+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemY5YlBOcnk2dEc4TXdsQkdfbEpMTm1IcjdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9iNzZkMzQtNWYwNy00MmQ4LWExMzEt
YTg3ODFhZGQyNDIzLzEvZTNUVy1hUlJqTndPTzBoQThEVTA0UGMzS1U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9iNzZkMzQtNWYwNy00MmQ4LWExMzEtYTg3ODFhZGQyNDIz
LzEvemY5YlBOcnk2dEc4TXdsQkdfbEpMTm1IcjdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADB93UD
BAPB93AwDQYJKoZIhvcNAQELBQADggEBAFukQbk6uphai1Zu+nL9ZKXtgyCPtsXm
prNNpEAGjo1leWQj+rs24tn4oQ+lUN382P5lQSuJU2d6gX+zDT9Y//RHaTVcdKRv
Py2vrTDN17J+/guRyAvfChA+bi9MGnQkVHbrTWZgcdQeAPGTLP1VobQNHpA7/loZ
mxo9RadrylUrIv/uPkucSnLqeooaBZq8buWSx+qShcUVu9pUdK+/PCZak5rEeL6Z
9AARsdEIUMgKN8sjDgMwVCRhSgI4DkziIpcnT2KxNcGMNn4n5mOndngn3VRa6F3z
cRu3lSXNn+SQ+Skg3eCxvfBjmx9Rmh9JEI+v+CYQ8N42DG2v1z8GNls=
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:32:26 2025 by rpki-client