Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/cp3RqJOTi4_npd0Ep9c0Pe2QK3E.roa
File: cp3RqJOTi4_npd0Ep9c0Pe2QK3E.roa (raw, json)
Hash identifier: Fd6YGYo8Ed3iORY+YveqJhgJC9f0A4/IA+BvDb4IA7M=
Subject key identifier: 72:9D:D1:A8:93:93:8B:8F:E7:A5:DD:04:A7:D7:34:3D:ED:90:2B:71
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 018CC8DF25A8335830E5C00DA87969D24FE9
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/cp3RqJOTi4_npd0Ep9c0Pe2QK3E.roa
Signing time: Tue 02 Jan 2024 06:31:56 +0000
ROA not before: Tue 02 Jan 2024 06:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202960
IP address blocks: 178.175.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:25:a8:33:58:30:e5:c0:0d:a8:79:69:d2:4f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jan 2 06:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=729dd1a893938b8fe7a5dd04a7d7343ded902b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bf:1b:a9:88:4a:14:88:b9:45:90:41:f0:37:
6d:d3:37:77:ce:4b:4f:df:5d:09:7e:71:51:94:e4:
b4:5e:40:7e:7e:6b:f6:b4:d0:90:0d:da:1d:3e:96:
96:8d:a3:ad:c0:74:20:19:01:40:3f:5b:2b:27:ad:
71:ff:64:8c:f3:60:90:2e:fb:56:16:f7:eb:d4:5f:
13:e1:47:a2:34:37:85:3b:04:5f:ca:b8:0e:99:10:
f3:e3:a3:67:ce:8b:7e:27:e2:0b:65:2e:7c:2e:75:
7c:85:3e:f3:a9:14:8b:f7:78:27:59:b0:d8:ff:56:
a1:96:aa:73:0b:57:73:14:18:7d:9f:61:27:d6:02:
4c:91:7b:50:dc:75:7b:c4:bc:22:20:6a:f9:fd:91:
d8:8b:c0:c8:8b:7e:aa:95:52:2a:2c:ed:8b:20:b1:
a4:3e:77:fc:3c:49:d2:be:67:92:ad:75:3d:48:54:
ee:d0:85:67:0a:4c:2b:5e:a7:31:1c:66:7d:3c:20:
57:12:55:1a:7f:e2:ad:57:d2:21:20:39:d5:f8:97:
bf:d1:73:92:4e:c6:57:05:5f:0a:e4:3c:e5:ba:09:
4f:c2:1d:99:7e:4b:70:03:e1:bd:11:f1:bc:62:24:
e2:ad:16:4b:a1:5c:2c:c0:3d:62:de:ec:e9:5e:f2:
4a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9D:D1:A8:93:93:8B:8F:E7:A5:DD:04:A7:D7:34:3D:ED:90:2B:71
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/cp3RqJOTi4_npd0Ep9c0Pe2QK3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.152.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c9:0e:bf:fd:17:1d:64:af:82:67:1d:7c:f0:04:37:66:73:
e7:32:15:d9:57:66:eb:f8:21:59:9c:20:15:e6:15:10:4d:5c:
2c:da:fb:6d:d9:6f:78:ca:a4:bb:38:a5:bc:bd:0f:1f:dd:0f:
37:fa:bc:25:27:7f:7a:88:db:50:48:a4:7b:73:db:53:98:03:
a8:ea:3e:b9:3a:14:11:9e:d1:6c:09:c1:58:a0:48:56:7e:f5:
36:12:6b:04:26:f8:df:28:17:7a:d1:ed:22:82:80:39:89:41:
70:03:ed:d6:fc:39:ed:d4:dd:71:8a:58:ec:38:3e:31:02:89:
cd:2e:40:ca:6e:19:6c:f6:7f:0c:83:e5:bf:54:43:a5:20:40:
13:1d:19:25:0b:f1:31:7d:94:e8:2d:82:09:37:24:52:6d:9f:
8b:29:30:28:46:0e:ff:48:be:b7:4d:51:92:a8:b3:79:60:64:
8b:e7:ad:5c:cb:54:e9:c8:d9:f3:eb:42:a4:53:3a:d1:ad:ba:
84:ca:63:15:75:5e:77:b8:c2:a6:86:bb:25:ef:2d:91:04:8e:
ef:02:48:f2:6f:53:40:6f:36:06:b0:f5:f3:0d:31:c3:74:1b:
52:06:82:02:ee:05:dc:0f:8f:91:6e:49:00:8e:58:91:64:ee:
81:eb:46:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3yWoM1gw5cANqHlp0k/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0
ZGFiN2YwHhcNMjQwMTAyMDYzMTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjlkZDFhODkzOTM4YjhmZTdhNWRkMDRhN2Q3MzQzZGVkOTAyYjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb8bqYhKFIi5RZBB8Ddt0zd3zktP
310JfnFRlOS0XkB+fmv2tNCQDdodPpaWjaOtwHQgGQFAP1srJ61x/2SM82CQLvtW
Fvfr1F8T4UeiNDeFOwRfyrgOmRDz46Nnzot+J+ILZS58LnV8hT7zqRSL93gnWbDY
/1ahlqpzC1dzFBh9n2En1gJMkXtQ3HV7xLwiIGr5/ZHYi8DIi36qlVIqLO2LILGk
Pnf8PEnSvmeSrXU9SFTu0IVnCkwrXqcxHGZ9PCBXElUaf+KtV9IhIDnV+Je/0XOS
TsZXBV8K5DzluglPwh2ZfktwA+G9EfG8YiTirRZLoVwswD1i3uzpXvJKJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHKd0aiTk4uP56XdBKfXND3tkCtxMB8GA1UdIwQY
MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct
OWRkNmU4OGZjYzhkLzEvY3AzUnFKT1RpNF9ucGQwRXA5YzBQZTJRSzNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk
LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsq+YMA0G
CSqGSIb3DQEBCwUAA4IBAQClyQ6//RcdZK+CZx188AQ3ZnPnMhXZV2br+CFZnCAV
5hUQTVws2vtt2W94yqS7OKW8vQ8f3Q83+rwlJ396iNtQSKR7c9tTmAOo6j65OhQR
ntFsCcFYoEhWfvU2EmsEJvjfKBd60e0igoA5iUFwA+3W/Dnt1N1xiljsOD4xAonN
LkDKbhls9n8Mg+W/VEOlIEATHRklC/ExfZToLYIJNyRSbZ+LKTAoRg7/SL63TVGS
qLN5YGSL561cy1TpyNnz60KkUzrRrbqEymMVdV53uMKmhrsl7y2RBI7vAkjyb1NA
bzYGsPXzDTHDdBtSBoIC7gXcD4+RbkkAjliRZO6B60bd
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:17 2025 by rpki-client