Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/jqfgDn-ycK3457D7obUkakCk_hA.roa
File: jqfgDn-ycK3457D7obUkakCk_hA.roa (raw, json)
Hash identifier: aIDAraIDl1zCtiG5lE4DocRECzz8RX8Ly1LP/C1b52s=
Subject key identifier: 8E:A7:E0:0E:7F:B2:70:AD:F8:E7:B0:FB:A1:B5:24:6A:40:A4:FE:10
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC4256C055048E68608C4DB4189245442
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/jqfgDn-ycK3457D7obUkakCk_hA.roa
Signing time: Mon 01 Jan 2024 08:30:35 +0000
ROA not before: Mon 01 Jan 2024 08:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208393
IP address blocks: 193.221.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:6c:05:50:48:e6:86:08:c4:db:41:89:24:54:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ea7e00e7fb270adf8e7b0fba1b5246a40a4fe10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3a:5d:17:c0:6c:4e:e2:72:13:c0:f9:11:ee:
3f:6f:26:43:8f:0e:03:4b:65:4c:c2:17:8d:3f:14:
53:00:ee:dd:ec:25:49:c6:82:f9:8b:b4:88:1b:61:
cf:f0:f8:9a:a0:a7:9b:a5:d6:a7:7a:6b:64:7a:99:
90:0f:b6:37:09:81:36:6d:f1:bc:0c:64:0d:94:d0:
a6:64:d5:d8:b9:0b:14:b9:d3:59:64:2d:cc:ff:ef:
85:49:cc:ab:33:76:52:f3:08:35:d0:32:d3:96:36:
27:4f:f0:0a:aa:c1:7f:80:c3:dc:6e:f6:21:b0:69:
57:d6:4b:c7:9a:9d:a9:9b:e4:7a:77:d2:47:2a:ed:
94:9b:bc:ba:1e:e7:06:24:d5:e0:f3:74:15:dd:0b:
25:73:3e:d2:b6:b1:38:9e:33:c0:ea:c0:83:bb:f6:
74:dc:0a:63:e1:0d:ab:91:48:75:f6:9a:73:de:a1:
fb:6b:4e:89:4d:01:67:81:ce:48:f9:8a:31:f2:91:
70:94:9b:55:45:98:63:d8:03:c9:99:1c:05:95:06:
18:7b:68:28:6d:10:a8:0b:a2:5a:55:66:9c:2d:13:
26:80:9c:34:fe:ee:56:ca:52:3e:e4:85:ab:e7:6e:
c7:73:4d:73:81:a7:00:70:97:1b:ac:57:df:18:4d:
33:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A7:E0:0E:7F:B2:70:AD:F8:E7:B0:FB:A1:B5:24:6A:40:A4:FE:10
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/jqfgDn-ycK3457D7obUkakCk_hA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.221.192.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:bd:e1:61:2e:1e:3a:87:82:25:b3:99:a8:49:ad:ab:35:7b:
01:04:b7:1b:25:20:b8:85:7d:9a:32:fb:12:fa:a0:6f:8d:1c:
81:49:e6:9d:59:51:90:eb:9a:16:be:71:9c:de:64:3b:b9:b7:
20:51:19:79:a3:d3:7e:56:6b:0e:ed:9a:55:93:d4:be:eb:12:
ed:d6:ff:5a:af:f4:e9:77:48:bd:af:9f:07:7e:dc:e2:01:9a:
52:b8:7d:78:17:22:a8:0c:0e:12:fa:26:4d:19:24:79:57:d5:
44:98:ce:29:30:b3:54:1b:7b:74:17:18:35:2c:16:7d:1f:94:
13:80:8a:27:1c:3e:a3:ea:35:5b:6f:44:d3:c2:7c:ed:69:6a:
10:d8:26:04:c9:fc:39:4e:c2:64:85:b9:a9:07:ec:c2:c0:b1:
51:e7:d7:28:57:a8:f3:05:ec:7e:42:12:86:cc:59:b8:33:15:
14:24:48:2d:0a:63:f0:42:47:10:43:25:b0:a2:54:58:2f:27:
8b:09:9b:64:3e:8f:33:69:e0:ca:97:e9:c6:b8:ad:73:9b:11:
6c:fd:c9:df:20:2f:4a:80:91:7c:b9:51:4e:dd:4a:dc:ca:5d:
14:ac:d0:e0:d0:2b:80:81:3f:2b:0d:51:e2:ab:2b:5c:d0:63:
5a:d6:73:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJWwFUEjmhgjE20GJJFRCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjQwMTAxMDgzMDM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWE3ZTAwZTdmYjI3MGFkZjhlN2IwZmJhMWI1MjQ2YTQwYTRmZTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTpdF8BsTuJyE8D5Ee4/byZDjw4D
S2VMwheNPxRTAO7d7CVJxoL5i7SIG2HP8PiaoKebpdanemtkepmQD7Y3CYE2bfG8
DGQNlNCmZNXYuQsUudNZZC3M/++FScyrM3ZS8wg10DLTljYnT/AKqsF/gMPcbvYh
sGlX1kvHmp2pm+R6d9JHKu2Um7y6HucGJNXg83QV3Qslcz7StrE4njPA6sCDu/Z0
3Apj4Q2rkUh19ppz3qH7a06JTQFngc5I+Yox8pFwlJtVRZhj2APJmRwFlQYYe2go
bRCoC6JaVWacLRMmgJw0/u5WylI+5IWr527Hc01zgacAcJcbrFffGE0z3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI6n4A5/snCt+Oew+6G1JGpApP4QMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvanFmZ0RuLXljSzM0NTdEN29iVWtha0NrX2hBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd3AMA0G
CSqGSIb3DQEBCwUAA4IBAQBNveFhLh46h4Ils5moSa2rNXsBBLcbJSC4hX2aMvsS
+qBvjRyBSeadWVGQ65oWvnGc3mQ7ubcgURl5o9N+VmsO7ZpVk9S+6xLt1v9ar/Tp
d0i9r58HftziAZpSuH14FyKoDA4S+iZNGSR5V9VEmM4pMLNUG3t0Fxg1LBZ9H5QT
gIonHD6j6jVbb0TTwnztaWoQ2CYEyfw5TsJkhbmpB+zCwLFR59coV6jzBex+QhKG
zFm4MxUUJEgtCmPwQkcQQyWwolRYLyeLCZtkPo8zaeDKl+nGuK1zmxFs/cnfIC9K
gJF8uVFO3Urcyl0UrNDg0CuAgT8rDVHiqytc0GNa1nOY
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:10 2025 by rpki-client