Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/1-XJ4WDe0758yU9wZUnfLGFJMtZw.roa
File: 1-XJ4WDe0758yU9wZUnfLGFJMtZw.roa (raw, json)
Hash identifier: iyMp36nsbjSj5YslBXICZt3rWGYTsTCcztA146LUG2w=
Subject key identifier: F9:72:78:58:37:B4:EF:9F:32:53:DC:19:52:77:CB:18:52:4C:B5:9C
Certificate issuer: /CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Certificate serial: 018CC2DB060EDE3EFF39831ECFB554159FBF
Authority key identifier: 46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/1-XJ4WDe0758yU9wZUnfLGFJMtZw.roa
Signing time: Mon 01 Jan 2024 02:29:42 +0000
ROA not before: Mon 01 Jan 2024 02:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50078
IP address blocks: 77.95.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:06:0e:de:3e:ff:39:83:1e:cf:b5:54:15:9f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Validity
Not Before: Jan 1 02:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f972785837b4ef9f3253dc195277cb18524cb59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:20:bd:17:41:c6:47:3b:4b:84:4a:fa:a0:
25:06:41:88:89:bc:db:19:2d:7b:14:cf:50:94:8f:
c5:c2:7c:b0:20:d8:84:92:3d:a6:99:30:f8:86:4d:
bc:81:4b:20:2a:69:bf:ec:d8:76:ae:e5:f1:5e:a7:
eb:4d:e2:00:55:0a:70:bf:b7:b0:5b:f4:60:5c:06:
e6:e4:5d:5e:25:1f:a1:19:95:04:91:a8:c2:24:e7:
fd:c9:12:b1:ee:dc:57:60:47:6d:49:b0:de:a9:c4:
b5:9e:70:2f:c9:ad:8f:5f:4f:0c:f9:20:41:17:e3:
bf:7d:56:f4:34:9f:8c:c0:71:2b:b2:70:28:d7:85:
22:6f:29:59:7e:d8:ff:8d:40:77:d2:a9:93:cf:b8:
3a:18:1f:0d:82:e0:12:a1:8b:e7:ca:e0:67:6f:f5:
a4:43:00:be:86:d2:53:39:c3:e5:66:eb:af:13:90:
fe:e0:7f:4b:b6:56:8a:3f:a2:b1:58:90:a5:7e:50:
04:f5:56:56:71:e2:9a:d0:0f:86:b0:a6:75:4b:11:
f5:e8:06:93:fb:6f:70:7f:18:32:42:d5:d0:53:58:
8b:70:0c:f9:2b:a0:2e:3c:d0:05:9b:d5:e8:ab:36:
e3:f6:ce:e0:aa:78:1c:e9:e6:0a:33:a2:53:00:3c:
1c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:72:78:58:37:B4:EF:9F:32:53:DC:19:52:77:CB:18:52:4C:B5:9C
X509v3 Authority Key Identifier:
keyid:46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/1-XJ4WDe0758yU9wZUnfLGFJMtZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.112.0/24
Signature Algorithm: sha256WithRSAEncryption
01:5c:fe:d2:35:3c:2f:c8:fd:f1:25:81:a0:d7:e5:dd:dd:6e:
c6:48:3f:1c:b4:8a:54:51:c2:3f:67:d4:96:6a:0c:5a:0c:13:
aa:99:97:c4:71:b5:a8:04:01:3f:23:d9:dc:cd:4a:bd:82:4e:
9e:d0:d3:86:f0:0c:20:c6:2c:6c:4a:6b:62:d6:9b:e9:7e:8c:
03:4c:3f:6a:b8:b1:7b:6b:ed:11:f5:1c:d2:07:7a:ec:2e:ce:
a5:06:55:16:98:c0:b6:21:47:1b:96:bd:19:21:0e:5f:90:3d:
69:9d:5e:a4:d5:dc:5f:86:51:f7:d0:98:ec:2d:e3:82:cb:a5:
df:3f:02:5b:74:d5:1d:87:b7:f1:b1:b3:44:8e:d8:5b:66:37:
ef:24:94:8f:06:e9:7e:5a:01:9b:c6:2d:a2:bc:91:26:a4:9d:
8e:56:e9:98:e4:b6:8d:24:03:64:de:29:2d:a6:b5:73:a4:1b:
f3:70:b8:c4:e9:66:b5:d6:b5:58:c9:e5:9a:e0:0b:2a:0f:e9:
b2:14:3b:3b:d9:e1:f7:6e:16:42:61:18:86:59:00:bf:e2:97:
15:a5:e8:1a:16:c7:b5:a2:8d:46:8f:e0:fb:16:32:3c:13:5b:
b0:ba:91:8b:07:90:1b:a1:6b:f7:8d:55:64:f4:06:cc:18:64:
1a:ec:ca:2b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzC2wYO3j7/OYMez7VUFZ+/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NWM2MmM2YmNkNGNmYjg5MzNiY2I2YTYxY2Y3YjNkYWQy
ZmIxMTgwHhcNMjQwMTAxMDIyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTcyNzg1ODM3YjRlZjlmMzI1M2RjMTk1Mjc3Y2IxODUyNGNiNTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1wgvRdBxkc7S4RK+qAlBkGIibzb
GS17FM9QlI/FwnywINiEkj2mmTD4hk28gUsgKmm/7Nh2ruXxXqfrTeIAVQpwv7ew
W/RgXAbm5F1eJR+hGZUEkajCJOf9yRKx7txXYEdtSbDeqcS1nnAvya2PX08M+SBB
F+O/fVb0NJ+MwHErsnAo14UibylZftj/jUB30qmTz7g6GB8NguASoYvnyuBnb/Wk
QwC+htJTOcPlZuuvE5D+4H9LtlaKP6KxWJClflAE9VZWceKa0A+GsKZ1SxH16AaT
+29wfxgyQtXQU1iLcAz5K6AuPNAFm9Xoqzbj9s7gqngc6eYKM6JTADwcgQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPlyeFg3tO+fMlPcGVJ3yxhSTLWcMB8GA1UdIwQY
MBaAFEZcYsa81M+4kzvLamHPez2tL7EYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmx4aXhyelV6N2lUTzh0cVljOTdQYTB2c1JnLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80OWEyMjEtNjdmNS00ZWRkLWIwMGQt
NGQyYzRjNWFkMTRlLzEvMS1YSjRXRGUwNzU4eVU5d1pVbmZMR0ZKTXRady5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTgvNDlhMjIxLTY3ZjUtNGVkZC1iMDBkLTRkMmM0YzVhZDE0
ZS8xL1JseGl4cnpVejdpVE84dHFZYzk3UGEwdnNSZy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1fcDAN
BgkqhkiG9w0BAQsFAAOCAQEAAVz+0jU8L8j98SWBoNfl3d1uxkg/HLSKVFHCP2fU
lmoMWgwTqpmXxHG1qAQBPyPZ3M1KvYJOntDThvAMIMYsbEprYtab6X6MA0w/arix
e2vtEfUc0gd67C7OpQZVFpjAtiFHG5a9GSEOX5A9aZ1epNXcX4ZR99CY7C3jgsul
3z8CW3TVHYe38bGzRI7YW2Y37ySUjwbpfloBm8YtoryRJqSdjlbpmOS2jSQDZN4p
Laa1c6Qb83C4xOlmtda1WMnlmuALKg/pshQ7O9nh924WQmEYhlkAv+KXFaXoGhbH
taKNRo/g+xYyPBNbsLqRiweQG6Fr941VZPQGzBhkGuzKKw==
-----END CERTIFICATE-----
Generated at Sun Apr 13 07:00:31 2025 by rpki-client