Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/9s4tRVqvQ35hgQaI6DS0iWkrasc.roa
File: 9s4tRVqvQ35hgQaI6DS0iWkrasc.roa (raw, json)
Hash identifier: hyaA+88gyiO6xcoaHMPKaKuPDUH9c9lDFJaYJ936+NY=
Subject key identifier: F6:CE:2D:45:5A:AF:43:7E:61:81:06:88:E8:34:B4:89:69:2B:6A:C7
Certificate issuer: /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial: 018CC26D56CFAD7660A6A45AA2813AB7F5CF
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/9s4tRVqvQ35hgQaI6DS0iWkrasc.roa
Signing time: Mon 01 Jan 2024 00:29:54 +0000
ROA not before: Mon 01 Jan 2024 00:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40065
IP address blocks: 193.134.208.0/24 maxlen: 24
193.134.209.0/24 maxlen: 24
193.134.210.0/24 maxlen: 24
193.134.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:56:cf:ad:76:60:a6:a4:5a:a2:81:3a:b7:f5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
Validity
Not Before: Jan 1 00:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6ce2d455aaf437e61810688e834b489692b6ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:a0:b0:d6:59:b3:40:6d:97:63:07:c2:ff:
f6:a6:1d:a7:13:6f:17:98:ea:e4:32:34:b3:61:e2:
33:ab:9a:7a:90:f0:f1:f2:83:ec:da:35:a0:21:e1:
36:eb:97:14:c2:d9:c5:fa:99:db:3f:49:79:c5:a2:
07:f6:82:9d:59:ec:09:0a:da:f4:15:05:53:6b:de:
19:fa:6a:5e:a0:bd:21:d8:8a:37:37:20:88:72:f6:
40:92:f5:bd:ae:48:78:3d:cd:2d:7b:04:3e:8c:34:
1a:60:0d:0c:0c:e7:b9:60:2c:45:2b:c6:a1:b9:db:
f7:d6:00:82:59:71:16:ba:ad:97:19:e3:a8:67:5e:
1d:ab:5c:25:7f:c5:07:8c:bf:a4:8b:ea:24:99:4c:
89:0b:95:99:b9:55:3a:f9:e3:2b:09:a8:3b:63:37:
15:d6:53:a6:11:a2:62:2d:8d:1a:ed:cc:77:86:4c:
2c:e8:0c:2b:d9:c4:7d:52:0c:93:d1:24:93:99:22:
13:4f:2e:5e:64:23:d6:af:f7:ce:84:d6:bf:98:6f:
60:1c:79:50:4a:a1:28:83:52:75:c1:af:08:44:1d:
98:03:9f:c1:08:89:25:05:ff:51:69:11:7d:77:d2:
d7:5b:b8:32:01:f7:67:4e:b5:44:00:b6:c5:3d:e9:
48:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CE:2D:45:5A:AF:43:7E:61:81:06:88:E8:34:B4:89:69:2B:6A:C7
X509v3 Authority Key Identifier:
keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/9s4tRVqvQ35hgQaI6DS0iWkrasc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.208.0/22
Signature Algorithm: sha256WithRSAEncryption
47:68:f9:c6:78:03:fc:62:0d:9a:6b:ab:1f:66:8e:02:43:08:
e2:dc:3b:70:b0:43:e0:f4:3a:c9:90:b5:91:63:8d:5a:ae:62:
eb:71:c1:bd:4f:15:69:ef:9f:92:53:2c:9c:5c:b0:a9:e0:5d:
67:3a:87:29:5f:1e:06:ab:e0:57:b1:77:f8:84:14:82:e9:2c:
82:3f:a7:fe:6f:01:60:71:f1:01:bc:41:db:b1:e2:71:4b:a6:
1a:6a:a2:af:d1:e4:52:ca:55:35:17:de:27:10:c3:e0:99:cb:
3a:2a:18:04:f4:7c:79:8f:a4:2b:39:cb:1b:3f:a8:3e:12:22:
f2:2e:8d:89:e1:d3:30:2b:cf:fd:36:13:b0:31:0c:70:39:8c:
69:ae:d9:b1:f7:c3:ff:ca:56:89:d0:f1:13:59:c2:09:30:6d:
48:a3:3a:47:6a:e0:6d:a0:c4:0f:9a:ee:77:4c:87:96:cb:17:
7c:62:87:b5:7e:61:98:2f:7c:be:ba:14:e1:47:5b:a1:0f:8e:
c6:d6:c9:92:f2:b0:c7:ed:a9:da:63:ad:5f:dc:bf:3a:dc:f6:
1b:ae:79:bd:c9:2f:ac:5d:1a:5c:5f:1c:10:34:af:41:6a:f2:
23:91:2f:c0:41:70:95:0d:7d:28:de:70:44:66:fa:08:56:81:
0b:68:64:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbVbPrXZgpqRaooE6t/XPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NzI0NWQwNDkyZWVkZTU5YjA0NWI1YmUxZmQ0ZWI5MTYx
YmM0MTcwHhcNMjQwMTAxMDAyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmNlMmQ0NTVhYWY0MzdlNjE4MTA2ODhlODM0YjQ4OTY5MmI2YWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmICgsNZZs0Btl2MHwv/2ph2nE28X
mOrkMjSzYeIzq5p6kPDx8oPs2jWgIeE265cUwtnF+pnbP0l5xaIH9oKdWewJCtr0
FQVTa94Z+mpeoL0h2Io3NyCIcvZAkvW9rkh4Pc0tewQ+jDQaYA0MDOe5YCxFK8ah
udv31gCCWXEWuq2XGeOoZ14dq1wlf8UHjL+ki+okmUyJC5WZuVU6+eMrCag7YzcV
1lOmEaJiLY0a7cx3hkws6Awr2cR9UgyT0SSTmSITTy5eZCPWr/fOhNa/mG9gHHlQ
SqEog1J1wa8IRB2YA5/BCIklBf9RaRF9d9LXW7gyAfdnTrVEALbFPelIowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPbOLUVar0N+YYEGiOg0tIlpK2rHMB8GA1UdIwQY
MBaAFDlyRdBJLu3lmwRbW+H9TrkWG8QXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEt
YzQ0MmExOGYxZWZjLzEvOXM0dFJWcXZRMzVoZ1FhSTZEUzBpV2tyYXNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEtYzQ0MmExOGYxZWZj
LzEvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwYbQMA0G
CSqGSIb3DQEBCwUAA4IBAQBHaPnGeAP8Yg2aa6sfZo4CQwji3DtwsEPg9DrJkLWR
Y41armLrccG9TxVp75+SUyycXLCp4F1nOocpXx4Gq+BXsXf4hBSC6SyCP6f+bwFg
cfEBvEHbseJxS6YaaqKv0eRSylU1F94nEMPgmcs6KhgE9Hx5j6QrOcsbP6g+EiLy
Lo2J4dMwK8/9NhOwMQxwOYxprtmx98P/ylaJ0PETWcIJMG1IozpHauBtoMQPmu53
TIeWyxd8Yoe1fmGYL3y+uhThR1uhD47G1smS8rDH7anaY61f3L863PYbrnm9yS+s
XRpcXxwQNK9BavIjkS/AQXCVDX0o3nBEZvoIVoELaGSK
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:33 2025 by rpki-client