Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/neSQNNU7rJHIXObUQUCKURYY1tQ.roa
File: neSQNNU7rJHIXObUQUCKURYY1tQ.roa (raw, json)
Hash identifier: muQsdcH03xPIn7cYBnc50RPbnlB1ezCtt0cuOlD6Y3I=
Subject key identifier: 9D:E4:90:34:D5:3B:AC:91:C8:5C:E6:D4:41:40:8A:51:16:18:D6:D4
Certificate issuer: /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial: 01939385F60A18C8BE3D54134876324E5B73
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/neSQNNU7rJHIXObUQUCKURYY1tQ.roa
Signing time: Wed 04 Dec 2024 21:14:10 +0000
ROA not before: Wed 04 Dec 2024 21:14:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59437
IP address blocks: 91.226.226.0/24 maxlen: 24
2a0c:3c80::/29 maxlen: 32
2a0c:3c80::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 04 Dec 2024 21:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:93:85:f6:0a:18:c8:be:3d:54:13:48:76:32:4e:5b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
Validity
Not Before: Dec 4 21:14:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9de49034d53bac91c85ce6d441408a511618d6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d4:a6:15:62:6d:c2:0a:90:f6:33:87:7f:a7:
72:a5:f9:e9:c1:1e:e2:7a:e9:f6:b2:36:67:25:07:
95:c5:3f:54:cc:87:3b:40:39:05:a1:1b:db:0b:57:
c0:e2:3f:49:3a:3c:e8:ff:b8:b2:3b:51:99:bd:46:
b8:9b:c5:94:cf:46:c9:23:e1:2b:6b:91:99:7a:61:
24:f3:8c:d0:a0:51:2d:2a:ba:5b:d7:41:c4:58:67:
98:9c:e5:4e:e8:5a:60:26:91:08:dc:65:7f:79:8e:
2d:1e:a6:a0:48:23:14:5d:bb:b0:2b:e8:4d:29:dc:
dd:84:05:16:d2:39:42:e9:0f:23:a8:e4:70:66:d2:
3a:f5:71:f3:5b:df:3c:8a:29:31:52:46:8e:a2:cf:
68:0d:39:cf:56:c3:dd:23:18:f4:6c:db:53:1b:36:
a3:cb:1f:15:2b:84:48:81:66:f7:e6:b4:88:97:3e:
46:77:39:b3:af:54:ac:a3:65:f0:c0:84:a2:7b:d2:
d5:c5:94:26:d5:f1:04:6a:d3:65:c7:59:e1:ce:e0:
1c:68:fc:63:99:01:96:d3:16:12:63:c7:ff:66:11:
46:3c:95:f8:c6:c3:f3:b6:5d:31:04:f1:b7:7e:be:
d7:1d:bf:22:fa:4a:07:b4:c3:db:2b:18:1a:a2:12:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E4:90:34:D5:3B:AC:91:C8:5C:E6:D4:41:40:8A:51:16:18:D6:D4
X509v3 Authority Key Identifier:
keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/neSQNNU7rJHIXObUQUCKURYY1tQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.226.0/24
IPv6:
2a0c:3c80::/29
Signature Algorithm: sha256WithRSAEncryption
01:2f:ca:ae:27:31:e6:09:10:95:ed:74:40:71:13:b8:05:77:
d4:cc:91:27:da:69:4e:6f:11:e7:fc:0f:be:cb:42:eb:ba:9c:
52:9a:89:1c:7d:14:bb:f0:1a:41:ee:c6:61:59:4d:64:04:f9:
32:a1:c7:77:65:66:d3:2d:ee:1a:bf:52:08:e7:ff:a2:64:f4:
fd:64:7c:26:d2:05:a5:4f:05:d5:eb:e4:bc:16:61:25:6e:1f:
cf:50:83:74:dc:bb:1e:18:98:70:e3:37:ab:ea:36:a2:a4:ba:
6d:45:31:80:d0:26:08:a9:e3:91:88:89:b3:35:5a:46:29:65:
00:ee:43:50:b0:0a:83:d9:21:7b:9f:ab:f5:21:df:cc:f4:be:
7a:6d:49:e1:f8:c4:89:7e:c6:ff:c4:11:c5:42:ee:1e:5e:7a:
5d:76:f2:d6:28:35:f2:eb:3f:14:69:cd:c6:c2:9f:ba:d3:4b:
b5:c7:c6:18:fb:03:f2:93:0a:3a:7a:06:91:2a:06:56:2c:5f:
a2:09:8f:14:22:0a:5e:5a:da:21:8c:03:e3:e4:64:e9:1a:1a:
6f:0b:06:e9:ef:2a:ca:60:a1:4d:a9:ce:b7:ba:90:60:e6:38:
cb:94:c0:89:78:3f:d8:e2:01:4c:b6:6f:1c:7f:22:b5:7e:47:
16:bd:a9:a6
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZOThfYKGMi+PVQTSHYyTltzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMTIyZTAzYTg0MWI4ODc4OTYzYWZmZmY2OTVjYTRmOWZk
MDY4MmMwHhcNMjQxMjA0MjExNDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGU0OTAzNGQ1M2JhYzkxYzg1Y2U2ZDQ0MTQwOGE1MTE2MThkNmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNSmFWJtwgqQ9jOHf6dypfnpwR7i
eun2sjZnJQeVxT9UzIc7QDkFoRvbC1fA4j9JOjzo/7iyO1GZvUa4m8WUz0bJI+Er
a5GZemEk84zQoFEtKrpb10HEWGeYnOVO6FpgJpEI3GV/eY4tHqagSCMUXbuwK+hN
KdzdhAUW0jlC6Q8jqORwZtI69XHzW988iikxUkaOos9oDTnPVsPdIxj0bNtTGzaj
yx8VK4RIgWb35rSIlz5Gdzmzr1Sso2XwwISie9LVxZQm1fEEatNlx1nhzuAcaPxj
mQGW0xYSY8f/ZhFGPJX4xsPztl0xBPG3fr7XHb8i+koHtMPbKxgaohIg0QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJ3kkDTVO6yRyFzm1EFAilEWGNbUMB8GA1UdIwQY
MBaAFFMSLgOoQbiHiWOv//aVyk+f0GgsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXhJdUE2aEJ1SWVKWTZfXzlwWEtUNV9RYUN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mNTM5Y2ItMTRiZi00OGEyLWE4MzUt
Y2U4ZDJkZDQzMDY2LzEvbmVTUU5OVTdySkhJWE9iVVFVQ0tVUllZMXRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mNTM5Y2ItMTRiZi00OGEyLWE4MzUtY2U4ZDJkZDQzMDY2
LzEvVXhJdUE2aEJ1SWVKWTZfXzlwWEtUNV9RYUN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW+LiMA0E
AgACMAcDBQMqDDyAMA0GCSqGSIb3DQEBCwUAA4IBAQABL8quJzHmCRCV7XRAcRO4
BXfUzJEn2mlObxHn/A++y0LrupxSmokcfRS78BpB7sZhWU1kBPkyocd3ZWbTLe4a
v1II5/+iZPT9ZHwm0gWlTwXV6+S8FmElbh/PUIN03LseGJhw4zer6jaipLptRTGA
0CYIqeORiImzNVpGKWUA7kNQsAqD2SF7n6v1Id/M9L56bUnh+MSJfsb/xBHFQu4e
XnpddvLWKDXy6z8Uac3Gwp+600u1x8YY+wPykwo6egaRKgZWLF+iCY8UIgpeWtoh
jAPj5GTpGhpvCwbp7yrKYKFNqc63upBg5jjLlMCJeD/Y4gFMtm8cfyK1fkcWvamm
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:36:11 2025 by rpki-client