Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/_p-9fgudHIZEXk_FjfZ6bJlqs3I.roa
File: _p-9fgudHIZEXk_FjfZ6bJlqs3I.roa (raw, json)
Hash identifier: cYN+jJGMxmyEUAY6d+yPXNWcndAmck5LwWSKEFSsmVo=
Subject key identifier: FE:9F:BD:7E:0B:9D:1C:86:44:5E:4F:C5:8D:F6:7A:6C:99:6A:B3:72
Certificate issuer: /CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Certificate serial: 018F591718DC1CED647CE888F6C4BA417ABA
Authority key identifier: 06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/_p-9fgudHIZEXk_FjfZ6bJlqs3I.roa
Signing time: Wed 08 May 2024 16:43:56 +0000
ROA not before: Wed 08 May 2024 16:43:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 195.66.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jun 2024 04:13:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:59:17:18:dc:1c:ed:64:7c:e8:88:f6:c4:ba:41:7a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Validity
Not Before: May 8 16:43:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe9fbd7e0b9d1c86445e4fc58df67a6c996ab372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:92:60:3b:09:a2:1e:4c:c8:e0:0d:40:df:97:
6e:c4:a1:e5:92:48:d0:19:d6:bc:d7:88:2e:9f:1d:
b5:a2:86:35:16:52:cf:74:9e:f0:22:01:27:45:ee:
0f:45:4a:1c:d1:ce:6d:0c:bd:84:bc:64:ad:20:b5:
69:17:84:12:c3:c5:63:17:fa:b8:39:2c:fe:94:b2:
80:07:b3:c9:74:b5:0c:70:b8:b9:61:9e:fb:31:05:
5d:0e:d7:53:02:a0:c0:e8:01:67:78:8b:8a:7a:8e:
06:e9:e3:d9:0a:ce:47:8e:85:74:70:3b:81:7e:f4:
f1:26:03:c4:db:65:b4:51:c2:fc:94:dc:1d:a5:94:
8f:6a:55:81:7f:21:4a:74:a9:e8:25:f0:ed:06:55:
c3:b6:5e:4e:f8:c0:9e:e5:9e:9c:86:09:f5:c4:fb:
fe:30:1d:2b:50:88:0d:f1:e6:3d:54:14:78:28:60:
13:f4:0d:45:e1:af:9d:30:a0:83:52:37:aa:64:af:
5d:4b:79:35:d4:b1:27:54:69:ca:a8:10:83:f5:1d:
68:08:6a:12:9e:05:20:6d:33:b1:70:06:4c:62:7e:
7d:89:ea:01:31:16:97:a8:31:52:bc:f5:cd:d6:c4:
bb:10:ea:ba:f8:e2:d6:33:0b:b0:48:b1:41:06:2d:
52:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9F:BD:7E:0B:9D:1C:86:44:5E:4F:C5:8D:F6:7A:6C:99:6A:B3:72
X509v3 Authority Key Identifier:
keyid:06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/_p-9fgudHIZEXk_FjfZ6bJlqs3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.101.0/24
Signature Algorithm: sha256WithRSAEncryption
41:ca:2b:a4:02:d3:d0:0a:a6:dc:06:12:cd:95:83:20:61:13:
36:50:e6:a8:2e:1f:eb:44:14:87:ad:5b:73:2b:86:ce:92:8c:
53:9d:4d:f2:ef:df:d9:2b:0a:49:b1:8d:9b:77:ea:cd:bb:25:
56:1a:a3:02:b9:cb:15:1b:ed:e5:e2:53:af:81:60:85:54:08:
28:96:65:10:6c:dd:78:1d:c9:d4:54:8c:65:ab:f7:61:ce:40:
cc:97:42:44:00:d1:d5:fd:66:e5:a3:f0:96:49:16:b3:c6:bb:
e0:5b:e7:25:84:d8:56:12:35:03:16:44:8e:4d:d5:fa:3b:36:
13:a9:1c:d6:8b:af:96:21:dc:5e:4b:4f:c1:4e:50:64:3f:09:
22:be:af:ec:6e:06:31:b7:f1:ef:b6:61:73:dc:89:d0:f5:d0:
7c:da:15:33:0e:e8:37:bf:88:c0:53:40:61:b3:65:75:e3:c4:
6b:56:e5:f1:f7:b0:67:48:64:27:10:70:27:d0:5c:b5:5a:19:
4b:0a:41:29:e5:cb:dd:87:60:97:5d:cb:0e:0d:b6:9d:9a:e9:
50:dd:61:bf:b8:ac:f5:22:77:6e:2c:f9:94:f3:13:9e:f2:b7:
12:e3:ef:d9:e1:ac:f9:32:99:9b:ba:17:46:71:a9:d7:18:02:
60:d6:be:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY9ZFxjcHO1kfOiI9sS6QXq6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NWE0NzBkYmFiOWMxYzMzNGYwZjg1ZjQxN2NkMWFhNDI1
ZTlmMTMwHhcNMjQwNTA4MTY0MzU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTlmYmQ3ZTBiOWQxYzg2NDQ1ZTRmYzU4ZGY2N2E2Yzk5NmFiMzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZJgOwmiHkzI4A1A35duxKHlkkjQ
Gda814gunx21ooY1FlLPdJ7wIgEnRe4PRUoc0c5tDL2EvGStILVpF4QSw8VjF/q4
OSz+lLKAB7PJdLUMcLi5YZ77MQVdDtdTAqDA6AFneIuKeo4G6ePZCs5HjoV0cDuB
fvTxJgPE22W0UcL8lNwdpZSPalWBfyFKdKnoJfDtBlXDtl5O+MCe5Z6chgn1xPv+
MB0rUIgN8eY9VBR4KGAT9A1F4a+dMKCDUjeqZK9dS3k11LEnVGnKqBCD9R1oCGoS
ngUgbTOxcAZMYn59ieoBMRaXqDFSvPXN1sS7EOq6+OLWMwuwSLFBBi1SlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP6fvX4LnRyGRF5PxY32emyZarNyMB8GA1UdIwQY
MBaAFAZaRw26ucHDNPD4X0F80apCXp8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmxwSERicTV3Y00wOFBoZlFYelJxa0plbnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zNzVhNjctOGM0ZS00YTQ2LTk5Y2Mt
NjUwNzhhN2Y2NWI4LzEvX3AtOWZndWRISVpFWGtfRmpmWjZiSmxxczNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zNzVhNjctOGM0ZS00YTQ2LTk5Y2MtNjUwNzhhN2Y2NWI4
LzEvQmxwSERicTV3Y00wOFBoZlFYelJxa0plbnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0JlMA0G
CSqGSIb3DQEBCwUAA4IBAQBByiukAtPQCqbcBhLNlYMgYRM2UOaoLh/rRBSHrVtz
K4bOkoxTnU3y79/ZKwpJsY2bd+rNuyVWGqMCucsVG+3l4lOvgWCFVAgolmUQbN14
HcnUVIxlq/dhzkDMl0JEANHV/Wblo/CWSRazxrvgW+clhNhWEjUDFkSOTdX6OzYT
qRzWi6+WIdxeS0/BTlBkPwkivq/sbgYxt/HvtmFz3InQ9dB82hUzDug3v4jAU0Bh
s2V148RrVuXx97BnSGQnEHAn0Fy1WhlLCkEp5cvdh2CXXcsODbadmulQ3WG/uKz1
InduLPmU8xOe8rcS4+/Z4az5MpmbuhdGcanXGAJg1r6R
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:39:10 2025 by rpki-client