Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/N91h4j_yISK-BxsPaFXPeKumKOo.roa
File: N91h4j_yISK-BxsPaFXPeKumKOo.roa (raw, json)
Hash identifier: ANe+z5YXVLMK8rGFWTFz8CKin02kLx4UiCpMo4rXHxk=
Subject key identifier: 37:DD:61:E2:3F:F2:21:22:BE:07:1B:0F:68:55:CF:78:AB:A6:28:EA
Certificate issuer: /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial: 018CC9BCC60B5DB59770415FBEC3C560FB3F
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/N91h4j_yISK-BxsPaFXPeKumKOo.roa
Signing time: Tue 02 Jan 2024 10:34:00 +0000
ROA not before: Tue 02 Jan 2024 10:34:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59521
IP address blocks: 82.163.44.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:c6:0b:5d:b5:97:70:41:5f:be:c3:c5:60:fb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Validity
Not Before: Jan 2 10:34:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37dd61e23ff22122be071b0f6855cf78aba628ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fd:7e:5b:c6:c9:f9:bc:c8:f3:92:87:41:58:
3f:d5:75:64:9f:07:10:bb:b7:d0:a3:8b:bb:c7:84:
a4:c8:40:fb:fb:1b:6e:7f:92:9d:56:33:cd:c4:cd:
51:53:97:b4:61:d7:90:34:d6:10:fd:59:9b:8c:c2:
e0:97:17:e1:b3:c5:87:1b:fd:c4:b6:11:1b:db:4c:
4e:c1:88:e8:be:8e:fe:9b:09:7a:1e:4d:4a:2c:b5:
0e:26:49:16:7c:84:9f:1c:0f:c0:92:93:05:61:c2:
e7:d2:4a:f9:b4:4c:2b:61:c5:4f:aa:9a:f1:a0:64:
b5:12:97:ee:06:37:cc:7c:df:8f:01:ae:83:38:96:
1a:7b:b7:3f:4a:b3:31:cf:43:e4:9a:b3:9d:c8:1b:
25:c0:b8:80:6f:26:b2:d4:fd:da:5e:46:df:60:31:
53:16:15:b8:9a:1c:d6:31:5f:1d:3c:57:c8:9e:5e:
c9:d9:32:ff:a3:f8:70:8b:d6:56:9e:5a:ad:07:40:
f1:70:23:5e:22:33:3f:93:0f:95:ce:a7:e3:bd:70:
5d:b3:77:af:21:ba:4e:aa:dd:80:57:a4:e2:a8:41:
11:29:8f:c8:04:3d:f9:1c:9c:c3:2c:d0:21:eb:02:
ce:cd:31:cf:67:a3:1a:07:9b:cb:95:38:f1:8b:e0:
b3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DD:61:E2:3F:F2:21:22:BE:07:1B:0F:68:55:CF:78:AB:A6:28:EA
X509v3 Authority Key Identifier:
keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/N91h4j_yISK-BxsPaFXPeKumKOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.44.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:85:43:d7:51:21:98:74:ef:77:87:a0:7c:07:f5:7c:72:15:
18:43:96:5d:44:a3:e2:04:4e:b5:15:e2:43:93:d8:2f:1a:e6:
d7:07:7e:44:33:84:07:d4:da:85:9e:7e:2c:93:37:99:8c:40:
f9:de:15:4c:51:e9:e1:18:d4:22:ab:2b:d5:3a:ad:a3:d9:fe:
7a:88:8c:1c:cd:0f:73:66:1f:59:d7:d8:53:ad:36:0f:11:5e:
93:31:6d:50:ea:1f:a6:56:26:9b:8c:5b:b3:39:8d:90:b4:9b:
5e:97:22:2b:fa:15:56:6e:4a:46:eb:f0:1e:56:ec:cc:ca:82:
1f:72:06:25:c9:41:35:af:5d:82:7a:82:ed:f4:5e:3a:f4:28:
c8:1f:d4:d2:3a:4d:e1:9a:e7:2c:9a:24:4e:c6:41:d8:68:c7:
0e:ef:41:c6:2b:98:87:db:44:ea:f9:20:27:f8:d8:06:0e:f7:
ba:ad:ab:14:f8:81:c3:5d:6a:e5:cb:20:5f:d2:cb:07:b6:d2:
a1:6e:6d:ce:39:dc:46:95:55:ff:53:6a:f8:52:96:4d:3a:7a:
11:51:0f:d1:10:b8:ed:f3:73:2b:bf:f1:2c:5f:d4:b0:49:4c:
51:56:b8:f6:cb:3e:68:77:64:76:35:39:09:f3:79:97:9f:34:
03:d1:ad:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvMYLXbWXcEFfvsPFYPs/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiY2VlNDA0MDVhZWZiNmRhMTdhMzQwZWVmMTU5Y2U5YzRk
MTgzMjIwHhcNMjQwMTAyMTAzNDAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2RkNjFlMjNmZjIyMTIyYmUwNzFiMGY2ODU1Y2Y3OGFiYTYyOGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf1+W8bJ+bzI85KHQVg/1XVknwcQ
u7fQo4u7x4SkyED7+xtuf5KdVjPNxM1RU5e0YdeQNNYQ/VmbjMLglxfhs8WHG/3E
thEb20xOwYjovo7+mwl6Hk1KLLUOJkkWfISfHA/AkpMFYcLn0kr5tEwrYcVPqprx
oGS1EpfuBjfMfN+PAa6DOJYae7c/SrMxz0PkmrOdyBslwLiAbyay1P3aXkbfYDFT
FhW4mhzWMV8dPFfInl7J2TL/o/hwi9ZWnlqtB0DxcCNeIjM/kw+VzqfjvXBds3ev
IbpOqt2AV6TiqEERKY/IBD35HJzDLNAh6wLOzTHPZ6MaB5vLlTjxi+CznQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDfdYeI/8iEivgcbD2hVz3irpijqMB8GA1UdIwQY
MBaAFBvO5AQFrvttoXo0Du8VnOnE0YMiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZjg5ZDgtOGMzNS00YzhjLWIxNWQt
N2U0NmFkNzQ4NDg0LzEvTjkxaDRqX3lJU0stQnhzUGFGWFBlS3VtS09vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hZjg5ZDgtOGMzNS00YzhjLWIxNWQtN2U0NmFkNzQ4NDg0
LzEvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUqMsMA0G
CSqGSIb3DQEBCwUAA4IBAQAdhUPXUSGYdO93h6B8B/V8chUYQ5ZdRKPiBE61FeJD
k9gvGubXB35EM4QH1NqFnn4skzeZjED53hVMUenhGNQiqyvVOq2j2f56iIwczQ9z
Zh9Z19hTrTYPEV6TMW1Q6h+mViabjFuzOY2QtJtelyIr+hVWbkpG6/AeVuzMyoIf
cgYlyUE1r12CeoLt9F469CjIH9TSOk3hmucsmiROxkHYaMcO70HGK5iH20Tq+SAn
+NgGDve6rasU+IHDXWrlyyBf0ssHttKhbm3OOdxGlVX/U2r4UpZNOnoRUQ/RELjt
83Mrv/EsX9SwSUxRVrj2yz5od2R2NTkJ83mXnzQD0a0u
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:16 2025 by rpki-client