Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/fKmf-IRn-RieML2Df_fSoPqK0XA.roa
File: fKmf-IRn-RieML2Df_fSoPqK0XA.roa (raw, json)
Hash identifier: a3ciufMxqjS5RuFYVFmQC6v890mDm7Xx0FW1HcI0PTE=
Subject key identifier: 7C:A9:9F:F8:84:67:F9:18:9E:30:BD:83:7F:F7:D2:A0:FA:8A:D1:70
Certificate issuer: /CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Certificate serial: 018CC2DB0DFDEB5900E98D9A25832FBED0A1
Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/fKmf-IRn-RieML2Df_fSoPqK0XA.roa
Signing time: Mon 01 Jan 2024 02:29:45 +0000
ROA not before: Mon 01 Jan 2024 02:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60855
IP address blocks: 195.42.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:0d:fd:eb:59:00:e9:8d:9a:25:83:2f:be:d0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Validity
Not Before: Jan 1 02:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ca99ff88467f9189e30bd837ff7d2a0fa8ad170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e4:54:70:4c:bd:a3:f4:8f:f2:6f:f1:0b:42:
69:4f:b4:78:be:be:cf:95:e5:95:15:f5:f2:42:7b:
12:1d:84:f1:92:53:61:55:18:68:68:54:57:70:19:
b9:fd:eb:7b:a6:dd:35:ad:b5:e5:52:b3:b4:3e:7d:
14:06:6a:5b:8b:06:60:ce:c6:a7:ad:1b:d7:38:79:
7c:85:53:42:b4:2d:8e:2a:92:e2:ac:dc:5a:ba:7b:
8a:3c:82:40:27:0d:77:e9:7e:2e:87:ed:3f:42:ba:
ae:86:7c:3e:f2:48:36:7b:1d:92:64:07:0c:4d:5b:
e2:cf:c6:23:c0:2b:f4:6e:b8:92:96:5b:34:a7:1c:
a1:ec:b6:aa:8f:7d:53:0f:27:57:4c:63:5c:cb:79:
18:cd:49:66:19:ac:8d:c2:71:06:b1:3c:5a:8d:06:
00:02:61:0c:24:4a:25:29:ac:c6:03:93:e4:b3:a3:
11:ed:5d:82:73:30:2c:f3:5b:e5:4b:46:28:89:24:
9e:1f:82:65:ce:43:8c:d1:c0:0e:50:bb:7a:ca:07:
94:ff:24:a2:73:fe:4a:83:58:ab:88:93:c8:70:b2:
d8:d2:04:11:3a:a4:c3:f6:5c:7a:c5:bb:c4:af:f1:
fa:81:49:8c:87:63:b3:f8:22:62:21:b6:09:c8:55:
7b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A9:9F:F8:84:67:F9:18:9E:30:BD:83:7F:F7:D2:A0:FA:8A:D1:70
X509v3 Authority Key Identifier:
keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/fKmf-IRn-RieML2Df_fSoPqK0XA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.42.231.0/24
Signature Algorithm: sha256WithRSAEncryption
92:58:55:dd:52:89:90:be:04:9b:db:f1:21:ed:05:ae:63:45:
76:ec:72:ef:d2:ee:6a:6e:94:57:2f:d8:3d:76:2d:8d:5e:7f:
49:a4:eb:9f:52:21:ea:99:f7:55:89:b9:6d:01:ac:ae:75:e2:
c2:4a:12:48:1b:89:85:9b:9c:4a:58:84:17:9c:7e:7d:06:c0:
65:5c:2c:1d:0f:bc:8e:fe:73:38:d0:28:67:4a:5a:c1:73:f8:
37:0b:dc:3a:18:e8:d4:2f:2f:7a:a6:2c:21:11:13:0a:35:8a:
b8:e4:7b:a9:b5:4e:47:e4:7f:51:94:60:be:ce:b0:72:c2:1b:
4f:01:2f:00:72:04:26:90:a9:aa:51:c1:bf:96:f6:d8:26:3e:
e4:a2:09:f8:aa:ee:5a:ae:85:39:09:d7:01:31:73:91:be:75:
0f:96:5e:1d:40:d3:5c:9f:e9:83:13:ce:84:02:95:f0:1f:d6:
2a:b3:35:18:73:92:5e:15:37:9b:db:9d:66:55:a7:80:af:e7:
73:12:89:b9:44:95:39:eb:5a:6c:03:17:0d:e7:b5:3d:c3:8c:
84:3a:0f:df:1b:04:07:26:f2:73:88:d3:df:81:64:38:af:36:
3f:38:9b:ae:ea:69:5f:ae:06:64:52:76:d6:3b:16:b3:79:f3:
c6:a4:ed:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2w3961kA6Y2aJYMvvtChMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWE0ODcyMWZmNDNiMTgwNTdlZjQxNzRhOWQzOTZhOTgx
YzY2OTMwHhcNMjQwMTAxMDIyOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2E5OWZmODg0NjdmOTE4OWUzMGJkODM3ZmY3ZDJhMGZhOGFkMTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eRUcEy9o/SP8m/xC0JpT7R4vr7P
leWVFfXyQnsSHYTxklNhVRhoaFRXcBm5/et7pt01rbXlUrO0Pn0UBmpbiwZgzsan
rRvXOHl8hVNCtC2OKpLirNxaunuKPIJAJw136X4uh+0/Qrquhnw+8kg2ex2SZAcM
TVviz8YjwCv0briSlls0pxyh7Laqj31TDydXTGNcy3kYzUlmGayNwnEGsTxajQYA
AmEMJEolKazGA5Pks6MR7V2CczAs81vlS0YoiSSeH4JlzkOM0cAOULt6ygeU/ySi
c/5Kg1iriJPIcLLY0gQROqTD9lx6xbvEr/H6gUmMh2Oz+CJiIbYJyFV7sQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHypn/iEZ/kYnjC9g3/30qD6itFwMB8GA1UdIwQY
MBaAFI4aSHIf9DsYBX70F0qdOWqYHGaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMt
Y2U0ZTMxY2UxNTE4LzEvZkttZi1JUm4tUmllTUwyRGZfZlNvUHFLMFhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMtY2U0ZTMxY2UxNTE4
LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyrnMA0G
CSqGSIb3DQEBCwUAA4IBAQCSWFXdUomQvgSb2/Eh7QWuY0V27HLv0u5qbpRXL9g9
di2NXn9JpOufUiHqmfdVibltAayudeLCShJIG4mFm5xKWIQXnH59BsBlXCwdD7yO
/nM40ChnSlrBc/g3C9w6GOjULy96piwhERMKNYq45HuptU5H5H9RlGC+zrBywhtP
AS8AcgQmkKmqUcG/lvbYJj7kogn4qu5aroU5CdcBMXORvnUPll4dQNNcn+mDE86E
ApXwH9YqszUYc5JeFTeb251mVaeAr+dzEom5RJU561psAxcN57U9w4yEOg/fGwQH
JvJziNPfgWQ4rzY/OJuu6mlfrgZkUnbWOxazefPGpO0M
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:14:16 2025 by rpki-client