Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/DjKcIUOno4dV9vd_SnvzdULOxC0.roa
File: DjKcIUOno4dV9vd_SnvzdULOxC0.roa (raw, json)
Hash identifier: UeOES/Pe/+X8HsG4idOff3jnVcRMXKGSGPsJAkRjs9E=
Subject key identifier: 0E:32:9C:21:43:A7:A3:87:55:F6:F7:7F:4A:7B:F3:75:42:CE:C4:2D
Certificate issuer: /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial: 018CC26D02447E825D1D912035895DE254C0
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/DjKcIUOno4dV9vd_SnvzdULOxC0.roa
Signing time: Mon 01 Jan 2024 00:29:33 +0000
ROA not before: Mon 01 Jan 2024 00:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207767
IP address blocks: 176.119.209.0/24 maxlen: 24
185.90.44.0/22 maxlen: 24
2a0f:ffc0::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:02:44:7e:82:5d:1d:91:20:35:89:5d:e2:54:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Validity
Not Before: Jan 1 00:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e329c2143a7a38755f6f77f4a7bf37542cec42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6b:1e:0f:70:ed:95:0d:5d:1d:37:66:cc:ab:
da:8c:6d:5d:73:84:74:2e:9f:c9:c3:39:bf:52:64:
e1:d2:a0:b9:51:73:27:5d:00:46:c5:ed:a5:5a:d8:
5d:9c:89:0d:c9:19:83:76:41:41:6c:f6:02:e0:a5:
55:85:44:f8:ae:6c:49:db:bd:07:e8:41:e3:15:4d:
6f:47:b1:a9:64:db:ba:42:f2:47:77:a3:4a:1f:b6:
27:f5:0f:9d:36:21:c1:86:7e:b6:fb:6a:53:57:ed:
d5:14:d7:c9:e8:41:1c:6e:a6:21:7b:5e:96:83:ce:
48:4b:85:e0:e8:fc:69:65:04:47:45:e7:ff:03:13:
14:85:de:82:dd:d1:7f:cc:71:f5:36:f9:a7:ec:87:
6c:27:43:49:8b:09:fd:b3:0c:79:8c:6e:94:30:ed:
e3:c9:f2:37:ef:52:f6:fb:7f:4a:66:00:8c:22:99:
da:cc:1a:4d:fb:90:7f:7b:53:ac:95:aa:3b:97:b9:
7e:9c:22:bb:6e:17:71:c8:e1:01:43:31:fb:b2:19:
f5:10:80:5c:8d:fb:76:fd:f2:3a:bb:2a:d7:a1:27:
a7:c3:b5:e7:48:0a:a0:ba:93:a9:34:af:fb:90:e0:
b8:21:63:37:42:2f:04:53:53:6d:81:70:0a:73:35:
8c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:32:9C:21:43:A7:A3:87:55:F6:F7:7F:4A:7B:F3:75:42:CE:C4:2D
X509v3 Authority Key Identifier:
keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/DjKcIUOno4dV9vd_SnvzdULOxC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.209.0/24
185.90.44.0/22
IPv6:
2a0f:ffc0::/29
Signature Algorithm: sha256WithRSAEncryption
a4:53:f0:2e:d9:9c:b1:cb:f5:b9:b1:1c:18:5b:a5:24:4f:15:
0c:19:41:c5:0d:dd:06:77:5d:c6:0e:ff:af:e3:4b:0f:cf:f9:
d9:4f:c0:b7:b7:85:38:99:89:a1:f3:6d:58:d5:d2:6f:88:44:
2d:70:3f:5b:98:26:2f:a1:fe:0d:97:08:94:8d:04:61:31:d6:
8a:af:64:dd:2d:1d:4c:6d:b5:fb:38:35:2c:df:32:18:a7:fd:
b7:f3:8a:bb:99:64:6b:af:d8:41:e9:77:78:e2:62:1c:a0:5c:
0d:3e:c0:ed:35:a3:5f:da:dd:a0:76:54:ed:e6:28:ca:f1:fa:
fb:24:65:01:48:63:58:0b:4a:70:d6:3f:a9:58:46:17:6c:c2:
65:11:91:dd:14:66:d1:ca:3b:80:86:70:65:43:9b:03:fa:10:
51:1b:4b:47:5c:31:58:db:6a:48:e3:27:1f:34:0c:f3:f7:28:
c8:02:06:30:64:d4:b0:a2:04:b5:6a:5f:cf:78:50:a0:1c:4c:
bd:46:bb:93:73:cf:33:49:67:c3:3d:e4:8d:70:bd:78:e1:87:
4b:d0:a5:06:ca:47:2c:d0:ed:cf:04:d8:80:61:3c:17:18:05:
e4:d5:b1:28:e6:4d:72:ae:99:fa:ee:19:67:ff:b5:54:db:2e:
69:f9:23:17
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzCbQJEfoJdHZEgNYld4lTAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ODkxYTQ3MjRhYWM2YjVkYTAwMDUzMjlhYTNhNWFiZTg3
Nzc5ZDYwHhcNMjQwMTAxMDAyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTMyOWMyMTQzYTdhMzg3NTVmNmY3N2Y0YTdiZjM3NTQyY2VjNDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWseD3DtlQ1dHTdmzKvajG1dc4R0
Lp/Jwzm/UmTh0qC5UXMnXQBGxe2lWthdnIkNyRmDdkFBbPYC4KVVhUT4rmxJ270H
6EHjFU1vR7GpZNu6QvJHd6NKH7Yn9Q+dNiHBhn62+2pTV+3VFNfJ6EEcbqYhe16W
g85IS4Xg6PxpZQRHRef/AxMUhd6C3dF/zHH1Nvmn7IdsJ0NJiwn9swx5jG6UMO3j
yfI371L2+39KZgCMIpnazBpN+5B/e1Oslao7l7l+nCK7bhdxyOEBQzH7shn1EIBc
jft2/fI6uyrXoSenw7XnSAqgupOpNK/7kOC4IWM3Qi8EU1NtgXAKczWMPwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFA4ynCFDp6OHVfb3f0p783VCzsQtMB8GA1UdIwQY
MBaAFDeJGkckqsa12gAFMpqjpavod3nWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjRrYVJ5U3F4clhhQUFVeW1xT2xxLWgzZWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lMTI4ZTAtMDBhNi00Njg5LTk1YmUt
NTI0YzIxMDljYjA1LzEvRGpLY0lVT25vNGRWOXZkX1NudnpkVUxPeEMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lMTI4ZTAtMDBhNi00Njg5LTk1YmUtNTI0YzIxMDljYjA1
LzEvTjRrYVJ5U3F4clhhQUFVeW1xT2xxLWgzZWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAsHfRAwQC
uVosMA0EAgACMAcDBQMqD//AMA0GCSqGSIb3DQEBCwUAA4IBAQCkU/Au2Zyxy/W5
sRwYW6UkTxUMGUHFDd0Gd13GDv+v40sPz/nZT8C3t4U4mYmh821Y1dJviEQtcD9b
mCYvof4NlwiUjQRhMdaKr2TdLR1MbbX7ODUs3zIYp/2384q7mWRrr9hB6Xd44mIc
oFwNPsDtNaNf2t2gdlTt5ijK8fr7JGUBSGNYC0pw1j+pWEYXbMJlEZHdFGbRyjuA
hnBlQ5sD+hBRG0tHXDFY22pI4ycfNAzz9yjIAgYwZNSwogS1al/PeFCgHEy9RruT
c88zSWfDPeSNcL144YdL0KUGykcs0O3PBNiAYTwXGAXk1bEo5k1yrpn67hln/7VU
2y5p+SMX
-----END CERTIFICATE-----
Generated at Fri Apr 18 02:10:39 2025 by rpki-client