Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/PBdMd-jz6Y4nrHx5iWhYG8I9o8M.roa
File: PBdMd-jz6Y4nrHx5iWhYG8I9o8M.roa (raw, json)
Hash identifier: ZCBGFTUkkIr5bPw0uM9De0AJPYptgL6zJaSnE2kq8Hc=
Subject key identifier: 3C:17:4C:77:E8:F3:E9:8E:27:AC:7C:79:89:68:58:1B:C2:3D:A3:C3
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 018E9C04D0E63CB51624F5191669F2F52D35
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/PBdMd-jz6Y4nrHx5iWhYG8I9o8M.roa
Signing time: Mon 01 Apr 2024 23:35:45 +0000
ROA not before: Mon 01 Apr 2024 23:35:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396073
IP address blocks: 92.118.37.0/24 maxlen: 24
193.32.163.0/24 maxlen: 24
2a0c:9f00:a001::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 17 Apr 2024 12:43:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9c:04:d0:e6:3c:b5:16:24:f5:19:16:69:f2:f5:2d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Apr 1 23:35:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c174c77e8f3e98e27ac7c798968581bc23da3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b5:61:5e:89:82:d6:01:11:48:91:2d:5c:1b:
75:e5:2f:d6:8d:58:3c:43:51:08:a3:b3:66:fa:7b:
40:ea:b5:e4:2c:a5:8d:6c:12:05:d6:b3:73:46:7a:
e3:ad:c9:1e:b5:c8:81:77:4f:a4:a5:91:08:5b:3b:
23:83:88:ad:a4:7e:72:10:1e:87:a6:f2:f0:33:24:
9b:02:26:02:6b:60:5f:20:6e:84:f4:14:13:0d:cc:
e4:e3:14:1f:5a:f7:10:32:58:68:e1:eb:31:07:92:
4b:8b:7e:8c:8a:6a:6e:10:01:5c:1c:0e:22:ee:92:
e5:bd:0a:e6:d6:f4:4d:c5:88:c1:ba:bd:70:3d:99:
8f:15:6c:85:ac:0e:92:74:ec:eb:a2:cc:c8:cd:ea:
0a:30:3d:ca:27:b8:e1:45:b2:a9:d5:6e:51:fb:86:
05:33:74:a3:49:18:e9:66:09:fc:06:0c:0f:1f:49:
31:ce:d2:39:f0:bd:3d:01:91:7b:e7:34:c1:cc:43:
56:b4:63:ec:9f:e2:c1:37:dd:9e:a3:7f:7b:64:c5:
1b:c2:c1:cf:04:bb:1d:18:6e:dd:97:9a:70:ac:1f:
ec:b5:15:90:e3:ba:22:49:ad:0f:5d:e1:ef:1e:c9:
c6:24:a7:22:3d:14:34:96:c4:bb:ce:fc:da:c4:2c:
ad:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:17:4C:77:E8:F3:E9:8E:27:AC:7C:79:89:68:58:1B:C2:3D:A3:C3
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/PBdMd-jz6Y4nrHx5iWhYG8I9o8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.37.0/24
193.32.163.0/24
IPv6:
2a0c:9f00:a001::/48
Signature Algorithm: sha256WithRSAEncryption
3f:ba:a7:32:96:39:64:bf:60:b8:51:ff:b9:71:79:8e:88:48:
de:2c:00:91:eb:35:66:c3:af:86:79:68:5b:7b:27:bb:97:66:
a6:71:fc:f7:6a:86:0c:1e:91:6a:6f:44:84:32:86:1f:39:26:
02:91:c6:d4:e5:ae:5b:4a:3a:32:af:b1:9f:0a:32:38:7c:d2:
07:2e:e3:04:94:29:8f:d6:c3:c2:1d:0c:61:21:4f:bc:ca:2f:
b0:52:12:df:86:60:5e:b6:56:ad:e4:44:f6:79:5f:46:91:7c:
da:05:ce:0d:fc:c9:07:cf:9c:85:5f:7f:17:0f:c3:a9:60:64:
1b:05:b0:7e:9b:dc:c8:79:9e:52:c2:3e:23:16:1d:a3:f6:28:
0b:82:bb:bd:15:ab:82:5e:a0:b0:48:7a:d2:ab:78:6f:30:99:
50:44:8e:85:26:80:5a:9b:c7:59:35:2b:e1:98:d3:d3:09:4c:
c1:69:11:3e:36:fe:10:ce:ef:08:d0:f5:93:de:d9:6e:04:d5:
dd:30:21:2f:c1:8b:4a:71:cf:df:07:27:74:38:94:0d:f3:0b:
79:77:7f:13:04:90:e6:4c:68:52:5e:0f:78:5c:0c:af:0d:3c:
a5:34:42:af:9f:b8:4b:4b:65:34:d8:4d:bb:af:ff:0d:8d:b4:
e3:3c:d3:4d
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAY6cBNDmPLUWJPUZFmny9S01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk
NTJiYmYwHhcNMjQwNDAxMjMzNTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzE3NGM3N2U4ZjNlOThlMjdhYzdjNzk4OTY4NTgxYmMyM2RhM2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrVhXomC1gERSJEtXBt15S/WjVg8
Q1EIo7Nm+ntA6rXkLKWNbBIF1rNzRnrjrcketciBd0+kpZEIWzsjg4itpH5yEB6H
pvLwMySbAiYCa2BfIG6E9BQTDczk4xQfWvcQMlho4esxB5JLi36MimpuEAFcHA4i
7pLlvQrm1vRNxYjBur1wPZmPFWyFrA6SdOzroszIzeoKMD3KJ7jhRbKp1W5R+4YF
M3SjSRjpZgn8BgwPH0kxztI58L09AZF75zTBzENWtGPsn+LBN92eo397ZMUbwsHP
BLsdGG7dl5pwrB/stRWQ47oiSa0PXeHvHsnGJKciPRQ0lsS7zvzaxCytMwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFDwXTHfo8+mOJ6x8eYloWBvCPaPDMB8GA1UdIwQY
MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt
NDZlZTU3OGEwYmZlLzEvUEJkTWQtano2WTRuckh4NWlXaFlHOEk5bzhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl
LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAXHYlAwQA
wSCjMA8EAgACMAkDBwAqDJ8AoAEwDQYJKoZIhvcNAQELBQADggEBAD+6pzKWOWS/
YLhR/7lxeY6ISN4sAJHrNWbDr4Z5aFt7J7uXZqZx/PdqhgwekWpvRIQyhh85JgKR
xtTlrltKOjKvsZ8KMjh80gcu4wSUKY/Ww8IdDGEhT7zKL7BSEt+GYF62Vq3kRPZ5
X0aRfNoFzg38yQfPnIVffxcPw6lgZBsFsH6b3Mh5nlLCPiMWHaP2KAuCu70Vq4Je
oLBIetKreG8wmVBEjoUmgFqbx1k1K+GY09MJTMFpET42/hDO7wjQ9ZPe2W4E1d0w
IS/Bi0pxz98HJ3Q4lA3zC3l3fxMEkOZMaFJeD3hcDK8NPKU0Qq+fuEtLZTTYTbuv
/w2NtOM8000=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:14 2025 by rpki-client