Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/kc8ZX9_eEbSg733RFQ0i9pwoS68.roa
File: kc8ZX9_eEbSg733RFQ0i9pwoS68.roa (raw, json)
Hash identifier: sHWCNkdTepXYxZS8F5SUMdvEL6iETPAy6F9OGRCJ4wg=
Subject key identifier: 91:CF:19:5F:DF:DE:11:B4:A0:EF:7D:D1:15:0D:22:F6:9C:28:4B:AF
Certificate issuer: /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Certificate serial: 018CC425500CA546DD71561C047A56B3FA1D
Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/kc8ZX9_eEbSg733RFQ0i9pwoS68.roa
Signing time: Mon 01 Jan 2024 08:30:28 +0000
ROA not before: Mon 01 Jan 2024 08:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49488
IP address blocks: 194.0.10.0/24 maxlen: 24
2001:678:d::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:50:0c:a5:46:dd:71:56:1c:04:7a:56:b3:fa:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Validity
Not Before: Jan 1 08:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91cf195fdfde11b4a0ef7dd1150d22f69c284baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:33:db:a3:7b:9b:15:05:8a:4c:ca:a9:54:b7:
aa:b2:59:ad:97:b9:9b:23:1a:7f:3c:be:99:be:36:
ed:cb:da:15:98:a1:00:df:b6:a4:5d:26:26:ba:49:
ed:b4:21:ff:64:c1:50:8a:67:35:dc:e9:36:eb:b9:
7b:0e:94:21:95:73:e8:ff:8f:b9:70:9a:f3:8d:36:
06:11:9a:2a:17:2f:db:25:64:25:86:17:f1:e6:2b:
65:06:78:f1:55:ab:d5:0b:cb:7b:5e:4c:4a:10:8c:
95:f9:cb:36:db:51:3b:dc:59:69:7e:d0:6d:99:1d:
7b:6a:c1:87:06:35:59:64:37:13:6c:3d:e5:fd:0c:
36:61:33:21:ef:bf:f3:62:fe:a7:7e:8a:9a:8d:67:
95:8d:c6:89:b6:b3:09:57:81:19:b4:81:77:05:24:
e4:49:73:eb:b9:17:54:29:65:27:23:65:74:51:2f:
cc:de:54:bb:16:14:c2:b6:be:24:1f:05:cd:0b:b7:
59:f7:de:7e:7f:ef:01:5e:52:b4:cb:a8:8b:e3:3d:
53:df:4c:48:33:d1:c9:e5:89:fe:d7:24:ad:e3:bb:
c0:12:ca:b9:d6:a2:cc:c3:6c:27:03:3a:4c:54:ad:
db:e3:ee:b6:4d:e8:65:af:ba:b3:88:6c:39:4d:a5:
53:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CF:19:5F:DF:DE:11:B4:A0:EF:7D:D1:15:0D:22:F6:9C:28:4B:AF
X509v3 Authority Key Identifier:
keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/kc8ZX9_eEbSg733RFQ0i9pwoS68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.10.0/24
IPv6:
2001:678:d::/48
Signature Algorithm: sha256WithRSAEncryption
3e:d1:cb:66:aa:03:10:04:31:53:65:0c:0f:c3:40:82:e2:c8:
fe:6c:cd:6d:6b:1d:c1:d1:4d:d9:ad:02:81:e9:f2:0f:e8:7e:
c2:ad:c1:13:03:ca:a8:6f:b4:b4:0d:c7:54:ef:a5:b4:57:96:
d5:de:72:dc:d1:0b:81:f4:f8:ef:f3:38:20:3a:2b:09:b0:04:
d9:e1:69:a3:1a:6f:97:e7:e0:fd:43:ce:55:33:7d:10:5a:21:
b9:5c:4d:3c:02:0b:90:69:fe:cd:a3:93:7a:54:51:1b:f8:5a:
b3:2c:64:d0:4e:c7:a8:da:29:37:2f:2b:ce:10:c1:53:29:1a:
9c:27:e0:8a:4c:09:11:6a:88:db:54:0b:f5:19:df:59:dc:80:
06:ad:3f:07:ce:6b:55:82:5c:75:d6:6e:83:90:21:83:a5:0b:
62:51:2f:cc:d9:19:7e:f7:3f:22:45:fd:48:d5:d8:e7:6c:55:
fd:bf:74:fe:72:c9:c9:cb:23:b9:48:53:73:0f:4e:a5:f5:42:
a9:14:d6:f4:b9:df:b3:eb:4e:22:43:6e:13:b9:4a:3e:d8:fc:
06:8c:0f:f1:39:83:a8:7b:ea:c8:12:16:2b:41:18:58:49:87:
c8:8d:66:b7:4d:71:9c:64:59:7f:fe:92:39:9b:4e:10:7b:04:
c0:96:bd:f9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzEJVAMpUbdcVYcBHpWs/odMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMzkwYmZmNjVkY2VkY2E4MTNkN2ExMGQ3ZWMzMjhjMmY2
ZWFjMzQwHhcNMjQwMTAxMDgzMDI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWNmMTk1ZmRmZGUxMWI0YTBlZjdkZDExNTBkMjJmNjljMjg0YmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjPbo3ubFQWKTMqpVLeqslmtl7mb
Ixp/PL6Zvjbty9oVmKEA37akXSYmuknttCH/ZMFQimc13Ok267l7DpQhlXPo/4+5
cJrzjTYGEZoqFy/bJWQlhhfx5itlBnjxVavVC8t7XkxKEIyV+cs221E73FlpftBt
mR17asGHBjVZZDcTbD3l/Qw2YTMh77/zYv6nfoqajWeVjcaJtrMJV4EZtIF3BSTk
SXPruRdUKWUnI2V0US/M3lS7FhTCtr4kHwXNC7dZ995+f+8BXlK0y6iL4z1T30xI
M9HJ5Yn+1ySt47vAEsq51qLMw2wnAzpMVK3b4+62Tehlr7qziGw5TaVT/wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJHPGV/f3hG0oO990RUNIvacKEuvMB8GA1UdIwQY
MBaAFBw5C/9l3O3KgT16ENfsMowvbqw0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSERrTF8yWGM3Y3FCUFhvUTEtd3lqQzl1ckRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zNDgxMDQtOGE0MS00OTQ5LTg1NTIt
YTk3NjVlZGM3OTVjLzEva2M4Wlg5X2VFYlNnNzMzUkZRMGk5cHdvUzY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zNDgxMDQtOGE0MS00OTQ5LTg1NTItYTk3NjVlZGM3OTVj
LzEvSERrTF8yWGM3Y3FCUFhvUTEtd3lqQzl1ckRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwgAKMA8E
AgACMAkDBwAgAQZ4AA0wDQYJKoZIhvcNAQELBQADggEBAD7Ry2aqAxAEMVNlDA/D
QILiyP5szW1rHcHRTdmtAoHp8g/ofsKtwRMDyqhvtLQNx1TvpbRXltXectzRC4H0
+O/zOCA6KwmwBNnhaaMab5fn4P1DzlUzfRBaIblcTTwCC5Bp/s2jk3pUURv4WrMs
ZNBOx6jaKTcvK84QwVMpGpwn4IpMCRFqiNtUC/UZ31ncgAatPwfOa1WCXHXWboOQ
IYOlC2JRL8zZGX73PyJF/UjV2OdsVf2/dP5yycnLI7lIU3MPTqX1QqkU1vS537Pr
TiJDbhO5Sj7Y/AaMD/E5g6h76sgSFitBGFhJh8iNZrdNcZxkWX/+kjmbThB7BMCW
vfk=
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:58:04 2025 by rpki-client