Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/CpWV_d8LtIQ_vp5irp1BDx3sqbA.roa
File: CpWV_d8LtIQ_vp5irp1BDx3sqbA.roa (raw, json)
Hash identifier: MFh1N5YR1V2a0XWHxnevPU9GoKLubK6Tj8Qwxbe7pMo=
Subject key identifier: 0A:95:95:FD:DF:0B:B4:84:3F:BE:9E:62:AE:9D:41:0F:1D:EC:A9:B0
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01905648EEEBDCE00D10AA0EBC8BF552C55C
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/CpWV_d8LtIQ_vp5irp1BDx3sqbA.roa
Signing time: Wed 26 Jun 2024 20:42:18 +0000
ROA not before: Wed 26 Jun 2024 20:42:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204572
IP address blocks: 194.209.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:56:48:ee:eb:dc:e0:0d:10:aa:0e:bc:8b:f5:52:c5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jun 26 20:42:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a9595fddf0bb4843fbe9e62ae9d410f1deca9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:35:9b:a2:12:b6:07:93:22:9b:6f:53:67:50:
2d:bf:f2:d1:0e:f0:77:e3:8b:05:60:75:e4:25:51:
41:9b:e9:4a:30:11:12:61:b4:f2:c0:ae:52:6e:73:
58:d3:1d:d6:62:17:9b:bc:da:7c:9a:22:a4:33:49:
b2:1c:90:d2:65:14:15:5d:3e:69:fe:7e:f4:8d:75:
a8:35:be:7e:81:ae:ee:c5:dd:ef:96:4d:f8:64:7b:
6e:ef:78:24:5a:32:ec:2b:0a:39:78:93:5d:d9:f5:
57:ed:b6:40:46:51:8a:f6:3c:a9:c4:81:c0:fd:ac:
1c:16:47:70:5a:76:79:11:e3:46:1f:28:af:45:d1:
e8:7a:b0:92:78:10:9a:14:a2:39:cf:33:91:43:1c:
d0:e4:8f:29:94:d5:2d:10:4f:38:8d:31:5c:82:61:
b8:6a:5f:0a:61:28:c4:85:f4:1e:bc:e0:55:53:ba:
76:1b:6f:96:1d:d8:43:53:6c:42:11:26:ae:0d:9d:
6a:43:bc:cc:3b:c1:44:b8:8c:94:4e:65:97:20:91:
ec:1d:4d:19:13:3e:24:c0:93:91:da:f9:88:b0:d9:
ec:86:d9:13:e3:6b:f3:af:07:80:81:dd:03:b0:aa:
a0:de:60:d9:c7:23:85:33:22:b6:4c:32:6b:1f:a3:
a5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:95:95:FD:DF:0B:B4:84:3F:BE:9E:62:AE:9D:41:0F:1D:EC:A9:B0
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/CpWV_d8LtIQ_vp5irp1BDx3sqbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.244.0/24
Signature Algorithm: sha256WithRSAEncryption
45:5f:17:ff:6a:4e:ce:4c:e5:3e:23:8f:51:51:43:48:1f:39:
1e:7c:73:d3:14:65:2c:34:7c:fc:82:d9:e2:25:c2:b2:4c:11:
cf:d4:15:95:85:c3:46:77:f4:8a:5d:1e:d4:8d:1d:2f:7e:16:
7c:9c:41:6f:78:83:28:77:fe:eb:83:ac:07:f7:65:02:96:ec:
89:da:91:d8:47:c0:6c:5c:8f:13:a7:86:04:5e:25:74:35:51:
17:88:cd:58:3f:ce:7c:25:af:40:1f:70:e5:e2:6e:9e:50:10:
34:c0:03:e6:1e:49:45:2a:b7:4b:eb:79:aa:8a:3b:94:de:6d:
a1:3f:27:28:23:6c:45:8b:53:0f:1e:04:71:b4:89:1a:06:97:
23:62:0d:9d:bd:01:b4:33:fc:10:fa:2c:a6:e5:f7:86:4e:b9:
0f:1b:d5:c7:e9:6d:f4:0a:ab:62:23:57:d0:72:9c:6a:6f:80:
e7:85:dc:8a:6f:64:59:39:35:fc:87:ca:8a:d9:3e:57:43:8c:
0b:f3:c4:98:47:6e:c2:25:1c:df:d8:63:37:6e:4c:18:e8:31:
4f:45:c2:7c:8d:96:23:30:fb:c0:9c:52:6e:c0:65:3c:7d:f6:
af:86:0f:ae:02:f8:3d:e1:bb:e4:19:d0:60:4a:94:33:00:c4:
51:76:35:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBWSO7r3OANEKoOvIv1UsVcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjQwNjI2MjA0MjE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTk1OTVmZGRmMGJiNDg0M2ZiZTllNjJhZTlkNDEwZjFkZWNhOWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDWbohK2B5Mim29TZ1Atv/LRDvB3
44sFYHXkJVFBm+lKMBESYbTywK5SbnNY0x3WYhebvNp8miKkM0myHJDSZRQVXT5p
/n70jXWoNb5+ga7uxd3vlk34ZHtu73gkWjLsKwo5eJNd2fVX7bZARlGK9jypxIHA
/awcFkdwWnZ5EeNGHyivRdHoerCSeBCaFKI5zzORQxzQ5I8plNUtEE84jTFcgmG4
al8KYSjEhfQevOBVU7p2G2+WHdhDU2xCESauDZ1qQ7zMO8FEuIyUTmWXIJHsHU0Z
Ez4kwJOR2vmIsNnshtkT42vzrweAgd0DsKqg3mDZxyOFMyK2TDJrH6Ol9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAqVlf3fC7SEP76eYq6dQQ8d7KmwMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvQ3BXVl9kOEx0SVFfdnA1aXJwMUJEeDNzcWJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtH0MA0G
CSqGSIb3DQEBCwUAA4IBAQBFXxf/ak7OTOU+I49RUUNIHzkefHPTFGUsNHz8gtni
JcKyTBHP1BWVhcNGd/SKXR7UjR0vfhZ8nEFveIMod/7rg6wH92UCluyJ2pHYR8Bs
XI8Tp4YEXiV0NVEXiM1YP858Ja9AH3Dl4m6eUBA0wAPmHklFKrdL63mqijuU3m2h
PycoI2xFi1MPHgRxtIkaBpcjYg2dvQG0M/wQ+iym5feGTrkPG9XH6W30CqtiI1fQ
cpxqb4DnhdyKb2RZOTX8h8qK2T5XQ4wL88SYR27CJRzf2GM3bkwY6DFPRcJ8jZYj
MPvAnFJuwGU8ffavhg+uAvg94bvkGdBgSpQzAMRRdjXa
-----END CERTIFICATE-----
Generated at Sat Apr 12 04:45:21 2025 by rpki-client