Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/uJpeZzu6ZIjLofTNE2fzD2FLzWc.roa
File: uJpeZzu6ZIjLofTNE2fzD2FLzWc.roa (raw, json)
Hash identifier: 5L+J+yR2L/P2Po4qwqDaRnPQVPCygAT3u9e9UU4jpJc=
Subject key identifier: B8:9A:5E:67:3B:BA:64:88:CB:A1:F4:CD:13:67:F3:0F:61:4B:CD:67
Certificate issuer: /CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
Certificate serial: 018D20D4C5AB27DF5E8C9C35EA34157B7CFC
Authority key identifier: FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/uJpeZzu6ZIjLofTNE2fzD2FLzWc.roa
Signing time: Fri 19 Jan 2024 08:27:11 +0000
ROA not before: Fri 19 Jan 2024 08:27:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201856
IP address blocks: 95.141.254.0/24 maxlen: 24
2a13:4d80::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 22 Jan 2024 20:25:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:20:d4:c5:ab:27:df:5e:8c:9c:35:ea:34:15:7b:7c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
Validity
Not Before: Jan 19 08:27:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b89a5e673bba6488cba1f4cd1367f30f614bcd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2f:eb:f2:9b:69:00:15:92:d0:d9:86:16:cd:
32:0c:ee:91:0e:c7:cc:14:da:36:bf:db:22:c0:3c:
a1:b7:35:ce:d0:5b:39:3b:2c:62:1e:ba:03:67:83:
87:fd:fc:b5:e0:af:50:9b:25:0a:30:76:a7:3e:c4:
f2:41:ce:a6:4b:70:f8:ae:c7:e5:0d:0d:40:7d:fc:
ed:eb:45:62:ab:a5:ac:4b:da:bc:e8:a4:b9:af:44:
f6:54:6e:3f:01:10:35:7f:8a:08:93:9b:ba:c9:2a:
58:d2:ea:05:4d:65:c1:99:9c:c1:ed:18:22:83:38:
c4:b9:b9:79:e9:f2:fd:29:7e:46:60:50:39:7c:00:
80:e7:98:0b:7d:9b:61:ad:86:dc:51:33:19:20:c5:
6a:c2:4b:dc:51:fa:2a:55:51:56:13:bc:bf:02:3d:
f1:b9:ac:18:fc:42:a2:67:4d:86:c1:16:be:cf:c3:
89:be:de:89:85:00:04:69:30:8f:a9:e8:a9:09:e1:
86:b2:4f:5b:89:45:00:fe:89:83:ac:d0:db:97:c2:
7d:46:7b:64:03:8a:1c:70:48:d4:70:db:33:f3:7f:
5e:42:0b:e8:a5:c8:af:a2:69:1b:4d:8e:9e:dd:c6:
a1:d3:c1:71:f7:42:15:eb:49:0a:77:d9:f4:55:ed:
73:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9A:5E:67:3B:BA:64:88:CB:A1:F4:CD:13:67:F3:0F:61:4B:CD:67
X509v3 Authority Key Identifier:
keyid:FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/uJpeZzu6ZIjLofTNE2fzD2FLzWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.141.254.0/24
IPv6:
2a13:4d80::/29
Signature Algorithm: sha256WithRSAEncryption
67:90:b9:04:d8:26:fd:36:e0:1f:66:d9:d8:23:a0:52:39:ad:
e0:a5:a8:78:0c:e0:b7:65:90:43:5a:49:00:f6:c0:b3:35:6b:
a6:8f:4c:de:eb:73:c3:3a:b8:a8:ef:8e:fb:3d:31:b0:2a:93:
5c:f8:60:ac:0a:c8:cf:87:ab:d1:a2:be:8b:58:5f:49:51:c1:
8a:31:ca:08:0b:cb:c0:72:60:53:ca:c9:29:9b:27:21:6c:6b:
79:81:01:24:a1:91:e6:dc:d4:a8:c5:27:d7:f6:06:a9:02:f7:
a5:19:f4:f6:d5:88:0c:85:3b:10:0f:a9:50:9d:53:1b:3b:1b:
26:5f:fb:16:6b:a8:88:7e:46:b3:85:fa:3e:8d:07:49:af:d6:
22:49:85:6d:d8:56:16:3b:06:1e:3a:f5:f1:39:11:fb:6f:9c:
a8:27:c1:3f:3d:2e:42:dd:65:4a:bb:b9:f0:d7:cc:6a:1d:6e:
f2:23:d4:c7:0f:1a:60:38:b2:2d:c1:72:63:f4:5d:a6:05:03:
27:b2:14:44:e5:ca:f0:cd:8e:2c:05:7d:26:ba:da:fb:8f:fb:
2b:56:f8:07:49:d6:d8:3b:f5:ce:ab:de:61:40:aa:d7:bf:44:
48:53:40:98:5c:dd:ad:2d:9b:db:d5:ca:0e:9d:a3:8b:27:52:
7d:dc:b8:f1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAY0g1MWrJ99ejJw16jQVe3z8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZGU4MTdiZWFlNGMwYTJkNTdmN2ZjM2YwOGM2MjdkNTY1
NDBlN2UwHhcNMjQwMTE5MDgyNzExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODlhNWU2NzNiYmE2NDg4Y2JhMWY0Y2QxMzY3ZjMwZjYxNGJjZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki/r8ptpABWS0NmGFs0yDO6RDsfM
FNo2v9siwDyhtzXO0Fs5OyxiHroDZ4OH/fy14K9QmyUKMHanPsTyQc6mS3D4rsfl
DQ1Affzt60Viq6WsS9q86KS5r0T2VG4/ARA1f4oIk5u6ySpY0uoFTWXBmZzB7Rgi
gzjEubl56fL9KX5GYFA5fACA55gLfZthrYbcUTMZIMVqwkvcUfoqVVFWE7y/Aj3x
uawY/EKiZ02GwRa+z8OJvt6JhQAEaTCPqeipCeGGsk9biUUA/omDrNDbl8J9Rntk
A4occEjUcNsz839eQgvopcivomkbTY6e3cah08Fx90IV60kKd9n0Ve1zsQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLiaXmc7umSIy6H0zRNn8w9hS81nMB8GA1UdIwQY
MBaAFP/egXvq5MCi1X9/w/CMYn1WVA5+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzk2QmUtcmt3S0xWZjNfRDhJeGlmVlpVRG40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jY2ZhMTctMzBmNS00NTFhLThlMjkt
NmNjYTY2ZmQzYzk5LzEvdUpwZVp6dTZaSWpMb2ZUTkUyZnpEMkZMeldjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jY2ZhMTctMzBmNS00NTFhLThlMjktNmNjYTY2ZmQzYzk5
LzEvXzk2QmUtcmt3S0xWZjNfRDhJeGlmVlpVRG40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAX43+MA0E
AgACMAcDBQMqE02AMA0GCSqGSIb3DQEBCwUAA4IBAQBnkLkE2Cb9NuAfZtnYI6BS
Oa3gpah4DOC3ZZBDWkkA9sCzNWumj0ze63PDOrio7477PTGwKpNc+GCsCsjPh6vR
or6LWF9JUcGKMcoIC8vAcmBTyskpmychbGt5gQEkoZHm3NSoxSfX9gapAvelGfT2
1YgMhTsQD6lQnVMbOxsmX/sWa6iIfkazhfo+jQdJr9YiSYVt2FYWOwYeOvXxORH7
b5yoJ8E/PS5C3WVKu7nw18xqHW7yI9THDxpgOLItwXJj9F2mBQMnshRE5crwzY4s
BX0mutr7j/srVvgHSdbYO/XOq95hQKrXv0RIU0CYXN2tLZvb1coOnaOLJ1J93Ljx
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:57:51 2025 by rpki-client