Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/jyTRGpke3xL5AM_FXSB0G9ipqYs.roa
File: jyTRGpke3xL5AM_FXSB0G9ipqYs.roa (raw, json)
Hash identifier: E/+VT09QyN+RyLZUxbiiTVa/L57Q4OHBv5mRBx+FKnw=
Subject key identifier: 8F:24:D1:1A:99:1E:DF:12:F9:00:CF:C5:5D:20:74:1B:D8:A9:A9:8B
Certificate issuer: /CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Certificate serial: 01926B8FB0B5A431861261486D88C58E2A82
Authority key identifier: CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/jyTRGpke3xL5AM_FXSB0G9ipqYs.roa
Signing time: Tue 08 Oct 2024 09:57:11 +0000
ROA not before: Tue 08 Oct 2024 09:57:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50700
IP address blocks: 193.105.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:8f:b0:b5:a4:31:86:12:61:48:6d:88:c5:8e:2a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Validity
Not Before: Oct 8 09:57:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f24d11a991edf12f900cfc55d20741bd8a9a98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:11:78:47:db:a8:7a:39:aa:a0:07:17:6a:
7b:03:b5:bc:9f:34:b1:95:77:47:2c:be:0e:fa:17:
c1:06:c6:07:c5:bf:18:46:c3:3b:15:30:9b:ae:b5:
5d:6f:e1:64:29:f2:2d:ff:dc:13:50:0e:57:ee:61:
09:c7:89:94:e2:eb:59:af:60:d7:9c:f6:10:b8:eb:
9e:79:0c:21:b0:cb:2c:d7:8a:38:c0:bf:77:58:c8:
e4:ea:1b:d9:2b:1c:61:08:10:27:8c:2c:ea:e7:59:
20:2d:84:78:7c:c7:7c:2a:9d:00:44:da:c1:0a:4d:
7f:2f:c4:7e:77:2b:c3:a4:86:34:30:22:90:f7:27:
bd:27:81:3e:aa:34:9c:45:07:2c:de:4b:fb:35:4a:
5c:41:5e:f5:58:ad:0f:b7:ff:c8:f3:8a:a5:24:cd:
27:ce:64:55:c8:f8:7b:48:fb:20:f3:7d:bf:ec:46:
d4:e9:64:ec:cd:9b:11:fb:60:47:f7:16:dc:d5:1b:
e2:95:65:64:48:e8:30:03:11:c9:4d:65:20:0d:ab:
2b:d9:80:dc:96:46:7a:64:4d:91:ca:d8:17:d0:3f:
af:f6:ed:44:04:3e:ef:7b:cd:b9:70:c4:4d:71:90:
b1:99:57:cc:df:cd:c1:12:42:0e:c9:b8:cd:76:99:
39:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:24:D1:1A:99:1E:DF:12:F9:00:CF:C5:5D:20:74:1B:D8:A9:A9:8B
X509v3 Authority Key Identifier:
keyid:CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/jyTRGpke3xL5AM_FXSB0G9ipqYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.195.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:07:67:76:5e:6b:3d:41:61:65:29:cc:dd:9c:85:02:af:72:
67:06:3a:1f:51:96:1c:14:11:64:cd:d5:c8:ce:19:ad:dd:8a:
3d:4a:b3:0b:65:5c:8f:d1:f1:1f:a9:06:c4:94:41:65:98:86:
98:02:8d:19:54:f4:a7:37:f2:db:3c:75:70:e0:5f:94:59:8f:
bc:50:7d:3c:7b:8f:5b:9f:9a:7a:f0:f8:71:f9:a9:74:00:a8:
07:70:11:9a:67:6c:98:23:97:df:c9:81:b0:83:07:8c:4f:a8:
4c:a4:ef:ee:f2:f9:7c:b4:50:04:fd:bd:bc:2c:8c:09:9e:e9:
14:dd:6b:e6:16:02:67:36:74:04:f9:ec:b6:17:ab:94:1f:3a:
b3:76:8d:d2:99:17:cf:3d:d8:0b:d1:80:25:5f:e0:61:f5:50:
a8:e4:4d:59:3c:ff:d1:df:43:c0:18:97:91:e5:03:cf:32:34:
a2:45:02:8d:8d:c4:9a:dd:68:7c:51:f7:67:f2:ac:8f:f8:0d:
47:9b:23:ca:5f:4a:e3:9c:e5:21:2b:4a:f4:76:05:54:18:d1:
a8:88:2b:f6:d2:81:e7:ef:50:7f:aa:98:93:60:9a:a0:53:8e:
ea:70:f2:17:1a:74:3b:65:57:28:48:7c:ce:9f:aa:c5:ad:7c:
e2:71:93:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJrj7C1pDGGEmFIbYjFjiqCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZjE0MjMwZGU5ZWZlYzYxMGZmZGQzMzllMGM0NDgwYjY4
YmFkNDUwHhcNMjQxMDA4MDk1NzExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjI0ZDExYTk5MWVkZjEyZjkwMGNmYzU1ZDIwNzQxYmQ4YTlhOThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspYReEfbqHo5qqAHF2p7A7W8nzSx
lXdHLL4O+hfBBsYHxb8YRsM7FTCbrrVdb+FkKfIt/9wTUA5X7mEJx4mU4utZr2DX
nPYQuOueeQwhsMss14o4wL93WMjk6hvZKxxhCBAnjCzq51kgLYR4fMd8Kp0ARNrB
Ck1/L8R+dyvDpIY0MCKQ9ye9J4E+qjScRQcs3kv7NUpcQV71WK0Pt//I84qlJM0n
zmRVyPh7SPsg832/7EbU6WTszZsR+2BH9xbc1RvilWVkSOgwAxHJTWUgDasr2YDc
lkZ6ZE2RytgX0D+v9u1EBD7ve825cMRNcZCxmVfM383BEkIOybjNdpk5aQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI8k0RqZHt8S+QDPxV0gdBvYqamLMB8GA1UdIwQY
MBaAFMzxQjDenv7GEP/dM54MRIC2i61FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBGQ01ONmVfc1lRXzkwem5neEVnTGFMclVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80ODI2MzMtYzlhOS00NjMzLWIxMzgt
YTE3YjgyZTZkNzg2LzEvanlUUkdwa2UzeEw1QU1fRlhTQjBHOWlwcVlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi80ODI2MzMtYzlhOS00NjMzLWIxMzgtYTE3YjgyZTZkNzg2
LzEvelBGQ01ONmVfc1lRXzkwem5neEVnTGFMclVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWnDMA0G
CSqGSIb3DQEBCwUAA4IBAQCdB2d2Xms9QWFlKczdnIUCr3JnBjofUZYcFBFkzdXI
zhmt3Yo9SrMLZVyP0fEfqQbElEFlmIaYAo0ZVPSnN/LbPHVw4F+UWY+8UH08e49b
n5p68Phx+al0AKgHcBGaZ2yYI5ffyYGwgweMT6hMpO/u8vl8tFAE/b28LIwJnukU
3WvmFgJnNnQE+ey2F6uUHzqzdo3SmRfPPdgL0YAlX+Bh9VCo5E1ZPP/R30PAGJeR
5QPPMjSiRQKNjcSa3Wh8Ufdn8qyP+A1HmyPKX0rjnOUhK0r0dgVUGNGoiCv20oHn
71B/qpiTYJqgU47qcPIXGnQ7ZVcoSHzOn6rFrXzicZMX
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:42 2025 by rpki-client