Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/F6jglsNI8z1MZ7xsLcoaagUs_GY.roa
File: F6jglsNI8z1MZ7xsLcoaagUs_GY.roa (raw, json)
Hash identifier: kloHWB+0I+NdY367Et78FnmPhcvMHP+w5nKMMyIiZUA=
Subject key identifier: 17:A8:E0:96:C3:48:F3:3D:4C:67:BC:6C:2D:CA:1A:6A:05:2C:FC:66
Certificate issuer: /CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Certificate serial: 018CC5DCABB3FE5C2D938C86FB014FBB9BEC
Authority key identifier: 87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/F6jglsNI8z1MZ7xsLcoaagUs_GY.roa
Signing time: Mon 01 Jan 2024 16:30:22 +0000
ROA not before: Mon 01 Jan 2024 16:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34353
IP address blocks: 194.88.248.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:ab:b3:fe:5c:2d:93:8c:86:fb:01:4f:bb:9b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Validity
Not Before: Jan 1 16:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17a8e096c348f33d4c67bc6c2dca1a6a052cfc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c3:2e:15:2c:93:93:98:b6:1a:79:9a:51:a6:
ac:c5:60:26:70:0d:ef:62:96:ee:5f:9e:55:77:23:
9e:38:44:24:f7:c7:a9:07:f6:2f:11:58:99:43:43:
e0:18:d1:2b:0c:2e:cd:12:5a:9b:54:c1:a6:4a:58:
94:17:f4:ea:8f:75:82:9e:c0:14:d4:0c:5c:63:c3:
75:f6:9d:f8:78:12:85:ee:c7:6c:e9:b5:6f:f0:32:
a0:23:6c:88:81:bf:90:77:b5:04:b1:ff:1d:25:eb:
c9:68:ed:71:a0:4a:75:2a:99:9c:dc:41:5f:5a:f6:
bd:57:4b:bf:05:be:54:53:65:00:bc:86:fd:2f:2d:
1e:83:75:b2:a1:76:89:3e:3e:90:29:e5:c0:7a:d5:
e9:15:01:56:b3:82:a7:2f:e6:c5:ba:83:92:d7:3c:
48:14:e6:91:d1:63:c7:de:f8:26:9c:06:29:b2:94:
87:3b:9f:36:54:ef:fa:35:0a:f6:3c:52:72:a8:de:
8e:c1:6c:a1:d9:47:39:bb:d3:b4:47:f2:52:ea:af:
d4:fa:84:69:00:ee:ec:c8:f8:9b:27:e1:93:8f:8e:
e0:c9:9e:62:16:60:30:db:d0:07:4d:9e:33:67:7e:
57:d2:79:8f:f3:e7:91:51:84:93:2c:eb:77:d2:c7:
82:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A8:E0:96:C3:48:F3:3D:4C:67:BC:6C:2D:CA:1A:6A:05:2C:FC:66
X509v3 Authority Key Identifier:
keyid:87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/F6jglsNI8z1MZ7xsLcoaagUs_GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.248.0/23
Signature Algorithm: sha256WithRSAEncryption
81:f5:1f:6b:bf:3a:3a:37:be:b1:f4:cd:81:11:29:a9:59:f6:
79:08:e7:9a:e1:3a:2a:8f:44:2a:76:1c:bf:b6:bf:6c:80:9f:
38:a0:39:2a:63:62:ca:05:ad:45:d7:98:bc:d4:90:93:ef:61:
39:99:0d:6a:73:63:a5:d3:a2:e3:fa:ac:7c:3e:43:0b:e2:cd:
79:c4:dc:54:f4:df:39:ad:a4:00:26:77:ca:8a:d1:5b:a9:13:
4a:c8:46:c3:d2:35:e2:b9:01:b3:b3:0b:32:93:27:6d:36:8e:
6c:af:3c:b0:bc:f3:d4:ac:83:f8:bb:58:7f:13:2f:e4:b2:b5:
dc:24:bf:a9:b4:7f:13:be:5c:77:e2:91:62:16:00:77:18:1e:
86:a2:b3:ba:d9:8a:b3:28:61:0d:e1:f3:c2:e7:35:ac:b4:2f:
9a:07:05:ca:37:3f:64:b7:67:b6:95:41:43:aa:8d:65:53:f5:
6e:0b:97:04:f9:52:15:d8:b0:5d:a7:dc:32:5e:78:5e:13:9b:
1a:fd:89:f3:e5:1f:cd:9a:81:f8:49:36:a5:4a:d9:a9:1b:d7:
33:49:fb:ee:29:f6:82:e2:e2:a0:d2:57:3f:fe:47:52:3c:ed:
af:dd:6c:7e:e2:18:8a:61:33:76:59:82:15:0f:68:a2:af:be:
fb:8f:98:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3Kuz/lwtk4yG+wFPu5vsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3Yjk3NmUyYWFiOTIzMjQ4ZWU4MGVlNTdjYmQzNGFkODdi
Y2VmMzQwHhcNMjQwMTAxMTYzMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2E4ZTA5NmMzNDhmMzNkNGM2N2JjNmMyZGNhMWE2YTA1MmNmYzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcMuFSyTk5i2GnmaUaasxWAmcA3v
YpbuX55VdyOeOEQk98epB/YvEViZQ0PgGNErDC7NElqbVMGmSliUF/Tqj3WCnsAU
1AxcY8N19p34eBKF7sds6bVv8DKgI2yIgb+Qd7UEsf8dJevJaO1xoEp1Kpmc3EFf
Wva9V0u/Bb5UU2UAvIb9Ly0eg3WyoXaJPj6QKeXAetXpFQFWs4KnL+bFuoOS1zxI
FOaR0WPH3vgmnAYpspSHO582VO/6NQr2PFJyqN6OwWyh2Uc5u9O0R/JS6q/U+oRp
AO7syPibJ+GTj47gyZ5iFmAw29AHTZ4zZ35X0nmP8+eRUYSTLOt30seCUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBeo4JbDSPM9TGe8bC3KGmoFLPxmMB8GA1UdIwQY
MBaAFIe5duKquSMkjugO5Xy9NK2HvO80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMt
ZTFiOGZmMjVmNjBiLzEvRjZqZ2xzTkk4ejFNWjd4c0xjb2FhZ1VzX0dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMtZTFiOGZmMjVmNjBi
LzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwlj4MA0G
CSqGSIb3DQEBCwUAA4IBAQCB9R9rvzo6N76x9M2BESmpWfZ5COea4Toqj0Qqdhy/
tr9sgJ84oDkqY2LKBa1F15i81JCT72E5mQ1qc2Ol06Lj+qx8PkML4s15xNxU9N85
raQAJnfKitFbqRNKyEbD0jXiuQGzswsykydtNo5srzywvPPUrIP4u1h/Ey/ksrXc
JL+ptH8Tvlx34pFiFgB3GB6GorO62YqzKGEN4fPC5zWstC+aBwXKNz9kt2e2lUFD
qo1lU/VuC5cE+VIV2LBdp9wyXnheE5sa/Ynz5R/NmoH4STalStmpG9czSfvuKfaC
4uKg0lc//kdSPO2v3Wx+4hiKYTN2WYIVD2iir777j5j7
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:44 2025 by rpki-client