Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/8Rkr8wdKN8eXUr7Jb7DfMWcvvoU.roa
File: 8Rkr8wdKN8eXUr7Jb7DfMWcvvoU.roa (raw, json)
Hash identifier: 3p3E6PvlDYGhLFSoPJTcVZ1wGqosHtD4LNbxVFL6vGc=
Subject key identifier: F1:19:2B:F3:07:4A:37:C7:97:52:BE:C9:6F:B0:DF:31:67:2F:BE:85
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01942445371B227E1210CB196673E05E26F1
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/8Rkr8wdKN8eXUr7Jb7DfMWcvvoU.roa
Signing time: Wed 01 Jan 2025 23:48:23 +0000
ROA not before: Wed 01 Jan 2025 23:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214348
IP address blocks: 93.177.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 15:36:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:37:1b:22:7e:12:10:cb:19:66:73:e0:5e:26:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1192bf3074a37c79752bec96fb0df31672fbe85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:4e:5d:96:43:e5:a7:27:6d:2b:c8:58:43:
ea:f2:07:a8:b9:c2:c8:98:cd:00:f9:8a:3d:ef:cf:
3a:f7:c6:21:8b:6a:81:97:3a:62:5c:0b:40:e7:ff:
22:1b:0d:eb:c8:0b:80:0d:ca:9d:8a:60:f2:16:01:
70:77:95:31:5f:c2:6d:e2:95:7d:9d:d4:59:5d:68:
2f:4b:6b:83:69:35:13:51:95:52:99:6d:ff:43:cc:
63:ad:5e:7f:c1:07:6b:6e:09:77:f4:ef:69:eb:0a:
fd:d5:6f:58:81:a3:71:6c:bf:55:a8:3f:c4:b9:5e:
98:4a:72:e8:3a:31:29:8f:6b:50:d2:e7:26:0c:07:
c4:39:3e:b4:b8:0e:ea:6b:b3:48:af:31:e0:6c:12:
2f:d3:c6:9a:42:c1:f8:36:5e:aa:76:43:0e:21:17:
f7:44:6d:92:e6:f9:c7:18:68:90:71:65:81:d4:a3:
e4:0a:d9:7e:11:e7:15:7b:72:0d:ff:21:de:31:53:
bb:0f:db:17:5a:7d:5f:4f:25:e2:c8:d0:b3:86:9c:
83:41:60:a1:87:e5:2f:4d:a8:a9:f2:a7:29:4b:39:
df:7c:2d:a7:de:b4:d7:76:1a:97:f5:13:21:b3:12:
d5:c2:e4:7a:7a:15:9d:d8:5a:9b:78:78:6f:0a:54:
46:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:19:2B:F3:07:4A:37:C7:97:52:BE:C9:6F:B0:DF:31:67:2F:BE:85
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/8Rkr8wdKN8eXUr7Jb7DfMWcvvoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.106.0/24
Signature Algorithm: sha256WithRSAEncryption
28:c5:b4:0a:ba:d7:16:bd:97:cf:5a:62:f2:2e:1c:d9:3a:12:
34:4e:5d:50:11:e2:78:31:74:c5:e1:d8:a8:45:05:1a:d6:24:
c3:0e:06:da:8c:2c:5f:31:69:5a:81:d7:6d:73:fe:f7:09:c8:
7d:96:2a:98:c4:89:9d:6a:9d:a7:c6:bb:5d:b1:5a:bd:e5:28:
11:7c:ed:a5:5d:08:42:5c:0b:8b:8a:8c:28:a4:9b:85:8a:cb:
87:b1:8e:68:e2:b0:1d:62:05:9f:8d:47:c0:92:b3:a5:14:57:
39:6f:9e:61:90:24:ae:c3:ce:1b:9e:e4:d0:eb:94:1b:6f:e3:
6d:a6:66:4a:a0:a4:20:ee:26:77:1a:f0:bd:a7:31:f0:f3:14:
f3:c0:c2:54:84:89:b0:ad:a5:87:7e:c7:13:0a:46:71:ee:8b:
4c:23:32:c3:6e:a9:50:fd:3a:d9:0e:c3:a5:7b:98:75:1b:03:
b2:35:c9:3d:bc:00:fb:2a:61:f6:12:28:dc:06:f1:46:fe:6c:
fa:1c:50:91:a1:24:1b:8b:92:f2:2c:01:ca:e8:e2:dc:41:de:
c6:2f:19:5b:de:44:1b:45:ee:4b:3b:80:2f:17:36:bc:d6:aa:
e4:8e:dc:8a:1c:28:cc:cb:aa:ca:22:10:2b:fd:71:53:f0:e8:
75:e6:fd:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRTcbIn4SEMsZZnPgXibxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjUwMTAxMjM0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTE5MmJmMzA3NGEzN2M3OTc1MmJlYzk2ZmIwZGYzMTY3MmZiZTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEROXZZD5acnbSvIWEPq8geoucLI
mM0A+Yo9788698Yhi2qBlzpiXAtA5/8iGw3ryAuADcqdimDyFgFwd5UxX8Jt4pV9
ndRZXWgvS2uDaTUTUZVSmW3/Q8xjrV5/wQdrbgl39O9p6wr91W9YgaNxbL9VqD/E
uV6YSnLoOjEpj2tQ0ucmDAfEOT60uA7qa7NIrzHgbBIv08aaQsH4Nl6qdkMOIRf3
RG2S5vnHGGiQcWWB1KPkCtl+EecVe3IN/yHeMVO7D9sXWn1fTyXiyNCzhpyDQWCh
h+UvTaip8qcpSznffC2n3rTXdhqX9RMhsxLVwuR6ehWd2FqbeHhvClRG0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPEZK/MHSjfHl1K+yW+w3zFnL76FMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvOFJrcjh3ZEtOOGVYVXI3SmI3RGZNV2N2dm9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXbFqMA0G
CSqGSIb3DQEBCwUAA4IBAQAoxbQKutcWvZfPWmLyLhzZOhI0Tl1QEeJ4MXTF4dio
RQUa1iTDDgbajCxfMWlagddtc/73Cch9liqYxImdap2nxrtdsVq95SgRfO2lXQhC
XAuLiowopJuFisuHsY5o4rAdYgWfjUfAkrOlFFc5b55hkCSuw84bnuTQ65Qbb+Nt
pmZKoKQg7iZ3GvC9pzHw8xTzwMJUhImwraWHfscTCkZx7otMIzLDbqlQ/TrZDsOl
e5h1GwOyNck9vAD7KmH2EijcBvFG/mz6HFCRoSQbi5LyLAHK6OLcQd7GLxlb3kQb
Re5LO4AvFza81qrkjtyKHCjMy6rKIhAr/XFT8Oh15v0I
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:07:46 2025 by rpki-client