Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/V8AkSvXIX61gVE7g80vsPJazV4c.roa
File: V8AkSvXIX61gVE7g80vsPJazV4c.roa (raw, json)
Hash identifier: c3K1CGC4Hx7VvkUOEVyuFw0y8i1VIiWVJoScZqCsnPQ=
Subject key identifier: 57:C0:24:4A:F5:C8:5F:AD:60:54:4E:E0:F3:4B:EC:3C:96:B3:57:87
Certificate issuer: /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial: 01927551417DF2990E20AB0A3B2BD9AB1491
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/V8AkSvXIX61gVE7g80vsPJazV4c.roa
Signing time: Thu 10 Oct 2024 07:25:12 +0000
ROA not before: Thu 10 Oct 2024 07:25:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31027
IP address blocks: 194.182.153.0/24 maxlen: 24
2a10:cf80:1001::/48 maxlen: 48
2a10:cf80:2001::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Oct 2024 07:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:75:51:41:7d:f2:99:0e:20:ab:0a:3b:2b:d9:ab:14:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
Validity
Not Before: Oct 10 07:25:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57c0244af5c85fad60544ee0f34bec3c96b35787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:26:8a:be:65:a9:f8:b7:77:3d:09:43:6e:
96:62:14:d6:f2:c5:da:d9:72:ff:92:56:25:cf:02:
a6:4f:39:1c:63:0d:91:59:96:43:b8:52:d9:39:77:
22:a3:a6:33:c2:10:23:f5:64:f3:da:5b:14:26:0c:
bf:f4:e6:f0:81:a4:45:92:d4:43:07:7c:30:bc:b7:
49:7b:ad:ec:0a:5a:6b:5b:de:39:75:c9:d3:5d:eb:
1b:ca:38:b0:3e:4b:99:f1:4b:32:75:b5:cf:1e:9a:
2a:fc:41:99:a1:4f:3a:be:8f:56:af:b9:f7:88:43:
0d:89:11:34:76:ff:5b:19:f7:34:06:85:18:26:da:
57:32:94:9b:22:45:61:a6:67:02:d8:51:83:74:e0:
66:70:05:1f:61:93:d1:02:02:28:d0:b0:f9:b8:80:
56:0e:ba:54:55:a8:08:3f:bb:3a:c8:37:5f:20:e9:
58:84:c6:fc:8d:3a:b0:d1:06:27:49:bc:1f:c0:3a:
49:e4:08:88:7b:09:c0:4a:e3:98:90:d6:63:65:d9:
26:bf:2f:d8:28:c4:7f:64:64:9a:00:73:83:85:c9:
32:15:bb:90:3f:26:6d:37:f5:96:61:2e:05:81:64:
26:fd:4f:6d:bc:e0:b1:d9:da:56:31:d5:a9:f9:0a:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C0:24:4A:F5:C8:5F:AD:60:54:4E:E0:F3:4B:EC:3C:96:B3:57:87
X509v3 Authority Key Identifier:
keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/V8AkSvXIX61gVE7g80vsPJazV4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.182.153.0/24
IPv6:
2a10:cf80:1001::/48
2a10:cf80:2001::/48
Signature Algorithm: sha256WithRSAEncryption
b3:b2:eb:22:49:06:dd:14:11:e4:fc:55:a8:da:7f:ec:53:47:
ed:60:2c:9c:41:50:66:fd:a7:a1:1b:82:57:6d:a4:14:c2:b4:
c5:46:af:f4:e7:ed:98:6f:48:bc:b3:9d:ff:a3:ff:00:cb:fa:
e5:bc:d1:39:05:55:35:93:10:57:b9:71:f9:66:c3:ca:a6:c6:
bf:4f:22:51:3f:14:10:b0:8c:49:39:4c:95:31:fa:d7:bb:47:
d8:b1:19:1d:38:a3:bc:b0:64:70:9d:8c:db:79:a8:8b:e3:49:
df:29:7e:f9:d1:73:8c:c9:31:9c:7c:a4:b7:31:5c:e6:35:de:
cd:0c:75:e4:4f:a7:91:71:6d:85:be:5a:85:43:0b:ca:a7:73:
03:57:58:71:17:f3:45:65:a0:18:3a:2a:8c:20:6b:f9:80:21:
43:62:8e:a6:5e:c4:c9:2c:a6:4e:3f:5d:52:14:b9:8e:d7:f1:
00:e1:0b:de:74:3e:0c:6e:0c:68:01:f9:f4:fa:14:db:5a:c8:
81:e3:e5:73:8a:93:8b:ed:d8:15:e0:e3:da:61:1e:79:bb:c0:
f9:b0:9c:7d:fd:26:0e:82:5f:81:1a:60:34:0b:3d:cd:37:75:
23:27:b0:58:87:c2:65:e0:75:a4:01:87:7d:5b:9e:0a:c8:b5:
c0:87:74:b0
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZJ1UUF98pkOIKsKOyvZqxSRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNmI2MzcxYjk0NWEzNWU5ZGYzMDhmZjQzODAzZTI2MTc4
NTEwNjkwHhcNMjQxMDEwMDcyNTEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2MwMjQ0YWY1Yzg1ZmFkNjA1NDRlZTBmMzRiZWMzYzk2YjM1Nzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEQmir5lqfi3dz0JQ26WYhTW8sXa
2XL/klYlzwKmTzkcYw2RWZZDuFLZOXcio6YzwhAj9WTz2lsUJgy/9ObwgaRFktRD
B3wwvLdJe63sClprW945dcnTXesbyjiwPkuZ8UsydbXPHpoq/EGZoU86vo9Wr7n3
iEMNiRE0dv9bGfc0BoUYJtpXMpSbIkVhpmcC2FGDdOBmcAUfYZPRAgIo0LD5uIBW
DrpUVagIP7s6yDdfIOlYhMb8jTqw0QYnSbwfwDpJ5AiIewnASuOYkNZjZdkmvy/Y
KMR/ZGSaAHODhckyFbuQPyZtN/WWYS4FgWQm/U9tvOCx2dpWMdWp+QowKQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFFfAJEr1yF+tYFRO4PNL7DyWs1eHMB8GA1UdIwQY
MBaAFExrY3G5RaNenfMI/0OAPiYXhRBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS80NDQ4YTctMWFjMS00NmFkLWE3Mjct
ZDk2MzkzYWYyZjIwLzEvVjhBa1N2WElYNjFnVkU3ZzgwdnNQSmF6VjRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS80NDQ4YTctMWFjMS00NmFkLWE3MjctZDk2MzkzYWYyZjIw
LzEvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAwraZMBgE
AgACMBIDBwAqEM+AEAEDBwAqEM+AIAEwDQYJKoZIhvcNAQELBQADggEBALOy6yJJ
Bt0UEeT8Vajaf+xTR+1gLJxBUGb9p6EbgldtpBTCtMVGr/Tn7ZhvSLyznf+j/wDL
+uW80TkFVTWTEFe5cflmw8qmxr9PIlE/FBCwjEk5TJUx+te7R9ixGR04o7ywZHCd
jNt5qIvjSd8pfvnRc4zJMZx8pLcxXOY13s0MdeRPp5FxbYW+WoVDC8qncwNXWHEX
80VloBg6Kowga/mAIUNijqZexMkspk4/XVIUuY7X8QDhC950PgxuDGgB+fT6FNta
yIHj5XOKk4vt2BXg49phHnm7wPmwnH39Jg6CX4EaYDQLPc03dSMnsFiHwmXgdaQB
h31bngrItcCHdLA=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:06 2025 by rpki-client