Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/AqWpYg1bU2k7JiKoj9uBO8ptBak.roa
File: AqWpYg1bU2k7JiKoj9uBO8ptBak.roa (raw, json)
Hash identifier: FolKcZPdQ5w6lAuO+QKL2LBzSWsJC7SzLJQwh7VgGko=
Subject key identifier: 02:A5:A9:62:0D:5B:53:69:3B:26:22:A8:8F:DB:81:3B:CA:6D:05:A9
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01915E4679F655D849B7906D5E2CC7BA0A58
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/AqWpYg1bU2k7JiKoj9uBO8ptBak.roa
Signing time: Sat 17 Aug 2024 02:59:22 +0000
ROA not before: Sat 17 Aug 2024 02:59:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208949
IP address blocks: 194.76.0.0/24 maxlen: 24
194.120.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Sep 2024 01:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5e:46:79:f6:55:d8:49:b7:90:6d:5e:2c:c7:ba:0a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Aug 17 02:59:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02a5a9620d5b53693b2622a88fdb813bca6d05a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:52:65:4f:ff:94:b2:c2:b6:e1:0c:e4:0f:ee:
59:9f:1f:ec:af:17:f6:70:ee:8e:52:04:5d:ca:a2:
6c:15:5e:36:91:55:50:f1:a5:88:8b:68:92:f2:51:
04:74:e7:6b:93:1d:e7:9f:c9:c4:1a:6a:79:93:a4:
b3:be:b5:80:c2:76:ff:7a:ae:ff:86:5a:d5:40:41:
21:c6:85:16:51:6f:de:b7:40:e8:38:5a:bd:ad:2f:
fd:b2:f5:1c:fb:a9:28:bb:42:52:fb:c3:41:25:7a:
71:27:12:e5:6c:8a:ec:01:d5:bd:36:db:bc:0a:0b:
23:f7:6d:46:e9:8a:84:22:4d:37:9a:94:4f:5c:26:
ce:b2:97:dd:ba:0d:0f:fd:db:b8:70:9f:ef:ca:3f:
55:c2:56:ca:1b:2c:af:e4:30:20:75:e5:6d:fc:67:
72:fa:c3:46:e5:e9:cd:35:d9:13:ee:9b:ca:01:6c:
92:21:81:47:19:59:46:3f:ee:86:2f:63:43:09:92:
ba:86:47:44:bd:1f:29:da:5e:a2:ff:22:1f:04:94:
05:a1:28:8a:c4:ba:8b:43:ff:5b:96:ca:ee:12:3d:
14:1f:e4:2b:ec:3f:67:32:39:90:f2:45:7a:78:01:
22:fb:75:e3:5a:ed:76:8e:27:5e:90:df:11:c1:41:
e3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A5:A9:62:0D:5B:53:69:3B:26:22:A8:8F:DB:81:3B:CA:6D:05:A9
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/AqWpYg1bU2k7JiKoj9uBO8ptBak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.0.0/24
194.120.144.0/24
Signature Algorithm: sha256WithRSAEncryption
53:07:47:92:07:23:3e:6e:22:d4:28:4a:98:98:e0:75:e9:43:
27:a2:57:66:4d:ad:0c:97:1b:77:dc:2b:42:73:09:59:ea:2d:
f3:ea:16:6c:a5:02:17:c4:af:28:16:86:ac:31:39:db:7a:79:
68:9f:05:ca:ab:cb:3f:02:4d:c5:e7:f5:22:1a:5d:e6:bf:87:
7e:29:50:02:ae:ae:1c:49:b4:83:59:3c:25:61:e5:ff:ed:d0:
98:ed:51:c5:52:8a:b9:7c:a3:af:b9:b9:02:20:a5:f1:a2:5b:
cb:3c:ad:38:c2:36:71:43:f6:70:bb:67:f8:27:b3:e6:f0:bd:
40:12:81:56:c5:0a:28:00:fc:9b:7f:26:fe:7d:24:8e:2b:28:
10:39:86:e2:e5:e2:6e:85:0c:b3:57:e0:27:ac:a1:e8:30:ba:
c5:e6:d7:4a:ce:34:b3:39:62:a6:22:2d:9c:89:f6:2a:b6:40:
70:dd:44:54:0f:99:93:d3:e0:cd:f0:58:ef:7a:31:51:2e:64:
6a:c3:6d:89:2d:2b:ba:2e:1c:06:2b:68:b8:ee:49:ae:86:68:
51:9d:ce:ae:0a:d2:7d:7a:fe:9d:d3:ab:eb:61:bd:3e:e6:04:
92:ab:35:0f:04:76:cc:2a:a0:5b:0c:11:cd:56:41:dc:d3:ee:
b8:7f:78:f3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZFeRnn2VdhJt5BtXizHugpYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjQwODE3MDI1OTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmE1YTk2MjBkNWI1MzY5M2IyNjIyYTg4ZmRiODEzYmNhNmQwNWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVJlT/+UssK24QzkD+5Znx/srxf2
cO6OUgRdyqJsFV42kVVQ8aWIi2iS8lEEdOdrkx3nn8nEGmp5k6SzvrWAwnb/eq7/
hlrVQEEhxoUWUW/et0DoOFq9rS/9svUc+6kou0JS+8NBJXpxJxLlbIrsAdW9Ntu8
Cgsj921G6YqEIk03mpRPXCbOspfdug0P/du4cJ/vyj9VwlbKGyyv5DAgdeVt/Gdy
+sNG5enNNdkT7pvKAWySIYFHGVlGP+6GL2NDCZK6hkdEvR8p2l6i/yIfBJQFoSiK
xLqLQ/9blsruEj0UH+Qr7D9nMjmQ8kV6eAEi+3XjWu12jidekN8RwUHjjQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAKlqWINW1NpOyYiqI/bgTvKbQWpMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvQXFXcFlnMWJVMms3SmlLb2o5dUJPOHB0QmFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwkwAAwQA
wniQMA0GCSqGSIb3DQEBCwUAA4IBAQBTB0eSByM+biLUKEqYmOB16UMnoldmTa0M
lxt33CtCcwlZ6i3z6hZspQIXxK8oFoasMTnbenlonwXKq8s/Ak3F5/UiGl3mv4d+
KVACrq4cSbSDWTwlYeX/7dCY7VHFUoq5fKOvubkCIKXxolvLPK04wjZxQ/Zwu2f4
J7Pm8L1AEoFWxQooAPybfyb+fSSOKygQOYbi5eJuhQyzV+AnrKHoMLrF5tdKzjSz
OWKmIi2cifYqtkBw3URUD5mT0+DN8FjvejFRLmRqw22JLSu6LhwGK2i47kmuhmhR
nc6uCtJ9ev6d06vrYb0+5gSSqzUPBHbMKqBbDBHNVkHc0+64f3jz
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:51 2025 by rpki-client