Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/s8qlNDOgy0d0ExZTNAx5CUH-z5w.roa
File: s8qlNDOgy0d0ExZTNAx5CUH-z5w.roa (raw, json)
Hash identifier: /sbBdJ3pm7s86I+HTIiYXhVSt6a1mN6oqfq+SDcOUo0=
Subject key identifier: B3:CA:A5:34:33:A0:CB:47:74:13:16:53:34:0C:79:09:41:FE:CF:9C
Certificate issuer: /CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Certificate serial: 01926B7E4C7C4D7AA20B0002824B454B64EC
Authority key identifier: E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/s8qlNDOgy0d0ExZTNAx5CUH-z5w.roa
Signing time: Tue 08 Oct 2024 09:38:11 +0000
ROA not before: Tue 08 Oct 2024 09:38:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47304
IP address blocks: 93.184.192.0/20 maxlen: 20
185.155.80.0/22 maxlen: 22
2a07:91c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:7e:4c:7c:4d:7a:a2:0b:00:02:82:4b:45:4b:64:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Validity
Not Before: Oct 8 09:38:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3caa53433a0cb4774131653340c790941fecf9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8a:30:35:ce:22:41:67:e0:39:1c:63:fe:8f:
d3:fc:99:1d:a5:3f:cb:0f:5a:6d:a9:39:98:a5:b0:
36:79:7d:53:57:20:58:ed:db:4a:57:c9:21:fe:02:
a1:01:9f:6e:06:1c:7c:26:e4:b5:a5:08:18:ae:89:
21:f0:ba:3b:0f:6b:a3:34:1e:cf:e0:3e:a4:03:20:
51:d4:f6:b8:b0:1d:06:1a:51:0c:81:d0:6e:12:30:
58:4f:07:42:91:ea:5f:19:9a:90:05:18:31:00:49:
83:5d:9a:df:38:e9:81:9f:a0:70:d3:a9:4d:ce:10:
1a:f7:2b:e8:8b:f6:c3:96:21:5d:ea:2a:96:0b:54:
6d:ef:f3:ca:1e:8d:01:d6:27:c0:6a:47:9c:95:4e:
de:3a:28:2d:12:08:7a:d3:29:4c:35:b5:18:d9:6c:
ec:da:d2:6e:12:7e:96:6e:a7:b7:58:ce:df:7e:9c:
5f:2e:4e:5e:04:09:1f:a1:7e:1a:ec:11:55:7c:cf:
52:7a:3d:5e:f0:05:8f:89:e9:4b:82:ab:81:5e:18:
f6:c9:98:2e:e7:18:d3:68:44:ce:d1:ea:98:05:4c:
7d:98:48:ca:ff:c9:82:b3:aa:b8:b4:cf:e3:2d:16:
fb:a0:b6:5c:32:5a:9b:0a:3c:ec:21:a4:0b:c6:94:
75:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CA:A5:34:33:A0:CB:47:74:13:16:53:34:0C:79:09:41:FE:CF:9C
X509v3 Authority Key Identifier:
keyid:E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/s8qlNDOgy0d0ExZTNAx5CUH-z5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.184.192.0/20
185.155.80.0/22
IPv6:
2a07:91c0::/29
Signature Algorithm: sha256WithRSAEncryption
c1:4f:fd:d9:66:a4:5f:ee:07:68:be:db:09:fd:b4:0b:f6:e6:
e0:98:15:55:cc:29:4a:13:04:0b:a8:57:3b:b6:7f:6a:95:25:
6e:bd:e8:b9:db:a4:3c:82:b4:31:ae:45:66:05:0d:e5:4d:3f:
8a:38:43:c8:8b:4a:f4:29:b4:05:1b:16:0c:a9:a0:0c:5d:fe:
7c:d9:e2:ca:1c:f6:54:7d:b6:7f:02:d9:ad:1c:b5:ec:54:01:
9d:62:8b:69:f1:da:a4:b8:2a:4b:a2:01:a9:05:23:69:c0:e5:
41:7a:9a:e7:4c:c9:c5:33:ed:15:eb:88:2a:c3:e8:6c:b4:f9:
60:9b:e0:8d:a4:8d:8d:34:6b:63:07:e8:37:87:1f:a4:6a:d8:
da:2c:84:1d:06:ce:b4:6a:aa:9f:68:e9:7d:20:a5:a1:be:14:
1b:5c:94:96:69:2f:8a:18:1d:7c:2d:3b:b8:de:80:a1:22:df:
a5:09:8d:d0:39:5e:eb:be:b7:fd:dd:04:32:0d:60:28:10:79:
3b:56:99:81:b1:53:0d:ec:9a:ed:2f:9a:92:84:40:91:94:dc:
ec:23:5e:94:fa:ad:b1:80:bd:5f:0a:9f:54:85:64:aa:0d:2e:
9d:9c:34:a0:b5:62:20:46:0a:5f:0b:2a:d8:03:4d:0c:b9:26:
21:20:4f:88
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZJrfkx8TXqiCwACgktFS2TsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZDM2MmU0OGFjYmUwMDQ4ZTlkMTI1YTYyYjhkOWIxNDBj
YmZkZDQwHhcNMjQxMDA4MDkzODExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2NhYTUzNDMzYTBjYjQ3NzQxMzE2NTMzNDBjNzkwOTQxZmVjZjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YowNc4iQWfgORxj/o/T/JkdpT/L
D1ptqTmYpbA2eX1TVyBY7dtKV8kh/gKhAZ9uBhx8JuS1pQgYrokh8Lo7D2ujNB7P
4D6kAyBR1Pa4sB0GGlEMgdBuEjBYTwdCkepfGZqQBRgxAEmDXZrfOOmBn6Bw06lN
zhAa9yvoi/bDliFd6iqWC1Rt7/PKHo0B1ifAakeclU7eOigtEgh60ylMNbUY2Wzs
2tJuEn6Wbqe3WM7ffpxfLk5eBAkfoX4a7BFVfM9Sej1e8AWPielLgquBXhj2yZgu
5xjTaETO0eqYBUx9mEjK/8mCs6q4tM/jLRb7oLZcMlqbCjzsIaQLxpR1+QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFLPKpTQzoMtHdBMWUzQMeQlB/s+cMB8GA1UdIwQY
MBaAFOHTYuSKy+AEjp0SWmK42bFAy/3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84YWU1NzktMDAwYy00ZTczLTlmNjgt
M2FkYTM1MjY1MmI0LzEvczhxbE5ET2d5MGQwRXhaVE5BeDVDVUgtejV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84YWU1NzktMDAwYy00ZTczLTlmNjgtM2FkYTM1MjY1MmI0
LzEvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEXbjAAwQC
uZtQMA0EAgACMAcDBQMqB5HAMA0GCSqGSIb3DQEBCwUAA4IBAQDBT/3ZZqRf7gdo
vtsJ/bQL9ubgmBVVzClKEwQLqFc7tn9qlSVuvei526Q8grQxrkVmBQ3lTT+KOEPI
i0r0KbQFGxYMqaAMXf582eLKHPZUfbZ/AtmtHLXsVAGdYotp8dqkuCpLogGpBSNp
wOVBeprnTMnFM+0V64gqw+hstPlgm+CNpI2NNGtjB+g3hx+katjaLIQdBs60aqqf
aOl9IKWhvhQbXJSWaS+KGB18LTu43oChIt+lCY3QOV7rvrf93QQyDWAoEHk7VpmB
sVMN7JrtL5qShECRlNzsI16U+q2xgL1fCp9UhWSqDS6dnDSgtWIgRgpfCyrYA00M
uSYhIE+I
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:19 2025 by rpki-client