Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/S3PP0DtlWbtXt3DQAwXIc0NyQxU.roa
File: S3PP0DtlWbtXt3DQAwXIc0NyQxU.roa (raw, json)
Hash identifier: fiUj9BFsgO77PPszGoxft4GRr4tXqx+5r+FcwYbFjDk=
Subject key identifier: 4B:73:CF:D0:3B:65:59:BB:57:B7:70:D0:03:05:C8:73:43:72:43:15
Certificate issuer: /CN=e939540fd16b633501fbf7441a746fc56f9f59bf
Certificate serial: 01933DA5668C6FE9EF68B887EF03E598ADE8
Authority key identifier: E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/S3PP0DtlWbtXt3DQAwXIc0NyQxU.roa
Signing time: Mon 18 Nov 2024 05:01:09 +0000
ROA not before: Mon 18 Nov 2024 05:01:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214526
IP address blocks: 176.120.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 22 Dec 2024 18:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3d:a5:66:8c:6f:e9:ef:68:b8:87:ef:03:e5:98:ad:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e939540fd16b633501fbf7441a746fc56f9f59bf
Validity
Not Before: Nov 18 05:01:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b73cfd03b6559bb57b770d00305c87343724315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:82:14:91:56:42:66:31:89:c0:f1:a6:50:4f:
a1:60:86:ad:09:d6:45:1b:d4:aa:8e:45:76:38:b3:
25:2a:96:33:46:21:61:8e:b2:bb:b9:84:56:a0:66:
d7:3f:8e:90:33:5d:bc:b3:e5:f3:8a:4b:ec:d2:0b:
11:66:0b:b1:01:2a:3c:cd:16:a6:1d:e3:31:06:17:
56:11:b8:32:27:25:67:c2:6c:18:47:9e:bd:e6:72:
f3:ae:f0:21:57:f1:71:55:9c:75:23:ee:0d:29:ee:
38:c9:00:42:2f:de:aa:ce:14:5a:8e:97:9a:43:5c:
47:73:92:9d:03:a0:83:87:49:e0:86:fe:20:83:13:
41:ee:34:21:ec:77:36:3e:a7:83:22:1f:8f:15:2c:
54:9a:cc:92:28:ba:8b:4f:28:5a:98:53:43:1b:4f:
f7:4a:d3:b4:7f:47:e6:08:8c:d0:29:14:0b:0c:24:
2f:97:f4:3e:8a:7e:6e:45:d8:bf:bc:b1:b1:d4:40:
63:48:cc:fb:0c:d8:9c:81:96:c7:f9:7f:a3:81:47:
86:6c:ed:58:62:d0:02:16:03:e2:23:b1:98:32:97:
bc:73:67:1a:b4:1d:4d:f2:ea:ae:2a:79:39:75:a7:
f2:64:0a:fe:ee:5d:fb:ff:44:57:72:dc:32:cc:af:
16:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:73:CF:D0:3B:65:59:BB:57:B7:70:D0:03:05:C8:73:43:72:43:15
X509v3 Authority Key Identifier:
keyid:E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/S3PP0DtlWbtXt3DQAwXIc0NyQxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.17.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:54:c1:f7:9d:40:5d:a6:1a:63:f1:0c:1a:1e:06:d7:0f:be:
3b:f3:11:e9:fc:b7:17:9f:fa:37:e9:1f:5f:56:11:f8:61:0d:
0d:ca:eb:78:49:a2:5d:67:77:28:d3:b4:20:8a:98:20:c6:6a:
45:f6:3a:bc:87:4d:9f:5a:6d:c8:e1:11:3c:1c:b8:d6:67:73:
54:81:fa:1a:1b:ec:db:7f:64:77:da:92:05:28:d1:4d:c7:d2:
4d:d4:be:f4:ce:ac:78:24:3a:05:06:4c:98:d1:b6:73:76:a0:
2a:51:23:93:f5:fa:2c:f2:87:81:2b:21:2a:b6:6d:a3:28:1b:
40:5c:f6:a3:ce:14:a1:af:ac:4d:ff:d2:31:9b:bc:f2:9f:75:
a3:99:ff:6d:03:1b:e2:f5:9b:09:cc:1a:a1:b1:41:84:c1:0d:
fa:d7:80:74:0e:52:72:6d:32:1c:62:9f:85:dd:13:7b:36:a1:
59:a2:02:4d:37:03:ca:cc:82:26:45:20:df:d7:c7:3e:f2:e8:
dd:d8:b2:d6:ca:1b:b4:21:fa:18:d8:fa:c9:d3:45:da:17:bb:
06:82:9c:38:27:fb:44:fb:41:cd:89:77:a0:7f:93:4f:1a:98:
49:e1:fc:75:1a:89:69:92:58:8f:80:b3:d7:07:77:66:e8:0f:
a5:e5:40:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZM9pWaMb+nvaLiH7wPlmK3oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5Mzk1NDBmZDE2YjYzMzUwMWZiZjc0NDFhNzQ2ZmM1NmY5
ZjU5YmYwHhcNMjQxMTE4MDUwMTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjczY2ZkMDNiNjU1OWJiNTdiNzcwZDAwMzA1Yzg3MzQzNzI0MzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9oIUkVZCZjGJwPGmUE+hYIatCdZF
G9SqjkV2OLMlKpYzRiFhjrK7uYRWoGbXP46QM128s+Xzikvs0gsRZguxASo8zRam
HeMxBhdWEbgyJyVnwmwYR5695nLzrvAhV/FxVZx1I+4NKe44yQBCL96qzhRajpea
Q1xHc5KdA6CDh0nghv4ggxNB7jQh7Hc2PqeDIh+PFSxUmsySKLqLTyhamFNDG0/3
StO0f0fmCIzQKRQLDCQvl/Q+in5uRdi/vLGx1EBjSMz7DNicgZbH+X+jgUeGbO1Y
YtACFgPiI7GYMpe8c2catB1N8uquKnk5dafyZAr+7l37/0RXctwyzK8WbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEtzz9A7ZVm7V7dw0AMFyHNDckMVMB8GA1UdIwQY
MBaAFOk5VA/Ra2M1Afv3RBp0b8Vvn1m/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlRsVUQ5RnJZelVCLV9kRUduUnZ4Vy1mV2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81YWY0Y2UtMGVlZS00MTgyLTkwOTQt
OWY1MmM3MzBhY2RmLzEvUzNQUDBEdGxXYnRYdDNEUUF3WEljME55UXhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni81YWY0Y2UtMGVlZS00MTgyLTkwOTQtOWY1MmM3MzBhY2Rm
LzEvNlRsVUQ5RnJZelVCLV9kRUduUnZ4Vy1mV2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHgRMA0G
CSqGSIb3DQEBCwUAA4IBAQCLVMH3nUBdphpj8QwaHgbXD7478xHp/LcXn/o36R9f
VhH4YQ0Nyut4SaJdZ3co07QgipggxmpF9jq8h02fWm3I4RE8HLjWZ3NUgfoaG+zb
f2R32pIFKNFNx9JN1L70zqx4JDoFBkyY0bZzdqAqUSOT9fos8oeBKyEqtm2jKBtA
XPajzhShr6xN/9Ixm7zyn3Wjmf9tAxvi9ZsJzBqhsUGEwQ3614B0DlJybTIcYp+F
3RN7NqFZogJNNwPKzIImRSDf18c+8ujd2LLWyhu0IfoY2PrJ00XaF7sGgpw4J/tE
+0HNiXegf5NPGphJ4fx1GolpkliPgLPXB3dm6A+l5UBQ
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:04 2025 by rpki-client