Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/n2hNKHqeTPzBa5rqPLjF4IDGmPw.roa
File: n2hNKHqeTPzBa5rqPLjF4IDGmPw.roa (raw, json)
Hash identifier: fmZwqtE8DQpbgxUmthjdFAfjZU9hXuwq0eguOAzuZdM=
Subject key identifier: 9F:68:4D:28:7A:9E:4C:FC:C1:6B:9A:EA:3C:B8:C5:E0:80:C6:98:FC
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0193CB016DAF569E2A45E6006113F7435858
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/n2hNKHqeTPzBa5rqPLjF4IDGmPw.roa
Signing time: Sun 15 Dec 2024 15:48:08 +0000
ROA not before: Sun 15 Dec 2024 15:48:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212219
IP address blocks: 193.35.153.0/24 maxlen: 24
193.35.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cb:01:6d:af:56:9e:2a:45:e6:00:61:13:f7:43:58:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Dec 15 15:48:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f684d287a9e4cfcc16b9aea3cb8c5e080c698fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:3e:db:de:f6:e1:06:bb:d4:2a:0d:d3:df:
cb:06:5c:e2:ad:39:6b:26:14:52:bb:4a:62:73:e2:
58:c2:7a:00:b4:2d:4d:c7:67:6b:78:78:37:59:11:
ff:0c:88:a3:dc:07:b8:1f:ed:2c:3e:40:ac:05:7c:
dc:6e:25:a5:60:6a:aa:11:42:6a:ae:d5:39:0c:c3:
56:9c:a7:c7:ce:05:40:a3:75:41:2d:11:85:17:8d:
77:57:aa:ee:95:cd:ef:3b:f0:43:15:60:f3:ff:6a:
7b:b0:39:e1:98:1b:99:8e:ed:cd:21:fb:5c:72:6f:
24:a5:ca:67:87:d6:54:ef:33:bc:a4:6a:b8:c6:d0:
d0:15:41:57:2e:6e:94:e7:4f:11:a8:98:2a:1d:c2:
7b:56:97:bf:59:68:95:68:88:15:ba:ea:81:49:6f:
3a:9b:75:b1:b1:46:04:e2:cd:01:96:c1:f8:34:99:
26:47:06:93:39:e1:e6:56:14:7e:95:e6:e8:f1:62:
94:50:6f:07:81:6d:1c:d6:f4:b0:fc:38:54:77:df:
af:9b:12:97:4c:91:31:86:27:cf:16:3d:30:dd:27:
d7:cb:e9:72:49:85:0d:80:24:2c:72:52:78:1d:2c:
99:a5:fb:01:3d:7f:5e:dc:23:61:43:38:fe:8f:49:
a2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:68:4D:28:7A:9E:4C:FC:C1:6B:9A:EA:3C:B8:C5:E0:80:C6:98:FC
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/n2hNKHqeTPzBa5rqPLjF4IDGmPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.153.0-193.35.154.255
Signature Algorithm: sha256WithRSAEncryption
56:ca:0c:4f:27:37:c6:4f:3b:eb:50:02:2f:3a:61:29:f0:93:
b8:47:49:9d:b5:9d:9d:f9:bd:a2:c1:19:c5:96:9e:e9:2a:11:
8b:7f:8d:45:16:8b:4c:01:eb:01:2c:bb:7d:34:fb:f6:5c:54:
77:c6:d3:f0:59:e3:cd:7e:fd:4f:76:9e:7f:ec:39:e2:54:58:
7c:7a:91:f7:b1:07:f3:9f:af:0a:3d:5f:b8:f6:c1:eb:e4:21:
bc:9f:bd:ab:4e:03:0e:39:21:93:73:51:0f:09:03:1b:45:9c:
45:11:cd:db:cb:f8:fb:3e:23:e2:80:e8:43:9f:32:b6:53:3b:
6e:99:ac:41:4a:e5:dd:a1:cb:6e:b5:b9:57:f3:f7:7c:09:03:
0b:55:45:01:61:d4:0a:60:4a:2c:37:04:1a:3f:17:93:ba:fa:
80:8b:40:6b:8e:fb:ce:95:75:4f:43:4c:b9:69:74:b3:0e:f4:
c8:f4:79:f1:b8:b9:a7:60:6c:ff:18:62:7d:6a:0d:30:f5:97:
8e:3a:6f:43:ea:30:63:fe:d5:72:79:41:15:1e:d0:2a:aa:1d:
e2:fd:95:2e:19:19:1c:71:54:ed:a2:0b:a6:85:1e:17:74:80:
14:a7:0e:24:60:fd:c7:91:31:4a:a1:60:80:9d:38:ec:bf:25:
27:e7:b5:61
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZPLAW2vVp4qReYAYRP3Q1hYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjQxMjE1MTU0ODA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjY4NGQyODdhOWU0Y2ZjYzE2YjlhZWEzY2I4YzVlMDgwYzY5OGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt8+29724Qa71CoN09/LBlzirTlr
JhRSu0pic+JYwnoAtC1Nx2dreHg3WRH/DIij3Ae4H+0sPkCsBXzcbiWlYGqqEUJq
rtU5DMNWnKfHzgVAo3VBLRGFF413V6rulc3vO/BDFWDz/2p7sDnhmBuZju3NIftc
cm8kpcpnh9ZU7zO8pGq4xtDQFUFXLm6U508RqJgqHcJ7Vpe/WWiVaIgVuuqBSW86
m3WxsUYE4s0BlsH4NJkmRwaTOeHmVhR+lebo8WKUUG8HgW0c1vSw/DhUd9+vmxKX
TJExhifPFj0w3SfXy+lySYUNgCQsclJ4HSyZpfsBPX9e3CNhQzj+j0miaQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJ9oTSh6nkz8wWua6jy4xeCAxpj8MB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvbjJoTktIcWVUUHpCYTVycVBMakY0SURHbVB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADBI5kD
BADBI5owDQYJKoZIhvcNAQELBQADggEBAFbKDE8nN8ZPO+tQAi86YSnwk7hHSZ21
nZ35vaLBGcWWnukqEYt/jUUWi0wB6wEsu300+/ZcVHfG0/BZ481+/U92nn/sOeJU
WHx6kfexB/Ofrwo9X7j2wevkIbyfvatOAw45IZNzUQ8JAxtFnEURzdvL+Ps+I+KA
6EOfMrZTO26ZrEFK5d2hy261uVfz93wJAwtVRQFh1ApgSiw3BBo/F5O6+oCLQGuO
+86VdU9DTLlpdLMO9Mj0efG4uadgbP8YYn1qDTD1l446b0PqMGP+1XJ5QRUe0Cqq
HeL9lS4ZGRxxVO2iC6aFHhd0gBSnDiRg/ceRMUqhYICdOOy/JSfntWE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:40 2025 by rpki-client