Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/TqDpEZ_T4bMne53DF9ml0rzNKj4.roa
File: TqDpEZ_T4bMne53DF9ml0rzNKj4.roa (raw, json)
Hash identifier: P+N65HRtAiMgnvPkUtxgZzx8B4ygLb8xtZBRCybH9pg=
Subject key identifier: 4E:A0:E9:11:9F:D3:E1:B3:27:7B:9D:C3:17:D9:A5:D2:BC:CD:2A:3E
Certificate issuer: /CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Certificate serial: 018CC424EC8192DB8E4E50681A1D2C1BFD8F
Authority key identifier: A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/TqDpEZ_T4bMne53DF9ml0rzNKj4.roa
Signing time: Mon 01 Jan 2024 08:30:03 +0000
ROA not before: Mon 01 Jan 2024 08:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212801
IP address blocks: 193.108.164.0/24 maxlen: 24
2001:67c:58c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:ec:81:92:db:8e:4e:50:68:1a:1d:2c:1b:fd:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Validity
Not Before: Jan 1 08:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ea0e9119fd3e1b3277b9dc317d9a5d2bccd2a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e3:40:a9:29:51:9d:e1:e4:25:ca:25:c5:1a:
09:f1:93:ba:f7:1d:66:52:3f:80:9d:d4:df:90:33:
99:bf:10:3f:e1:74:64:56:56:9c:44:b1:fd:ec:9c:
ed:a2:3a:9a:b5:72:94:ee:9f:2d:89:bc:43:c0:d0:
d8:19:e5:db:c4:f2:b1:97:ad:f2:2b:cd:b0:3d:bd:
9f:7f:59:8f:31:57:13:bb:ff:76:10:31:d7:28:35:
8d:2a:f0:b8:a5:b3:1f:2d:e0:de:cc:0f:bb:bf:c2:
44:ed:bf:47:e1:2c:cf:32:a1:7c:a1:59:75:2c:24:
e2:d6:47:4f:8a:74:bc:48:56:2c:bd:7c:28:ff:f7:
c1:4d:68:42:31:67:be:6b:35:4d:b6:90:62:e5:ec:
91:e7:ce:03:48:71:9b:a5:6b:02:a1:3b:eb:93:c2:
34:07:29:82:a9:82:7b:d4:04:dc:7d:b9:eb:7d:64:
19:44:12:e9:40:a5:85:6d:ae:ed:f7:4d:d8:ee:18:
58:22:76:6e:33:65:db:3e:0e:23:9b:c7:42:3f:9a:
67:4a:52:7e:a0:65:4c:13:4c:75:a3:cf:3a:1e:e1:
30:29:27:cf:2f:e5:6f:28:22:8d:cb:23:c9:61:b4:
84:a7:1f:b0:ef:8b:b3:f6:35:cc:48:06:7c:34:fa:
5c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A0:E9:11:9F:D3:E1:B3:27:7B:9D:C3:17:D9:A5:D2:BC:CD:2A:3E
X509v3 Authority Key Identifier:
keyid:A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/TqDpEZ_T4bMne53DF9ml0rzNKj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.164.0/24
IPv6:
2001:67c:58c::/48
Signature Algorithm: sha256WithRSAEncryption
b4:4f:1b:6f:5d:20:6b:2b:bb:8e:d9:72:d1:8f:a9:7d:88:d5:
c4:21:45:d1:2c:cc:0b:29:a4:5d:5c:5c:a8:8f:a8:8c:47:e6:
a5:e6:41:79:bb:ed:5e:4a:fb:5c:f1:24:4d:4f:6d:87:90:e4:
7c:0f:fc:7c:d3:f4:53:fa:3c:2f:8d:bd:bf:f0:eb:e5:b2:7c:
ba:d6:bc:c9:f7:ea:da:30:ab:24:a5:66:fe:8d:33:7d:8d:29:
9a:e0:b5:70:c2:e1:64:db:9b:0d:9c:10:cd:5c:ea:66:73:22:
a7:c5:fb:15:b1:87:18:17:54:09:a4:d2:00:bb:6a:6e:05:14:
01:f5:4e:34:1c:38:c9:7d:f7:3b:17:06:94:07:ff:f2:7f:73:
d9:92:2d:77:61:31:9d:4e:b7:a6:2f:e4:a6:b0:7c:17:8a:e7:
61:e6:ff:29:01:6f:30:40:1c:2e:28:7a:65:e4:1f:77:ba:73:
01:99:36:c3:f4:39:c7:4a:f6:87:80:20:d7:be:32:74:3e:43:
f3:01:ab:1c:f5:f5:19:be:79:aa:de:cc:f3:18:7e:a2:7f:82:
8a:8c:73:db:af:15:a7:12:fe:3a:a3:d9:06:96:4a:9b:c6:35:
8e:62:0b:1e:bc:3a:eb:88:54:aa:aa:5f:ee:c3:53:97:17:6d:
67:61:85:4a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzEJOyBktuOTlBoGh0sG/2PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NDBjNzUxZWJmYjQ4MDdkODQ2MjJlODA2Y2IzZDBiOWRk
ODEwNjkwHhcNMjQwMTAxMDgzMDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWEwZTkxMTlmZDNlMWIzMjc3YjlkYzMxN2Q5YTVkMmJjY2QyYTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+NAqSlRneHkJcolxRoJ8ZO69x1m
Uj+AndTfkDOZvxA/4XRkVlacRLH97JztojqatXKU7p8tibxDwNDYGeXbxPKxl63y
K82wPb2ff1mPMVcTu/92EDHXKDWNKvC4pbMfLeDezA+7v8JE7b9H4SzPMqF8oVl1
LCTi1kdPinS8SFYsvXwo//fBTWhCMWe+azVNtpBi5eyR584DSHGbpWsCoTvrk8I0
BymCqYJ71ATcfbnrfWQZRBLpQKWFba7t903Y7hhYInZuM2XbPg4jm8dCP5pnSlJ+
oGVME0x1o886HuEwKSfPL+VvKCKNyyPJYbSEpx+w74uz9jXMSAZ8NPpcbQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE6g6RGf0+GzJ3udwxfZpdK8zSo+MB8GA1UdIwQY
MBaAFKZAx1Hr+0gH2EYi6AbLPQud2BBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGtESFVldjdTQWZZUmlMb0JzczlDNTNZRUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84YTVhMmUtNGQzMy00YTJjLWFkZjMt
MDI2YjhjZjY5MWJhLzEvVHFEcEVaX1Q0Yk1uZTUzREY5bWwwcnpOS2o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC84YTVhMmUtNGQzMy00YTJjLWFkZjMtMDI2YjhjZjY5MWJh
LzEvcGtESFVldjdTQWZZUmlMb0JzczlDNTNZRUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwWykMA8E
AgACMAkDBwAgAQZ8BYwwDQYJKoZIhvcNAQELBQADggEBALRPG29dIGsru47ZctGP
qX2I1cQhRdEszAsppF1cXKiPqIxH5qXmQXm77V5K+1zxJE1PbYeQ5HwP/HzT9FP6
PC+Nvb/w6+WyfLrWvMn36towqySlZv6NM32NKZrgtXDC4WTbmw2cEM1c6mZzIqfF
+xWxhxgXVAmk0gC7am4FFAH1TjQcOMl99zsXBpQH//J/c9mSLXdhMZ1Ot6Yv5Kaw
fBeK52Hm/ykBbzBAHC4oemXkH3e6cwGZNsP0OcdK9oeAINe+MnQ+Q/MBqxz19Rm+
earezPMYfqJ/goqMc9uvFacS/jqj2QaWSpvGNY5iCx68OuuIVKqqX+7DU5cXbWdh
hUo=
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:03:14 2025 by rpki-client