Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/nOa0aKxCPoOZBOSs4sOjaQeT_c0.roa
File: nOa0aKxCPoOZBOSs4sOjaQeT_c0.roa (raw, json)
Hash identifier: A1z3EEs+yAo2JjuNLjNW2uEgYZ1Gy8t75ZZ959U2zEg=
Subject key identifier: 9C:E6:B4:68:AC:42:3E:83:99:04:E4:AC:E2:C3:A3:69:07:93:FD:CD
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0195247A323997824B8E1177CAB9F0925D9F
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/nOa0aKxCPoOZBOSs4sOjaQeT_c0.roa
Signing time: Thu 20 Feb 2025 17:49:02 +0000
ROA not before: Thu 20 Feb 2025 17:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 329007
IP address blocks: 195.178.156.0/24 maxlen: 24
212.111.207.0/24 maxlen: 24
212.111.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 16:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:24:7a:32:39:97:82:4b:8e:11:77:ca:b9:f0:92:5d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Feb 20 17:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ce6b468ac423e839904e4ace2c3a3690793fdcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:21:6c:45:04:93:2d:c8:cd:8b:94:09:c5:96:
f4:c9:ea:25:0f:b7:f4:24:88:48:fe:1b:85:ce:41:
3b:2a:16:8c:51:0c:0b:98:a1:9b:8a:0a:c4:d6:8f:
e6:7e:4b:fd:4e:a9:34:01:e7:fb:dd:bf:c1:e3:fe:
05:57:c9:74:4b:d8:7d:ee:cf:13:5a:49:b4:6c:3e:
7c:ba:88:00:f5:b8:0f:ef:ff:dd:da:fb:88:fc:4a:
af:e7:98:d5:62:42:f3:95:a6:4f:a2:1c:14:9b:87:
f6:bb:c5:d0:6f:59:ef:9d:19:56:af:42:8b:56:f8:
01:ab:a2:47:8a:3e:21:8f:e6:4a:76:87:3e:a2:38:
79:0a:0e:b0:db:65:80:1b:69:11:1e:f5:7b:4b:48:
ed:ce:13:ec:6c:50:bb:82:43:1a:6a:21:8e:fe:7c:
b8:9f:fa:5b:9f:0b:d4:19:fb:e6:b4:43:d0:44:c1:
9f:67:1d:01:9f:1d:e8:5f:85:5e:af:92:6d:8f:f5:
dd:21:38:2e:c0:04:fa:3d:f8:03:36:38:9d:ff:a3:
7b:7c:78:d0:e8:d7:67:1d:3c:81:a1:a6:85:c3:3b:
b9:70:d4:c2:78:74:a5:22:57:f5:2b:99:b7:c4:e4:
26:6a:10:9d:a2:a8:3e:89:90:7b:b1:2a:c9:0f:31:
00:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E6:B4:68:AC:42:3E:83:99:04:E4:AC:E2:C3:A3:69:07:93:FD:CD
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/nOa0aKxCPoOZBOSs4sOjaQeT_c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.156.0/24
212.111.207.0/24
212.111.217.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:e4:eb:53:be:01:a9:e0:3c:bc:58:6d:2d:77:ca:78:46:95:
6a:3f:f3:49:4c:17:23:b7:50:35:36:f0:21:f6:d5:02:dc:96:
81:2b:db:c9:f3:a2:79:26:b1:6c:df:31:3f:5c:7f:34:10:32:
89:51:9f:a9:3b:58:dc:14:8d:4a:e7:7b:52:30:a8:e7:cd:89:
94:10:0b:c4:24:97:e4:7a:06:00:7d:46:da:4d:ce:08:6c:a5:
21:10:34:c9:54:6f:d8:82:fd:52:93:37:61:42:b8:6b:14:74:
d3:e2:6e:2b:39:1a:a3:83:00:de:f9:35:4f:11:ab:9f:0f:61:
95:cd:2d:c7:5f:4a:d9:cc:7c:7c:d6:e3:c2:70:5c:6e:be:e5:
bd:f3:83:96:fa:9a:a8:30:e2:68:bb:4f:9f:c4:3c:a4:23:f1:
f5:a2:11:8b:45:90:65:cc:49:31:6b:40:8d:67:eb:5d:51:33:
48:6c:86:3c:45:ad:62:2b:a7:df:f4:90:b8:f1:be:32:ac:9b:
9e:7c:c4:49:8b:91:fb:48:70:ed:9a:40:72:ae:05:6e:85:6a:
66:3f:57:5d:41:3d:04:6a:a7:71:79:8c:78:60:c9:87:35:44:
93:bd:0d:f9:ce:6d:d3:69:d2:23:22:42:2f:29:7b:15:05:58:
7a:f2:00:2c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZUkejI5l4JLjhF3yrnwkl2fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjUwMjIwMTc0OTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2U2YjQ2OGFjNDIzZTgzOTkwNGU0YWNlMmMzYTM2OTA3OTNmZGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyFsRQSTLcjNi5QJxZb0yeolD7f0
JIhI/huFzkE7KhaMUQwLmKGbigrE1o/mfkv9Tqk0Aef73b/B4/4FV8l0S9h97s8T
Wkm0bD58uogA9bgP7//d2vuI/Eqv55jVYkLzlaZPohwUm4f2u8XQb1nvnRlWr0KL
VvgBq6JHij4hj+ZKdoc+ojh5Cg6w22WAG2kRHvV7S0jtzhPsbFC7gkMaaiGO/ny4
n/pbnwvUGfvmtEPQRMGfZx0Bnx3oX4Ver5Jtj/XdITguwAT6PfgDNjid/6N7fHjQ
6NdnHTyBoaaFwzu5cNTCeHSlIlf1K5m3xOQmahCdoqg+iZB7sSrJDzEAiwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJzmtGisQj6DmQTkrOLDo2kHk/3NMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvbk9hMGFLeENQb09aQk9TczRzT2phUWVUX2MwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAw7KcAwQA
1G/PAwQA1G/ZMA0GCSqGSIb3DQEBCwUAA4IBAQC/5OtTvgGp4Dy8WG0td8p4RpVq
P/NJTBcjt1A1NvAh9tUC3JaBK9vJ86J5JrFs3zE/XH80EDKJUZ+pO1jcFI1K53tS
MKjnzYmUEAvEJJfkegYAfUbaTc4IbKUhEDTJVG/Ygv1SkzdhQrhrFHTT4m4rORqj
gwDe+TVPEaufD2GVzS3HX0rZzHx81uPCcFxuvuW984OW+pqoMOJou0+fxDykI/H1
ohGLRZBlzEkxa0CNZ+tdUTNIbIY8Ra1iK6ff9JC48b4yrJuefMRJi5H7SHDtmkBy
rgVuhWpmP1ddQT0EaqdxeYx4YMmHNUSTvQ35zm3TadIjIkIvKXsVBVh68gAs
-----END CERTIFICATE-----
Generated at Thu Apr 10 12:27:46 2025 by rpki-client