Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/sNCuKh5TEC-z_vKNYhmjwEHrAao.roa
File: sNCuKh5TEC-z_vKNYhmjwEHrAao.roa (raw, json)
Hash identifier: xHVdmk6Xckg6hOHOoae65YCjG+BRtGzOhm3r9Dlr3KM=
Subject key identifier: B0:D0:AE:2A:1E:53:10:2F:B3:FE:F2:8D:62:19:A3:C0:41:EB:01:AA
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0193D8ACC9BCEFD8CA2BA2D02382B2BEE0CC
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/sNCuKh5TEC-z_vKNYhmjwEHrAao.roa
Signing time: Wed 18 Dec 2024 07:30:22 +0000
ROA not before: Wed 18 Dec 2024 07:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53356
IP address blocks: 87.229.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d8:ac:c9:bc:ef:d8:ca:2b:a2:d0:23:82:b2:be:e0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Dec 18 07:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0d0ae2a1e53102fb3fef28d6219a3c041eb01aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:42:91:1a:4d:e3:2a:ed:b8:9e:aa:fb:fa:7e:
2d:22:08:af:f4:d8:02:ca:b9:ed:1b:f1:71:fc:46:
38:15:b7:e1:ef:13:df:82:a6:ef:7f:6c:1a:01:61:
5e:8d:c5:9c:70:c9:a9:d5:ba:0f:11:14:0b:86:26:
f5:87:18:f6:b9:86:2e:bc:ea:bd:91:2d:08:32:b6:
4b:5e:b9:62:9f:89:4e:3b:63:9b:0b:33:06:8f:cd:
fe:26:9e:74:5a:8e:6a:d4:b1:ef:86:a1:85:01:ee:
43:9c:07:d8:de:0c:de:5a:db:59:37:43:17:ec:38:
77:88:16:30:c0:35:30:df:85:1a:94:43:bf:61:f6:
8d:72:a1:de:9c:ab:2e:66:41:f8:06:bb:45:95:4d:
80:5b:67:5c:8b:4e:b4:aa:d2:fa:07:45:34:f4:ed:
f9:eb:06:8b:25:8d:9d:35:f7:9c:6e:bd:e7:2a:1c:
94:b7:43:4a:ad:fd:d2:76:b5:88:fb:f9:0d:14:e9:
aa:1f:49:a2:99:8a:fb:e6:0e:b2:26:16:26:b1:81:
d8:a1:c3:54:0c:ff:08:61:51:ef:85:66:ba:f6:4e:
6a:b2:60:ac:6d:07:df:21:94:cc:6a:3e:fe:fb:2c:
58:a1:27:23:a2:be:4a:1b:b7:0c:78:e7:55:db:89:
ff:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D0:AE:2A:1E:53:10:2F:B3:FE:F2:8D:62:19:A3:C0:41:EB:01:AA
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/sNCuKh5TEC-z_vKNYhmjwEHrAao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.0.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ab:f4:ff:76:d0:5b:9d:36:21:10:aa:c1:08:a7:cb:0e:05:
a0:e9:5e:1e:f4:03:cb:64:4e:e6:4a:c5:06:d3:c6:15:79:66:
09:a9:28:4b:31:1b:48:67:c4:6a:9c:b4:13:34:4c:dd:4b:95:
3e:a4:fb:5a:70:25:61:cf:1f:35:c9:78:49:fb:ff:26:05:1b:
43:23:b4:07:9e:4c:99:52:aa:84:91:dd:a4:67:c1:06:1b:4f:
da:01:92:05:92:a2:2a:87:f9:d9:e1:a2:01:90:40:98:f7:c1:
cc:95:73:45:bf:aa:b3:29:d1:e9:36:ba:22:2f:ea:31:93:4a:
97:4e:38:65:90:e6:bb:77:07:85:59:5e:09:53:ba:a4:32:dc:
f8:e3:fe:f1:ba:69:ed:09:72:5a:47:17:30:ee:48:cb:96:bf:
7c:6f:33:a1:0e:68:58:8f:6d:45:c8:85:5d:53:2e:11:50:94:
5c:c5:7d:ad:48:75:c1:b3:31:87:5d:27:9a:f3:1a:19:88:4c:
70:99:92:fb:55:6a:db:27:75:42:e6:ed:02:5f:34:d3:79:79:
7f:fc:38:d7:c0:81:d7:5c:0d:b4:f4:2a:a6:40:8b:4d:a1:e1:
93:41:f7:e1:01:55:82:f1:fe:4b:93:84:2a:c0:2b:db:0d:94:
a4:43:16:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPYrMm879jKK6LQI4KyvuDMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjQxMjE4MDczMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGQwYWUyYTFlNTMxMDJmYjNmZWYyOGQ2MjE5YTNjMDQxZWIwMWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0KRGk3jKu24nqr7+n4tIgiv9NgC
yrntG/Fx/EY4Fbfh7xPfgqbvf2waAWFejcWccMmp1boPERQLhib1hxj2uYYuvOq9
kS0IMrZLXrlin4lOO2ObCzMGj83+Jp50Wo5q1LHvhqGFAe5DnAfY3gzeWttZN0MX
7Dh3iBYwwDUw34UalEO/YfaNcqHenKsuZkH4BrtFlU2AW2dci060qtL6B0U09O35
6waLJY2dNfecbr3nKhyUt0NKrf3SdrWI+/kNFOmqH0mimYr75g6yJhYmsYHYocNU
DP8IYVHvhWa69k5qsmCsbQffIZTMaj7++yxYoScjor5KG7cMeOdV24n/QwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLDQrioeUxAvs/7yjWIZo8BB6wGqMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvc05DdUtoNVRFQy16X3ZLTllobWp3RUhyQWFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+UAMA0G
CSqGSIb3DQEBCwUAA4IBAQAYq/T/dtBbnTYhEKrBCKfLDgWg6V4e9APLZE7mSsUG
08YVeWYJqShLMRtIZ8RqnLQTNEzdS5U+pPtacCVhzx81yXhJ+/8mBRtDI7QHnkyZ
UqqEkd2kZ8EGG0/aAZIFkqIqh/nZ4aIBkECY98HMlXNFv6qzKdHpNroiL+oxk0qX
TjhlkOa7dweFWV4JU7qkMtz44/7xumntCXJaRxcw7kjLlr98bzOhDmhYj21FyIVd
Uy4RUJRcxX2tSHXBszGHXSea8xoZiExwmZL7VWrbJ3VC5u0CXzTTeXl//DjXwIHX
XA209CqmQItNoeGTQffhAVWC8f5Lk4QqwCvbDZSkQxaD
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:13:05 2025 by rpki-client