Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3XcF71oxC9Ez2DUBlhsVBH02ZBk.roa
File: 3XcF71oxC9Ez2DUBlhsVBH02ZBk.roa (raw, json)
Hash identifier: OuI8fbrxA0Xwdi96nO4aRwV1ly66KKYF7JKs42u8rh4=
Subject key identifier: DD:77:05:EF:5A:31:0B:D1:33:D8:35:01:96:1B:15:04:7D:36:64:19
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29E1793BE01B0B12D6993F4C7AEB97
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3XcF71oxC9Ez2DUBlhsVBH02ZBk.roa
Signing time: Tue 02 Jan 2024 12:33:11 +0000
ROA not before: Tue 02 Jan 2024 12:33:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12389
IP address blocks: 95.47.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 10:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e1:79:3b:e0:1b:0b:12:d6:99:3f:4c:7a:eb:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd7705ef5a310bd133d83501961b15047d366419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f9:c9:1e:62:44:31:0b:54:cc:c4:57:b9:60:
5d:0d:12:d5:e7:e3:5d:78:ff:cb:7d:9a:cb:53:90:
1a:3e:f2:19:8a:94:5a:91:ed:6d:1c:76:15:3d:e1:
ef:e4:65:28:5f:4b:6c:79:71:75:f5:b8:d0:ee:8f:
9f:d5:12:89:48:90:b9:84:b6:e5:3e:15:47:e0:df:
23:51:7c:d8:69:26:f6:44:14:03:dd:53:f3:ff:4e:
42:87:72:08:50:ad:5a:7b:a5:77:45:79:67:d0:8a:
9a:1e:42:fe:d6:0f:55:04:f0:5d:41:87:3f:f4:29:
44:50:66:db:ca:64:54:14:35:9d:77:1d:12:d2:f8:
57:78:ed:56:c1:9c:0b:a9:03:b0:18:26:59:9a:52:
68:05:38:97:b1:82:c7:a5:82:2c:85:49:4f:c9:4b:
dc:f2:70:03:d5:fd:ec:8d:03:58:db:85:16:f3:46:
06:f2:a8:b4:eb:12:f9:d2:d1:f2:a6:b1:81:2f:a3:
07:34:bb:23:55:c7:63:8b:97:ac:3f:4e:39:d5:42:
18:6e:a9:55:56:b1:55:45:e4:3e:b5:59:cf:6d:8f:
5b:6a:09:f7:8f:b8:99:d4:9d:aa:e2:46:79:13:09:
61:f7:e4:25:76:8f:e4:b7:4f:59:50:93:38:9f:3f:
d6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:77:05:EF:5A:31:0B:D1:33:D8:35:01:96:1B:15:04:7D:36:64:19
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3XcF71oxC9Ez2DUBlhsVBH02ZBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.152.0/24
Signature Algorithm: sha256WithRSAEncryption
27:de:31:0f:95:ea:e5:78:ad:ca:70:97:4d:e2:3e:48:d4:de:
fb:ab:cb:0e:4b:26:74:63:ad:f4:da:32:bd:9a:c6:1d:e3:2f:
0b:a4:b7:f2:6c:b1:6b:2a:8a:87:b5:8a:f8:a6:a5:b5:47:e6:
9d:6b:66:f0:01:39:08:7d:98:c1:1a:b8:2e:60:dc:58:7a:03:
92:44:41:8c:34:5b:7b:a9:c5:75:8c:d1:34:76:b2:58:d9:17:
b0:00:16:a6:d1:12:0b:e4:de:a1:cb:45:a4:4a:49:37:32:c7:
f5:ba:5d:7d:7e:1a:4e:44:6b:1c:e8:46:e0:e5:a3:0f:c3:81:
28:77:f8:91:f6:17:11:77:71:df:c8:1e:4f:2a:70:68:be:bc:
80:fb:8e:7d:0d:8e:ca:26:01:76:6d:68:c9:42:0f:7b:fe:b0:
8f:f3:b6:19:7e:c9:b4:fc:7d:d3:be:bc:24:24:a7:2b:63:41:
ba:c5:5d:b3:38:23:41:e0:4b:07:e5:d8:e2:75:4d:5a:fd:95:
c7:d1:20:84:84:95:c3:ef:ea:42:c9:f6:ac:45:49:98:08:9d:
93:1f:6d:42:40:2d:dc:0c:24:5f:40:99:58:48:60:1a:2a:be:
a6:44:83:4a:0b:11:fc:4d:be:85:5c:23:2c:24:62:7f:c0:af:
f3:26:8c:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKeF5O+AbCxLWmT9MeuuXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDc3MDVlZjVhMzEwYmQxMzNkODM1MDE5NjFiMTUwNDdkMzY2NDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvnJHmJEMQtUzMRXuWBdDRLV5+Nd
eP/LfZrLU5AaPvIZipRake1tHHYVPeHv5GUoX0tseXF19bjQ7o+f1RKJSJC5hLbl
PhVH4N8jUXzYaSb2RBQD3VPz/05Ch3IIUK1ae6V3RXln0IqaHkL+1g9VBPBdQYc/
9ClEUGbbymRUFDWddx0S0vhXeO1WwZwLqQOwGCZZmlJoBTiXsYLHpYIshUlPyUvc
8nAD1f3sjQNY24UW80YG8qi06xL50tHyprGBL6MHNLsjVcdji5esP0451UIYbqlV
VrFVReQ+tVnPbY9bagn3j7iZ1J2q4kZ5Ewlh9+Qldo/kt09ZUJM4nz/WFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN13Be9aMQvRM9g1AZYbFQR9NmQZMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvM1hjRjcxb3hDOUV6MkRVQmxoc1ZCSDAyWkJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy+YMA0G
CSqGSIb3DQEBCwUAA4IBAQAn3jEPlerleK3KcJdN4j5I1N77q8sOSyZ0Y6302jK9
msYd4y8LpLfybLFrKoqHtYr4pqW1R+ada2bwATkIfZjBGrguYNxYegOSREGMNFt7
qcV1jNE0drJY2RewABam0RIL5N6hy0WkSkk3Msf1ul19fhpORGsc6Ebg5aMPw4Eo
d/iR9hcRd3HfyB5PKnBovryA+459DY7KJgF2bWjJQg97/rCP87YZfsm0/H3Tvrwk
JKcrY0G6xV2zOCNB4EsH5djidU1a/ZXH0SCEhJXD7+pCyfasRUmYCJ2TH21CQC3c
DCRfQJlYSGAaKr6mRINKCxH8Tb6FXCMsJGJ/wK/zJozA
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:41 2025 by rpki-client