Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/aaEm4noWjnqNF45LWQrUhI5dvNw.roa
File: aaEm4noWjnqNF45LWQrUhI5dvNw.roa (raw, json)
Hash identifier: rYQ/erkD4ic17PRWzOSh4ucRTfo9LVgBnvLfsLrcJnQ=
Subject key identifier: 69:A1:26:E2:7A:16:8E:7A:8D:17:8E:4B:59:0A:D4:84:8E:5D:BC:DC
Certificate issuer: /CN=6f930698733bad33c081719c7b68bd19723a5a77
Certificate serial: 018D554CE6C4E5FFAC07291510B1CFCECEBD
Authority key identifier: 6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/aaEm4noWjnqNF45LWQrUhI5dvNw.roa
Signing time: Mon 29 Jan 2024 12:58:39 +0000
ROA not before: Mon 29 Jan 2024 12:58:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207928
IP address blocks: 194.153.77.0/24 maxlen: 24
194.153.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 14:57:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:55:4c:e6:c4:e5:ff:ac:07:29:15:10:b1:cf:ce:ce:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f930698733bad33c081719c7b68bd19723a5a77
Validity
Not Before: Jan 29 12:58:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69a126e27a168e7a8d178e4b590ad4848e5dbcdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ab:b7:bf:63:db:18:b9:6a:95:6a:dc:e5:5b:
4f:66:e8:cb:87:9a:18:61:fb:8c:e8:6a:ef:c2:1e:
93:2d:b7:34:3b:fa:02:7a:0d:f3:13:33:c2:ad:4a:
1c:1c:be:46:f2:cb:97:7e:e8:b6:33:17:c2:10:96:
45:91:f6:81:f0:ff:46:5f:e6:4a:97:59:90:0b:50:
b4:0e:09:d8:e5:0f:c1:94:ec:71:75:18:24:ba:f4:
cc:05:79:6d:de:0d:b0:23:05:57:6a:24:8d:20:08:
62:6e:5f:64:68:9e:4a:52:d2:90:53:47:15:69:1e:
4e:6f:7f:7b:d2:1e:da:2c:92:08:05:3a:90:46:8f:
b4:44:1b:63:a9:2c:92:d4:4c:5b:70:cd:9c:66:9d:
ca:0a:41:52:ac:75:e5:42:a2:ab:35:5e:87:a6:9a:
b5:d3:22:23:8f:87:ea:e4:44:07:43:e1:86:ce:4e:
38:dc:79:38:92:db:92:9d:e0:73:ad:28:07:cf:62:
97:0e:da:8b:8f:c7:3d:62:04:98:1d:15:8e:d0:ff:
f5:01:e0:8b:db:ee:cc:29:90:c8:72:cb:89:e1:90:
2f:bb:45:e4:39:f7:57:d1:e5:86:cc:a9:d4:af:5e:
d4:6a:9a:9a:ca:6f:e5:cc:a0:cd:50:38:0c:27:b0:
2c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A1:26:E2:7A:16:8E:7A:8D:17:8E:4B:59:0A:D4:84:8E:5D:BC:DC
X509v3 Authority Key Identifier:
keyid:6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/aaEm4noWjnqNF45LWQrUhI5dvNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.77.0/24
194.153.103.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:5e:4e:2e:04:f6:88:4f:66:90:a1:77:34:dc:ca:1e:dd:da:
95:68:75:02:fa:1a:ff:00:ca:1e:13:68:0a:44:f4:09:7f:e2:
f9:cd:e8:20:80:6b:17:5a:73:32:19:5d:bf:be:73:d0:a6:5c:
68:8f:8a:e8:b0:be:65:10:00:a4:7d:5c:5d:34:3a:6a:22:16:
22:15:ae:71:6f:46:21:96:7f:dc:71:46:44:59:bd:37:25:98:
fa:bc:37:3b:3b:69:7d:33:20:4b:08:95:3b:70:60:25:34:73:
2c:74:81:7c:74:59:54:6c:18:3e:78:fd:f1:25:88:03:62:7c:
6c:77:20:85:01:2e:d5:e1:46:d8:5e:06:62:54:85:5e:a7:64:
d8:cc:e6:ec:b1:f2:8d:b5:5a:c0:d5:4e:5f:68:da:ea:af:3c:
6d:6b:c0:55:3a:ed:f7:e9:e9:72:34:be:04:2f:a3:c3:51:ab:
41:56:a9:62:9c:d1:be:c8:44:16:ad:5b:9d:26:57:5e:89:b6:
d6:a1:b0:6b:6a:1b:06:f6:7d:93:a5:12:c2:5b:fb:ad:ec:14:
62:35:ea:34:61:e5:df:6e:fc:e4:d7:67:cf:c6:7d:73:3f:e9:
55:b9:c7:25:50:e2:6d:c2:d8:0f:9f:69:12:42:50:9a:76:91:
b9:c1:49:f1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY1VTObE5f+sBykVELHPzs69MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOTMwNjk4NzMzYmFkMzNjMDgxNzE5YzdiNjhiZDE5NzIz
YTVhNzcwHhcNMjQwMTI5MTI1ODM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWExMjZlMjdhMTY4ZTdhOGQxNzhlNGI1OTBhZDQ4NDhlNWRiY2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKu3v2PbGLlqlWrc5VtPZujLh5oY
YfuM6Grvwh6TLbc0O/oCeg3zEzPCrUocHL5G8suXfui2MxfCEJZFkfaB8P9GX+ZK
l1mQC1C0DgnY5Q/BlOxxdRgkuvTMBXlt3g2wIwVXaiSNIAhibl9kaJ5KUtKQU0cV
aR5Ob3970h7aLJIIBTqQRo+0RBtjqSyS1ExbcM2cZp3KCkFSrHXlQqKrNV6Hppq1
0yIjj4fq5EQHQ+GGzk443Hk4ktuSneBzrSgHz2KXDtqLj8c9YgSYHRWO0P/1AeCL
2+7MKZDIcsuJ4ZAvu0XkOfdX0eWGzKnUr17Uapqaym/lzKDNUDgMJ7AsBwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGmhJuJ6Fo56jReOS1kK1ISOXbzcMB8GA1UdIwQY
MBaAFG+TBphzO60zwIFxnHtovRlyOlp3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS81ZTYxZjctODM2My00YWNjLWI4YTQt
ZmUxMDNmZDM4NTdjLzEvYWFFbTRub1dqbnFORjQ1TFdRclVoSTVkdk53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS81ZTYxZjctODM2My00YWNjLWI4YTQtZmUxMDNmZDM4NTdj
LzEvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwplNAwQA
wplnMA0GCSqGSIb3DQEBCwUAA4IBAQAvXk4uBPaIT2aQoXc03Moe3dqVaHUC+hr/
AMoeE2gKRPQJf+L5zegggGsXWnMyGV2/vnPQplxoj4rosL5lEACkfVxdNDpqIhYi
Fa5xb0Yhln/ccUZEWb03JZj6vDc7O2l9MyBLCJU7cGAlNHMsdIF8dFlUbBg+eP3x
JYgDYnxsdyCFAS7V4UbYXgZiVIVep2TYzObssfKNtVrA1U5faNrqrzxta8BVOu33
6elyNL4EL6PDUatBVqlinNG+yEQWrVudJldeibbWobBrahsG9n2TpRLCW/ut7BRi
Neo0YeXfbvzk12fPxn1zP+lVucclUOJtwtgPn2kSQlCadpG5wUnx
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:34:13 2025 by rpki-client