Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/l3kpPm-F93k_-DSOc79kufegZ9Q.roa
File: l3kpPm-F93k_-DSOc79kufegZ9Q.roa (raw, json)
Hash identifier: 7cfAcV7neQ6Ugol5t/Esxo5TjDHsoR+GjJjgJpsp+YE=
Subject key identifier: 97:79:29:3E:6F:85:F7:79:3F:F8:34:8E:73:BF:64:B9:F7:A0:67:D4
Certificate issuer: /CN=10d267860d3a403b00e1a61c5434acff6eb97394
Certificate serial: 018CC8DF57811792F107088D84A63ED79849
Authority key identifier: 10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/l3kpPm-F93k_-DSOc79kufegZ9Q.roa
Signing time: Tue 02 Jan 2024 06:32:09 +0000
ROA not before: Tue 02 Jan 2024 06:32:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24806
IP address blocks: 193.105.158.0/23 maxlen: 32
193.105.157.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:57:81:17:92:f1:07:08:8d:84:a6:3e:d7:98:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d267860d3a403b00e1a61c5434acff6eb97394
Validity
Not Before: Jan 2 06:32:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9779293e6f85f7793ff8348e73bf64b9f7a067d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:9b:f4:ac:91:cc:bc:43:8f:7f:b0:48:32:
24:85:49:9b:7e:7b:1a:2f:be:d9:7d:fd:22:42:c1:
15:30:a0:98:52:14:e2:07:7e:4d:98:95:e5:86:0f:
8d:6e:56:58:3b:63:e6:3c:83:72:d3:6c:29:03:20:
da:d1:fa:94:15:32:cf:21:6f:18:9b:a9:f8:db:64:
ec:e0:3b:c2:fd:98:ae:ec:08:77:d7:47:af:08:54:
5f:c9:86:c8:f0:e0:e8:a2:b7:49:2e:28:1c:63:9c:
d9:2e:5e:bd:d4:c6:b2:7d:9e:2a:6b:e1:71:97:d8:
26:b3:3e:93:73:f1:5b:f7:9a:b4:69:a1:c0:9d:c3:
3e:1b:0a:41:b6:ab:4d:0e:8f:d2:44:d2:4f:cd:54:
16:57:df:6b:97:e5:6a:65:cc:f4:5a:b3:8e:a3:67:
11:28:9f:c1:dc:9e:e7:13:5b:a7:dc:d5:47:2c:9c:
b2:84:32:4e:87:c7:7e:61:92:a1:21:d6:ec:c6:47:
7e:0d:be:5d:39:79:d3:24:f0:38:90:62:93:36:5b:
57:40:42:49:b0:cc:ca:2c:79:7e:32:66:d5:98:0d:
73:0b:06:dc:4a:25:2a:f1:16:f1:ac:bc:fb:53:f4:
fe:c5:2a:96:c3:c9:c6:12:dc:f7:69:04:ab:c6:0d:
e9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:79:29:3E:6F:85:F7:79:3F:F8:34:8E:73:BF:64:B9:F7:A0:67:D4
X509v3 Authority Key Identifier:
keyid:10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/l3kpPm-F93k_-DSOc79kufegZ9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.157.0-193.105.159.255
Signature Algorithm: sha256WithRSAEncryption
11:4b:bc:2e:95:81:bf:07:d4:f8:7e:af:ca:ba:03:aa:4a:6a:
4f:76:e7:64:5b:31:a5:46:ad:c2:47:d0:8d:33:64:59:e6:b2:
4e:2f:3f:92:39:6d:a8:f8:cf:31:96:64:8d:3b:2e:12:53:9f:
cd:01:0e:f1:c2:31:c7:74:f3:fb:12:c9:f3:eb:7a:c2:fa:8e:
ce:64:90:dd:21:d4:65:ed:b4:bb:00:c6:f7:c8:51:4a:09:08:
94:68:9b:cc:e0:70:da:1a:bb:c7:0b:27:bc:b8:36:04:a6:7c:
74:64:bc:75:30:96:a8:20:ef:11:dd:af:bb:64:20:e7:37:16:
6d:e0:05:17:2b:f6:b1:d0:52:da:86:9c:9b:51:e8:06:b7:c1:
1b:a4:91:65:6d:18:41:ff:99:06:c8:d4:17:07:ff:de:e6:16:
21:92:d7:46:36:40:9c:19:78:ce:30:5f:6b:0b:bd:96:94:78:
da:ba:62:31:b2:9b:1a:64:01:78:56:c3:cf:b7:fe:9a:50:be:
cc:35:cd:b7:dc:3b:0d:70:ae:b2:59:f8:5c:e7:86:7b:29:ce:
77:e5:3b:09:80:0f:cd:87:fb:d4:bd:3e:7a:0f:1c:69:6a:09:
0d:e8:aa:12:bc:31:fc:90:cd:50:ae:86:40:41:d7:84:d2:62:
bf:3a:1a:93
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzI31eBF5LxBwiNhKY+15hJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZDI2Nzg2MGQzYTQwM2IwMGUxYTYxYzU0MzRhY2ZmNmVi
OTczOTQwHhcNMjQwMTAyMDYzMjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Nzc5MjkzZTZmODVmNzc5M2ZmODM0OGU3M2JmNjRiOWY3YTA2N2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhGb9KyRzLxDj3+wSDIkhUmbfnsa
L77Zff0iQsEVMKCYUhTiB35NmJXlhg+NblZYO2PmPINy02wpAyDa0fqUFTLPIW8Y
m6n422Ts4DvC/Ziu7Ah310evCFRfyYbI8ODoordJLigcY5zZLl691MayfZ4qa+Fx
l9gmsz6Tc/Fb95q0aaHAncM+GwpBtqtNDo/SRNJPzVQWV99rl+VqZcz0WrOOo2cR
KJ/B3J7nE1un3NVHLJyyhDJOh8d+YZKhIdbsxkd+Db5dOXnTJPA4kGKTNltXQEJJ
sMzKLHl+MmbVmA1zCwbcSiUq8RbxrLz7U/T+xSqWw8nGEtz3aQSrxg3p2QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJd5KT5vhfd5P/g0jnO/ZLn3oGfUMB8GA1UdIwQY
MBaAFBDSZ4YNOkA7AOGmHFQ0rP9uuXOUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU5KbmhnMDZRRHNBNGFZY1ZEU3NfMjY1YzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iNmVmNDItYjhjMC00ZTVhLWJkYTEt
MDM0YmNmNGViZGNiLzEvbDNrcFBtLUY5M2tfLURTT2M3OWt1ZmVnWjlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9iNmVmNDItYjhjMC00ZTVhLWJkYTEtMDM0YmNmNGViZGNi
LzEvRU5KbmhnMDZRRHNBNGFZY1ZEU3NfMjY1YzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADBaZ0D
BAXBaYAwDQYJKoZIhvcNAQELBQADggEBABFLvC6Vgb8H1Ph+r8q6A6pKak9252Rb
MaVGrcJH0I0zZFnmsk4vP5I5baj4zzGWZI07LhJTn80BDvHCMcd08/sSyfPresL6
js5kkN0h1GXttLsAxvfIUUoJCJRom8zgcNoau8cLJ7y4NgSmfHRkvHUwlqgg7xHd
r7tkIOc3Fm3gBRcr9rHQUtqGnJtR6Aa3wRukkWVtGEH/mQbI1BcH/97mFiGS10Y2
QJwZeM4wX2sLvZaUeNq6YjGymxpkAXhWw8+3/ppQvsw1zbfcOw1wrrJZ+Fznhnsp
znflOwmAD82H+9S9PnoPHGlqCQ3oqhK8MfyQzVCuhkBB14TSYr86GpM=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:28 2025 by rpki-client