Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/93UGFc64uRQkHnuwjGVRkE-7nLc.roa
File: 93UGFc64uRQkHnuwjGVRkE-7nLc.roa (raw, json)
Hash identifier: JoPSDG20LOgAFve7ujNULDp4vxcvcqgzA3E4aGViMYs=
Subject key identifier: F7:75:06:15:CE:B8:B9:14:24:1E:7B:B0:8C:65:51:90:4F:BB:9C:B7
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 019426D9E2A3F05771B13BE5F5D86AFD2B30
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/93UGFc64uRQkHnuwjGVRkE-7nLc.roa
Signing time: Thu 02 Jan 2025 11:50:01 +0000
ROA not before: Thu 02 Jan 2025 11:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41436
IP address blocks: 193.34.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Feb 2025 08:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e2:a3:f0:57:71:b1:3b:e5:f5:d8:6a:fd:2b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Jan 2 11:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7750615ceb8b914241e7bb08c6551904fbb9cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3e:3a:16:68:a4:4b:a0:83:ea:9b:a3:14:5a:
28:55:ff:df:b6:af:39:22:1a:43:2f:c4:42:c1:c4:
60:fd:be:ce:2e:c6:9a:f9:3f:b9:49:b5:de:6b:c2:
ba:91:4b:4e:ca:9d:69:32:3a:a5:a6:24:d0:4c:a6:
7d:3a:43:17:61:07:3e:8f:f4:75:9c:b7:06:b2:8c:
9c:ff:0e:0a:c8:03:19:5d:8d:5b:1d:d7:fe:87:1a:
1e:3f:af:a6:9a:af:22:1f:ca:b5:54:6c:e5:6a:41:
f9:3f:f1:1c:7d:97:52:2f:fb:92:16:7c:a2:1b:34:
af:cd:e4:a0:70:c0:9a:aa:0b:80:00:c9:cf:55:d1:
f5:9a:58:23:da:82:d1:86:e5:72:7a:17:d9:50:ff:
c7:9b:94:48:86:cc:21:90:af:03:56:ac:14:34:f8:
05:57:5f:b7:53:d7:e2:75:ea:37:91:c3:7c:9f:22:
b8:74:09:33:e2:6a:3c:f2:1a:fe:33:5f:aa:2b:d6:
77:53:41:e6:35:d2:3d:e7:82:e6:d4:ba:f4:ca:52:
fc:e2:b2:93:97:3e:9e:d2:02:10:6f:8f:f7:00:36:
5c:d7:65:a6:a5:5f:33:e2:2e:77:98:11:62:55:83:
93:aa:24:5e:5c:37:7c:40:90:10:04:2c:7a:1c:7e:
0b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:75:06:15:CE:B8:B9:14:24:1E:7B:B0:8C:65:51:90:4F:BB:9C:B7
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/93UGFc64uRQkHnuwjGVRkE-7nLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.49.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:1d:ef:b8:e2:7c:fd:98:86:35:d0:af:fa:d5:a5:95:4b:7c:
0c:7e:b2:51:12:86:2c:5e:67:fa:f0:25:8e:b5:57:76:83:3e:
6e:f0:7b:1e:3d:84:3d:e2:cb:e6:05:fa:ad:57:2d:bc:5b:c1:
64:cc:cd:26:64:95:83:67:1f:03:8c:6d:be:1f:ed:f9:81:d7:
b6:7b:33:9c:a7:9a:0a:9c:cd:8f:23:a6:d0:99:00:db:19:9a:
3c:b4:63:b9:03:77:a9:04:49:57:bc:5b:3d:36:88:b6:d2:17:
b4:5f:57:16:17:a0:ae:a2:96:13:72:53:a0:0a:93:8c:f7:9e:
72:3b:f3:08:de:c1:51:a2:23:54:f1:5e:87:91:2f:9e:03:e7:
dc:bd:0d:6c:bf:4c:cd:5d:17:a3:d1:f3:58:5a:83:a6:dc:4a:
a7:1f:6c:ba:ab:31:d6:a2:a1:d1:8b:f1:a3:78:5d:27:84:bb:
7a:55:80:bc:a2:11:c7:1a:a8:92:8d:d4:46:f0:55:12:94:f1:
16:3f:cf:73:ac:2b:cb:57:73:06:31:f9:30:71:e9:68:24:a6:
2a:d9:db:67:76:df:42:06:ce:b2:ec:07:f4:d1:31:01:56:38:
64:c6:ef:41:a9:84:23:d0:2f:24:3a:f9:05:f1:be:6d:85:04:
e2:64:06:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2eKj8FdxsTvl9dhq/SswMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzUzM2Q2NjJjM2YwZDZiYjFlNjkyZjNmYWI2ZDdiYTM4
MjRjMjgwHhcNMjUwMTAyMTE1MDAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzc1MDYxNWNlYjhiOTE0MjQxZTdiYjA4YzY1NTE5MDRmYmI5Y2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z46FmikS6CD6pujFFooVf/ftq85
IhpDL8RCwcRg/b7OLsaa+T+5SbXea8K6kUtOyp1pMjqlpiTQTKZ9OkMXYQc+j/R1
nLcGsoyc/w4KyAMZXY1bHdf+hxoeP6+mmq8iH8q1VGzlakH5P/EcfZdSL/uSFnyi
GzSvzeSgcMCaqguAAMnPVdH1mlgj2oLRhuVyehfZUP/Hm5RIhswhkK8DVqwUNPgF
V1+3U9fideo3kcN8nyK4dAkz4mo88hr+M1+qK9Z3U0HmNdI954Lm1Lr0ylL84rKT
lz6e0gIQb4/3ADZc12WmpV8z4i53mBFiVYOTqiReXDd8QJAQBCx6HH4LTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPd1BhXOuLkUJB57sIxlUZBPu5y3MB8GA1UdIwQY
MBaAFJ41M9Ziw/DWux5pLz+rbXujgkwoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iZWJlNmQtMTZiMy00YjAyLWIyMDUt
YTc4MzQxMzA5OWQzLzEvOTNVR0ZjNjR1UlFrSG51d2pHVlJrRS03bkxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9iZWJlNmQtMTZiMy00YjAyLWIyMDUtYTc4MzQxMzA5OWQz
LzEvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSIxMA0G
CSqGSIb3DQEBCwUAA4IBAQC5He+44nz9mIY10K/61aWVS3wMfrJREoYsXmf68CWO
tVd2gz5u8HsePYQ94svmBfqtVy28W8FkzM0mZJWDZx8DjG2+H+35gde2ezOcp5oK
nM2PI6bQmQDbGZo8tGO5A3epBElXvFs9Noi20he0X1cWF6CuopYTclOgCpOM955y
O/MI3sFRoiNU8V6HkS+eA+fcvQ1sv0zNXRej0fNYWoOm3EqnH2y6qzHWoqHRi/Gj
eF0nhLt6VYC8ohHHGqiSjdRG8FUSlPEWP89zrCvLV3MGMfkwceloJKYq2dtndt9C
Bs6y7Af00TEBVjhkxu9BqYQj0C8kOvkF8b5thQTiZAZs
-----END CERTIFICATE-----
Generated at Fri Apr 11 02:46:39 2025 by rpki-client