Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/U0pL8thQU7wANHf1IudSUBGo1Fo.roa
File: U0pL8thQU7wANHf1IudSUBGo1Fo.roa (raw, json)
Hash identifier: NAyXK7g48LYKLamYAUTSK/p+jXO4s70odLOGgJELc5E=
Subject key identifier: 53:4A:4B:F2:D8:50:53:BC:00:34:77:F5:22:E7:52:50:11:A8:D4:5A
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 018CC26D2B5467F9F6636D9DB3ED31CA7301
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/U0pL8thQU7wANHf1IudSUBGo1Fo.roa
Signing time: Mon 01 Jan 2024 00:29:43 +0000
ROA not before: Mon 01 Jan 2024 00:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201107
IP address blocks: 193.30.96.0/24 maxlen: 24
193.30.97.0/24 maxlen: 24
193.30.98.0/24 maxlen: 24
193.30.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2b:54:67:f9:f6:63:6d:9d:b3:ed:31:ca:73:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: Jan 1 00:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=534a4bf2d85053bc003477f522e7525011a8d45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:90:39:c2:e6:e9:3f:67:43:45:5e:6e:78:
c9:c8:78:97:d1:5e:ac:87:7c:e5:5e:05:a1:f4:dc:
9f:51:0b:97:98:e8:92:8c:93:a9:e5:6f:25:ef:73:
55:1d:40:18:10:91:57:24:49:5a:d3:28:a0:ea:e9:
ec:86:ce:78:43:fb:bc:b5:a7:b8:09:e5:24:7a:1c:
05:17:1e:7e:ab:08:66:dc:5d:83:ef:30:d4:86:8d:
0e:71:61:46:ef:75:21:00:b9:f1:63:75:35:26:3c:
10:5a:9c:aa:d0:19:5f:10:8d:b5:a1:f8:d5:8b:5b:
9e:6c:47:53:52:2a:3e:5b:8c:0f:8a:e6:df:5d:8c:
76:3f:cb:86:35:cc:7b:64:13:60:73:82:eb:7b:e4:
10:bd:58:86:75:db:b8:ff:79:f4:1c:b5:72:73:c3:
aa:21:7f:a2:cf:bd:53:fa:59:8a:48:f9:a9:b5:49:
12:d2:8b:b7:42:46:ef:eb:ce:d8:8f:50:88:f0:0e:
81:4e:14:08:72:14:88:da:a3:a6:ff:d5:14:39:54:
48:6f:cc:83:aa:f6:8f:0a:49:1c:ea:fc:53:9a:dc:
d7:cd:a8:a4:64:b0:b3:18:ee:e0:02:9f:4a:a9:2d:
b3:b9:b8:75:5d:78:48:3f:76:47:ef:8d:90:11:d3:
ff:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4A:4B:F2:D8:50:53:BC:00:34:77:F5:22:E7:52:50:11:A8:D4:5A
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/U0pL8thQU7wANHf1IudSUBGo1Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.96.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:d8:93:b5:5b:38:4f:6f:f3:5e:38:1f:23:23:2c:71:2a:02:
41:ac:b9:a8:6f:15:9e:d0:32:a2:14:94:f0:6e:19:d5:8f:8f:
47:eb:40:78:59:8e:1f:d4:1f:cf:ee:28:34:55:a4:48:8c:1c:
2c:f7:12:af:ef:ec:63:bd:fe:e1:28:0b:b2:80:8e:60:9f:8a:
55:59:35:38:41:cb:d7:a4:36:39:f0:90:01:65:58:82:c8:8b:
7f:87:95:25:0c:16:24:e4:01:11:d5:6b:84:df:76:20:68:0e:
d4:7a:c9:2f:d3:f0:b3:25:e2:cd:4e:5e:f7:65:dc:90:24:2c:
4b:3a:50:53:88:a9:16:e8:cb:22:34:e3:65:68:1c:62:d9:65:
09:78:8f:98:28:36:72:da:f1:1c:3f:c3:a0:db:8f:50:63:38:
d3:4f:49:61:29:90:4a:09:42:c0:03:f6:43:89:26:89:f9:4a:
c5:0c:67:2c:b3:58:ac:4d:71:a7:70:b5:bc:49:eb:91:eb:99:
9d:21:1e:ed:bc:5e:97:6b:f9:59:c0:15:3a:bd:12:a4:b5:ac:
61:ae:8a:12:17:9d:64:bb:79:d7:01:a5:49:1e:05:f0:94:6f:
c4:5a:c9:1e:94:a7:6e:2e:af:31:10:3a:8d:b4:a4:7e:5e:2a:
4b:19:9c:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbStUZ/n2Y22ds+0xynMBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTk2MjA4OTI1ZDgzNmY4ZDAzN2QxNzk5ODBhODNhMWIw
YzEzNDIwHhcNMjQwMTAxMDAyOTQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzRhNGJmMmQ4NTA1M2JjMDAzNDc3ZjUyMmU3NTI1MDExYThkNDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWKQOcLm6T9nQ0VebnjJyHiX0V6s
h3zlXgWh9NyfUQuXmOiSjJOp5W8l73NVHUAYEJFXJEla0yig6unshs54Q/u8tae4
CeUkehwFFx5+qwhm3F2D7zDUho0OcWFG73UhALnxY3U1JjwQWpyq0BlfEI21ofjV
i1uebEdTUio+W4wPiubfXYx2P8uGNcx7ZBNgc4Lre+QQvViGddu4/3n0HLVyc8Oq
IX+iz71T+lmKSPmptUkS0ou3Qkbv687Yj1CI8A6BThQIchSI2qOm/9UUOVRIb8yD
qvaPCkkc6vxTmtzXzaikZLCzGO7gAp9KqS2zubh1XXhIP3ZH742QEdP/rQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFNKS/LYUFO8ADR39SLnUlARqNRaMB8GA1UdIwQY
MBaAFC7pYgiSXYNvjQN9F5mAqDobDBNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEt
ODQ2YWFmMGViMWFkLzEvVTBwTDh0aFFVN3dBTkhmMUl1ZFNVQkdvMUZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEtODQ2YWFmMGViMWFk
LzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwR5gMA0G
CSqGSIb3DQEBCwUAA4IBAQAu2JO1WzhPb/NeOB8jIyxxKgJBrLmobxWe0DKiFJTw
bhnVj49H60B4WY4f1B/P7ig0VaRIjBws9xKv7+xjvf7hKAuygI5gn4pVWTU4QcvX
pDY58JABZViCyIt/h5UlDBYk5AER1WuE33YgaA7Ueskv0/CzJeLNTl73ZdyQJCxL
OlBTiKkW6MsiNONlaBxi2WUJeI+YKDZy2vEcP8Og249QYzjTT0lhKZBKCULAA/ZD
iSaJ+UrFDGcss1isTXGncLW8SeuR65mdIR7tvF6Xa/lZwBU6vRKktaxhrooSF51k
u3nXAaVJHgXwlG/EWskelKduLq8xEDqNtKR+XipLGZz6
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:43:29 2025 by rpki-client