Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/XxlWOj5e0TyX8D5F0rprNzes8ko.roa
File: XxlWOj5e0TyX8D5F0rprNzes8ko.roa (raw, json)
Hash identifier: QdccLNMIRb96a+Y3cvGcdkT7kYP/Qb7v0Y9gpRyJ+as=
Subject key identifier: 5F:19:56:3A:3E:5E:D1:3C:97:F0:3E:45:D2:BA:6B:37:37:AC:F2:4A
Certificate issuer: /CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Certificate serial: 018CC725AFE369CCEB630F333924451395A0
Authority key identifier: 8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/XxlWOj5e0TyX8D5F0rprNzes8ko.roa
Signing time: Mon 01 Jan 2024 22:29:45 +0000
ROA not before: Mon 01 Jan 2024 22:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198395
IP address blocks: 195.60.169.0/24 maxlen: 24
195.60.168.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:af:e3:69:cc:eb:63:0f:33:39:24:45:13:95:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Validity
Not Before: Jan 1 22:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f19563a3e5ed13c97f03e45d2ba6b3737acf24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:df:76:53:15:13:64:4b:d0:6a:70:67:47:3e:
ab:2e:ec:c2:48:94:61:b2:8a:e4:8f:7f:2c:b1:cb:
0d:ea:5a:1c:7e:d3:ee:d7:d2:6c:a5:94:4a:49:2e:
3e:47:7e:2e:9e:da:31:69:cc:09:9b:71:45:9e:39:
36:a2:8e:5e:7c:9d:19:b8:46:5a:66:68:32:84:15:
5e:aa:8f:7b:0a:c7:ae:4b:21:17:17:66:5d:ff:88:
82:54:1d:aa:7e:bb:d4:81:8b:34:cc:21:2a:03:c1:
eb:b0:ad:f2:ba:90:ac:7a:67:ec:26:14:84:35:a3:
8a:d3:56:eb:46:9e:fe:93:e1:a8:8e:8b:1c:b0:9d:
e9:76:5d:62:96:7a:61:6a:1d:39:01:3a:21:7e:48:
42:ab:56:f9:9b:42:35:6c:99:71:a2:b2:b4:d1:94:
7c:4d:d0:2b:f0:68:8b:86:02:4f:f3:52:bb:f1:ff:
89:a8:89:de:01:11:55:64:ef:fd:4f:10:c4:fc:77:
94:80:95:7b:06:fb:81:78:dd:f2:46:4d:08:b0:4a:
c6:27:03:35:5d:25:f7:27:17:c1:ec:54:98:9c:ec:
b0:04:4e:a0:60:d6:9f:2a:e5:ab:7a:00:1f:9a:80:
d9:c8:74:85:65:fa:19:27:8a:8a:65:28:3e:a7:b1:
b7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:19:56:3A:3E:5E:D1:3C:97:F0:3E:45:D2:BA:6B:37:37:AC:F2:4A
X509v3 Authority Key Identifier:
keyid:8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/XxlWOj5e0TyX8D5F0rprNzes8ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.168.0/23
Signature Algorithm: sha256WithRSAEncryption
82:60:7a:0a:18:11:4f:6a:21:6e:e5:32:fc:01:67:4b:21:16:
c5:f2:5d:5d:f5:2e:8c:24:54:cb:86:57:a3:22:4d:f8:84:cc:
c5:52:e2:1b:de:ef:53:10:3b:ac:4a:60:77:fb:82:b3:3d:66:
d3:5b:aa:e6:6c:fb:03:83:9d:b2:1d:db:ba:27:e8:9f:8b:88:
89:0c:73:fd:aa:f5:aa:c6:69:05:72:2f:d1:67:ec:4b:0c:6b:
bf:50:bf:44:ac:0c:c6:3b:5b:5a:a2:67:e4:04:f9:2c:79:37:
d1:87:84:c5:90:3e:85:8f:ba:f8:a6:13:0f:58:e0:1b:80:e5:
f4:a1:61:4f:71:04:1b:7a:b9:ae:3c:8d:50:1b:3f:6d:dc:94:
b1:34:ea:36:76:f8:98:aa:59:15:a3:c8:db:5e:81:69:c1:2f:
ac:ee:5f:3a:40:41:39:dd:7e:c0:2c:b9:4c:03:41:cd:8a:b4:
21:05:79:15:fc:c5:01:e2:d7:2d:88:11:36:73:c5:ca:43:f7:
18:c5:4d:5a:fb:f4:45:16:93:0f:d3:59:62:8c:99:88:41:6d:
9b:e3:a2:43:fb:3f:14:21:2a:42:8b:87:0b:0b:22:a8:2e:3e:
26:6f:9e:4c:d4:57:87:c6:4b:14:fc:65:92:47:9d:4e:21:c6:
7e:67:11:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJa/jaczrYw8zOSRFE5WgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNjIyYTM0YzU1ZTM5YjhmYTE1YTM3YmE5ZTM3MGVhYWZk
OTk3NzQwHhcNMjQwMTAxMjIyOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjE5NTYzYTNlNWVkMTNjOTdmMDNlNDVkMmJhNmIzNzM3YWNmMjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl992UxUTZEvQanBnRz6rLuzCSJRh
sorkj38sscsN6locftPu19JspZRKSS4+R34untoxacwJm3FFnjk2oo5efJ0ZuEZa
ZmgyhBVeqo97CseuSyEXF2Zd/4iCVB2qfrvUgYs0zCEqA8HrsK3yupCsemfsJhSE
NaOK01brRp7+k+GojoscsJ3pdl1ilnphah05ATohfkhCq1b5m0I1bJlxorK00ZR8
TdAr8GiLhgJP81K78f+JqIneARFVZO/9TxDE/HeUgJV7BvuBeN3yRk0IsErGJwM1
XSX3JxfB7FSYnOywBE6gYNafKuWregAfmoDZyHSFZfoZJ4qKZSg+p7G3AQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF8ZVjo+XtE8l/A+RdK6azc3rPJKMB8GA1UdIwQY
MBaAFI5iKjTFXjm4+hWje6njcOqv2Zd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam1JcU5NVmVPYmo2RmFON3FlTnc2cV9abDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84MmNiM2UtODE5OS00OTE3LWExNzYt
ZTUwZTFlOWJiNGIzLzEvWHhsV09qNWUwVHlYOEQ1RjBycHJOemVzOGtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84MmNiM2UtODE5OS00OTE3LWExNzYtZTUwZTFlOWJiNGIz
LzEvam1JcU5NVmVPYmo2RmFON3FlTnc2cV9abDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwzyoMA0G
CSqGSIb3DQEBCwUAA4IBAQCCYHoKGBFPaiFu5TL8AWdLIRbF8l1d9S6MJFTLhlej
Ik34hMzFUuIb3u9TEDusSmB3+4KzPWbTW6rmbPsDg52yHdu6J+ifi4iJDHP9qvWq
xmkFci/RZ+xLDGu/UL9ErAzGO1taomfkBPkseTfRh4TFkD6Fj7r4phMPWOAbgOX0
oWFPcQQbermuPI1QGz9t3JSxNOo2dviYqlkVo8jbXoFpwS+s7l86QEE53X7ALLlM
A0HNirQhBXkV/MUB4tctiBE2c8XKQ/cYxU1a+/RFFpMP01lijJmIQW2b46JD+z8U
ISpCi4cLCyKoLj4mb55M1FeHxksU/GWSR51OIcZ+ZxGW
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:29:47 2025 by rpki-client