Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0WxZaKvoJ47MzATs-po91QjkUJw.roa
File: 0WxZaKvoJ47MzATs-po91QjkUJw.roa (raw, json)
Hash identifier: pxzgGmejI3jOOrHSdC4+J5NnURvlL+3Si8JAdi+kPvU=
Subject key identifier: D1:6C:59:68:AB:E8:27:8E:CC:CC:04:EC:FA:9A:3D:D5:08:E4:50:9C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193D40D0302340153DC1C0E138F22FC9C5D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0WxZaKvoJ47MzATs-po91QjkUJw.roa
Signing time: Tue 17 Dec 2024 09:57:22 +0000
ROA not before: Tue 17 Dec 2024 09:57:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211373
IP address blocks: 94.177.145.0/24 maxlen: 24
212.192.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d4:0d:03:02:34:01:53:dc:1c:0e:13:8f:22:fc:9c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 17 09:57:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d16c5968abe8278ecccc04ecfa9a3dd508e4509c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:e5:c3:05:57:31:5d:54:03:e0:90:74:13:
b2:4f:fd:ce:2d:6b:9c:a4:39:89:cb:52:14:a2:f3:
67:f3:b6:45:61:6a:2b:28:02:89:11:f4:1e:e0:77:
2b:b5:89:46:a5:c1:0f:2e:07:ef:99:13:89:c4:13:
dd:27:92:b1:20:10:f4:51:03:c9:a3:97:27:f7:51:
9f:cb:77:de:1b:1c:d1:86:fd:42:95:c6:00:97:85:
fc:c8:7f:e6:8f:fb:e5:55:4e:6a:e0:15:62:ba:31:
7e:93:ec:87:e0:92:be:12:10:5d:40:02:e4:92:dc:
82:0b:57:fc:f2:3d:65:ab:bb:6e:ff:8b:81:ae:bf:
3f:80:56:ce:a6:3e:a9:50:bf:57:4c:6c:f2:7f:80:
ca:86:76:e4:ce:91:48:4f:97:99:a3:ce:60:c2:6b:
27:6d:1f:34:72:a6:dc:63:83:b8:c7:05:6b:d9:df:
f9:05:1a:d0:67:e8:50:a0:6a:b6:9d:74:33:3f:65:
e2:a4:a1:2e:53:d7:ef:c8:65:9b:a8:a2:a7:6a:53:
25:c0:e2:a7:94:7f:3f:85:f8:4e:7b:7f:04:1d:df:
69:5e:12:d1:0e:7f:0e:ec:8b:9e:b6:96:6b:cc:4f:
51:16:4f:6b:14:d9:9b:d8:5e:ab:28:3c:15:db:dc:
b8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6C:59:68:AB:E8:27:8E:CC:CC:04:EC:FA:9A:3D:D5:08:E4:50:9C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0WxZaKvoJ47MzATs-po91QjkUJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.145.0/24
212.192.6.0/24
Signature Algorithm: sha256WithRSAEncryption
56:9e:1b:8b:03:af:e3:db:81:9c:d4:2f:a4:5a:1f:f5:13:3b:
94:07:45:87:77:76:c9:d6:8f:d0:1b:a2:ee:dc:84:4e:d9:37:
99:1c:c7:43:a3:ac:ec:4c:0f:de:88:19:f4:21:26:74:5d:8a:
7e:27:c2:e2:8e:d5:bf:f2:db:dc:9e:ca:14:6e:19:99:0b:e6:
67:ed:9a:28:73:29:de:32:56:3f:1a:33:5c:82:02:17:4b:ee:
74:95:07:f7:76:77:2e:f4:09:bd:71:16:04:03:ad:33:f5:3c:
02:b6:32:c5:ee:7b:c9:c8:52:04:da:aa:23:5b:7f:4b:d5:45:
c5:5c:c0:9d:5a:3a:50:44:0a:d0:8c:a0:29:35:ca:29:9a:84:
0d:63:fd:da:4c:2e:b6:4e:19:35:3c:d1:a9:c7:eb:f0:06:c8:
5c:f1:e5:e7:09:64:fb:42:63:05:18:92:65:32:de:49:08:a8:
72:68:29:29:58:47:03:77:6a:8c:eb:20:21:aa:77:50:dd:5c:
ab:2f:00:4a:06:b3:99:ed:85:c6:d1:e4:85:99:e6:74:17:94:
57:84:8a:94:09:ee:9f:7c:06:a6:63:c9:d8:ac:9c:64:ac:03:
1b:f7:05:b9:56:db:bf:f7:35:63:80:d7:2d:a2:66:51:53:81:
0a:44:70:e7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZPUDQMCNAFT3BwOE48i/JxdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQxMjE3MDk1NzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTZjNTk2OGFiZTgyNzhlY2NjYzA0ZWNmYTlhM2RkNTA4ZTQ1MDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqrlwwVXMV1UA+CQdBOyT/3OLWuc
pDmJy1IUovNn87ZFYWorKAKJEfQe4HcrtYlGpcEPLgfvmROJxBPdJ5KxIBD0UQPJ
o5cn91Gfy3feGxzRhv1ClcYAl4X8yH/mj/vlVU5q4BViujF+k+yH4JK+EhBdQALk
ktyCC1f88j1lq7tu/4uBrr8/gFbOpj6pUL9XTGzyf4DKhnbkzpFIT5eZo85gwmsn
bR80cqbcY4O4xwVr2d/5BRrQZ+hQoGq2nXQzP2XipKEuU9fvyGWbqKKnalMlwOKn
lH8/hfhOe38EHd9pXhLRDn8O7IuetpZrzE9RFk9rFNmb2F6rKDwV29y4qQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNFsWWir6CeOzMwE7PqaPdUI5FCcMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvMFd4WmFLdm9KNDdNekFUcy1wbzkxUWprVUp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXrGRAwQA
1MAGMA0GCSqGSIb3DQEBCwUAA4IBAQBWnhuLA6/j24Gc1C+kWh/1EzuUB0WHd3bJ
1o/QG6Lu3IRO2TeZHMdDo6zsTA/eiBn0ISZ0XYp+J8LijtW/8tvcnsoUbhmZC+Zn
7ZoocyneMlY/GjNcggIXS+50lQf3dncu9Am9cRYEA60z9TwCtjLF7nvJyFIE2qoj
W39L1UXFXMCdWjpQRArQjKApNcopmoQNY/3aTC62Thk1PNGpx+vwBshc8eXnCWT7
QmMFGJJlMt5JCKhyaCkpWEcDd2qM6yAhqndQ3VyrLwBKBrOZ7YXG0eSFmeZ0F5RX
hIqUCe6ffAamY8nYrJxkrAMb9wW5Vtu/9zVjgNctomZRU4EKRHDn
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:16 2025 by rpki-client