Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dXx7pjNf5en8nFqarOX6ajZvVGc.roa
File: dXx7pjNf5en8nFqarOX6ajZvVGc.roa (raw, json)
Hash identifier: AfE1fwmYHmlkRja1qV3OcWmdBoifVr7J4If/V79O04o=
Subject key identifier: 75:7C:7B:A6:33:5F:E5:E9:FC:9C:5A:9A:AC:E5:FA:6A:36:6F:54:67
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01946D4DDBBAC854ADCAAC5C6CEABBBEE009
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dXx7pjNf5en8nFqarOX6ajZvVGc.roa
Signing time: Thu 16 Jan 2025 04:10:06 +0000
ROA not before: Thu 16 Jan 2025 04:10:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 188.213.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 13:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6d:4d:db:ba:c8:54:ad:ca:ac:5c:6c:ea:bb:be:e0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 16 04:10:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=757c7ba6335fe5e9fc9c5a9aace5fa6a366f5467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c0:09:00:c4:29:84:46:12:96:ef:dc:48:ea:
62:59:de:99:af:6e:a8:6e:68:99:99:94:bb:ac:49:
d1:11:d1:c8:53:39:d9:eb:c4:b6:3e:00:13:60:d6:
21:4f:b6:77:c3:f3:c9:5b:b0:81:6f:6e:d7:30:58:
36:77:a2:3a:da:4a:d5:d2:cb:19:0f:dc:4c:a2:8e:
8a:a6:77:e2:e7:59:24:24:07:24:7c:b3:85:f8:d3:
cc:2f:59:4f:e1:50:c2:c1:bb:b6:ce:18:3f:92:59:
b7:16:6e:a0:24:65:ae:3f:aa:f0:cd:3d:5c:f6:00:
a2:57:0e:f6:58:40:e2:de:1f:54:9a:dc:ac:ae:62:
36:70:a5:c8:39:4c:63:66:79:c8:09:1c:f4:58:b2:
90:29:12:ee:28:cf:dc:a0:d8:ab:4b:87:6b:34:7b:
52:97:ff:29:81:11:df:f5:4a:22:26:35:3e:73:77:
61:14:36:89:7e:f2:23:21:10:06:a9:03:71:95:4b:
07:ad:e4:38:64:ae:e7:a2:b5:60:87:84:94:0e:55:
ff:6f:82:80:e7:cc:d7:02:1f:e9:6c:37:ae:c4:88:
7b:ef:41:f3:9f:9a:23:3d:63:d8:e7:53:32:b0:51:
cf:f4:4e:72:20:e7:d0:ac:f3:f8:c6:b6:0a:87:3e:
6e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7C:7B:A6:33:5F:E5:E9:FC:9C:5A:9A:AC:E5:FA:6A:36:6F:54:67
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dXx7pjNf5en8nFqarOX6ajZvVGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.0.0/24
Signature Algorithm: sha256WithRSAEncryption
92:bc:0a:cf:ff:e8:ae:66:a4:90:16:c1:64:ae:6f:4f:13:2c:
25:1e:5a:05:35:32:0d:ac:df:a3:6d:19:48:89:9e:a1:d6:a5:
3d:f9:f4:0c:5b:b6:68:76:09:85:b5:b4:92:5d:06:af:3b:18:
dd:d0:19:ec:b1:56:30:97:5c:aa:57:ed:48:a9:8c:ef:17:d1:
86:b9:b1:40:45:fa:70:77:61:e0:30:01:fe:56:9c:df:a1:95:
56:0e:1c:d4:0d:ed:e1:8a:05:e8:99:63:a0:52:81:b9:13:63:
d9:8c:21:d9:e3:78:55:20:b0:7c:83:2a:53:3a:fb:ff:23:19:
f0:0d:e6:35:fa:50:13:72:2f:4c:41:e6:60:45:db:ec:72:15:
ad:9c:61:ce:a9:36:ee:b1:ab:a7:5b:4c:50:1b:3b:9e:bc:48:
8d:20:5b:ff:14:57:30:79:47:f2:19:09:f2:f7:79:d3:05:e7:
28:06:c2:20:b7:de:48:4a:74:3e:76:ae:40:b8:fd:c0:ac:8a:
86:54:54:a0:85:7d:37:26:0d:8f:3c:08:5e:eb:fe:fb:5a:1e:
fd:c1:33:5e:f7:74:af:e9:0f:b5:85:04:b7:d8:1b:e8:54:22:
28:81:9d:0d:c0:eb:2c:31:13:59:87:56:53:6d:09:5a:36:6a:
3c:b9:d1:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRtTdu6yFStyqxcbOq7vuAJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwMTE2MDQxMDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTdjN2JhNjMzNWZlNWU5ZmM5YzVhOWFhY2U1ZmE2YTM2NmY1NDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MAJAMQphEYSlu/cSOpiWd6Zr26o
bmiZmZS7rEnREdHIUznZ68S2PgATYNYhT7Z3w/PJW7CBb27XMFg2d6I62krV0ssZ
D9xMoo6Kpnfi51kkJAckfLOF+NPML1lP4VDCwbu2zhg/klm3Fm6gJGWuP6rwzT1c
9gCiVw72WEDi3h9UmtysrmI2cKXIOUxjZnnICRz0WLKQKRLuKM/coNirS4drNHtS
l/8pgRHf9UoiJjU+c3dhFDaJfvIjIRAGqQNxlUsHreQ4ZK7norVgh4SUDlX/b4KA
58zXAh/pbDeuxIh770Hzn5ojPWPY51MysFHP9E5yIOfQrPP4xrYKhz5udQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHV8e6YzX+Xp/Jxamqzl+mo2b1RnMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvZFh4N3BqTmY1ZW44bkZxYXJPWDZhalp2VkdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNUAMA0G
CSqGSIb3DQEBCwUAA4IBAQCSvArP/+iuZqSQFsFkrm9PEywlHloFNTINrN+jbRlI
iZ6h1qU9+fQMW7ZodgmFtbSSXQavOxjd0BnssVYwl1yqV+1IqYzvF9GGubFARfpw
d2HgMAH+VpzfoZVWDhzUDe3higXomWOgUoG5E2PZjCHZ43hVILB8gypTOvv/Ixnw
DeY1+lATci9MQeZgRdvschWtnGHOqTbusaunW0xQGzuevEiNIFv/FFcweUfyGQny
93nTBecoBsIgt95ISnQ+dq5AuP3ArIqGVFSghX03Jg2PPAhe6/77Wh79wTNe93Sv
6Q+1hQS32BvoVCIogZ0NwOssMRNZh1ZTbQlaNmo8udEO
-----END CERTIFICATE-----
Generated at Wed Feb 5 12:41:13 2025 by rpki-client