Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/XAfKngD0G0OLCY6gcnrK2NhdJYA.roa
File: XAfKngD0G0OLCY6gcnrK2NhdJYA.roa (raw, json)
Hash identifier: T/ZhWdy4snE3bXQK24VllZ7ZYZucINkjgR/+3FTgKzY=
Subject key identifier: 5C:07:CA:9E:00:F4:1B:43:8B:09:8E:A0:72:7A:CA:D8:D8:5D:25:80
Certificate issuer: /CN=f7c722dae270868a19838a7cd499d59c2679d891
Certificate serial: 018EC79852E7A38A7931DF76D774B8BECC7D
Authority key identifier: F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/XAfKngD0G0OLCY6gcnrK2NhdJYA.roa
Signing time: Wed 10 Apr 2024 10:40:32 +0000
ROA not before: Wed 10 Apr 2024 10:40:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200406
IP address blocks: 194.5.176.0/24 maxlen: 24
194.5.177.0/24 maxlen: 24
194.5.178.0/24 maxlen: 24
194.5.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c7:98:52:e7:a3:8a:79:31:df:76:d7:74:b8:be:cc:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c722dae270868a19838a7cd499d59c2679d891
Validity
Not Before: Apr 10 10:40:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c07ca9e00f41b438b098ea0727acad8d85d2580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:6c:a7:aa:c0:23:cb:c1:e0:c1:42:93:1e:
66:9c:ad:6d:98:63:fc:48:1f:b3:86:4c:8d:45:cc:
d9:d5:3e:2b:04:db:ea:9f:ee:1a:27:12:11:a1:ad:
e8:e2:a4:77:94:32:d1:55:b3:21:4b:71:aa:0d:74:
5c:6d:1f:0b:bb:cf:1f:b8:90:4c:25:c6:81:55:41:
6c:42:69:db:49:6d:0e:f3:21:02:84:9f:3c:e8:5d:
db:c3:44:44:20:49:15:2c:8c:c8:00:19:74:1d:4d:
65:fb:3b:da:da:6b:9c:3e:96:cd:58:71:6b:15:88:
20:69:51:20:94:07:80:9b:bc:f0:b5:83:f9:32:71:
1e:cd:4b:b9:11:f3:7e:50:74:9a:5f:05:04:9f:69:
ff:d3:9f:72:f2:bc:d0:d7:2e:5c:71:9d:ea:80:8a:
82:b2:2d:db:72:f0:92:dc:4d:1c:4d:95:5b:6c:4e:
01:e5:c5:a8:5c:32:e5:ca:1b:42:1e:e3:0b:53:f0:
c7:e9:66:9e:0b:61:e7:76:66:a2:19:66:2e:6b:b3:
00:95:ff:5f:e6:14:0f:49:ae:d8:65:ea:bd:4e:4a:
cc:81:a3:f8:a7:3e:b2:3d:f0:c0:94:d0:7e:2c:b2:
1b:9f:78:71:df:91:60:4c:9e:74:07:b3:18:12:da:
a2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:07:CA:9E:00:F4:1B:43:8B:09:8E:A0:72:7A:CA:D8:D8:5D:25:80
X509v3 Authority Key Identifier:
keyid:F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/XAfKngD0G0OLCY6gcnrK2NhdJYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.176.0/22
Signature Algorithm: sha256WithRSAEncryption
81:ce:9f:31:f0:76:b6:61:20:f9:01:f0:4e:90:57:c0:4a:1d:
4e:dc:bb:e9:82:11:91:a9:58:be:f5:f6:ab:e4:2d:6e:69:5c:
eb:7b:eb:97:52:8b:66:9e:06:6a:64:9a:d4:db:68:e4:d6:d0:
2c:32:a0:d4:10:73:ab:80:7d:7d:c2:11:39:a3:2a:34:c0:25:
60:0d:e4:16:d1:f9:e0:60:48:9d:03:75:31:b8:de:30:24:8a:
1e:2c:fb:8a:4c:33:33:9c:6a:5a:d4:4d:3d:70:6d:38:e2:70:
41:6e:e0:57:b9:cb:d6:6d:26:b3:b9:20:fa:6e:fb:55:29:55:
2b:6a:50:b0:a9:46:5c:d4:c1:71:d9:dc:30:36:6a:82:21:da:
7e:86:fe:27:57:69:8f:03:be:92:45:ae:fe:fb:8c:72:b4:cd:
6a:9b:98:1a:db:97:62:bc:6a:03:8b:61:49:04:24:a1:33:1e:
e5:cf:72:f4:e1:8e:a5:ac:88:85:35:a2:2a:a8:98:02:4b:24:
7f:fc:40:2d:23:91:94:2f:3d:be:c3:3f:e2:b5:52:0e:b7:49:
e3:fc:99:63:cc:cb:8a:1e:c5:32:5d:b5:55:19:4e:01:64:1b:
d2:75:72:02:6d:26:5d:c7:70:bc:28:19:d2:a7:a3:05:8f:bd:
f8:05:b7:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7HmFLno4p5Md9213S4vsx9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YzcyMmRhZTI3MDg2OGExOTgzOGE3Y2Q0OTlkNTljMjY3
OWQ4OTEwHhcNMjQwNDEwMTA0MDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzA3Y2E5ZTAwZjQxYjQzOGIwOThlYTA3MjdhY2FkOGQ4NWQyNTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLtsp6rAI8vB4MFCkx5mnK1tmGP8
SB+zhkyNRczZ1T4rBNvqn+4aJxIRoa3o4qR3lDLRVbMhS3GqDXRcbR8Lu88fuJBM
JcaBVUFsQmnbSW0O8yEChJ886F3bw0REIEkVLIzIABl0HU1l+zva2mucPpbNWHFr
FYggaVEglAeAm7zwtYP5MnEezUu5EfN+UHSaXwUEn2n/059y8rzQ1y5ccZ3qgIqC
si3bcvCS3E0cTZVbbE4B5cWoXDLlyhtCHuMLU/DH6WaeC2HndmaiGWYua7MAlf9f
5hQPSa7YZeq9TkrMgaP4pz6yPfDAlNB+LLIbn3hx35FgTJ50B7MYEtqiPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFwHyp4A9BtDiwmOoHJ6ytjYXSWAMB8GA1UdIwQY
MBaAFPfHItricIaKGYOKfNSZ1ZwmediRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOThjaTJ1Sndob29aZzRwODFKblZuQ1o1MkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81MGUwZjEtNDYxNC00MzU4LTkzN2Et
MmVkZTY3MjdlMTM5LzEvWEFmS25nRDBHME9MQ1k2Z2NucksyTmhkSllBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni81MGUwZjEtNDYxNC00MzU4LTkzN2EtMmVkZTY3MjdlMTM5
LzEvOThjaTJ1Sndob29aZzRwODFKblZuQ1o1MkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwgWwMA0G
CSqGSIb3DQEBCwUAA4IBAQCBzp8x8Ha2YSD5AfBOkFfASh1O3LvpghGRqVi+9far
5C1uaVzre+uXUotmngZqZJrU22jk1tAsMqDUEHOrgH19whE5oyo0wCVgDeQW0fng
YEidA3UxuN4wJIoeLPuKTDMznGpa1E09cG044nBBbuBXucvWbSazuSD6bvtVKVUr
alCwqUZc1MFx2dwwNmqCIdp+hv4nV2mPA76SRa7++4xytM1qm5ga25divGoDi2FJ
BCShMx7lz3L04Y6lrIiFNaIqqJgCSyR//EAtI5GULz2+wz/itVIOt0nj/JljzMuK
HsUyXbVVGU4BZBvSdXICbSZdx3C8KBnSp6MFj734Bbc7
-----END CERTIFICATE-----
Generated at Tue Apr 22 16:29:28 2025 by rpki-client