Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/IowMyNP0TFh8fR0sn0M3VpT-r1Q.roa
File: IowMyNP0TFh8fR0sn0M3VpT-r1Q.roa (raw, json)
Hash identifier: wNsGg/YW7iEqieG7oLp0blCMtAf0Hn0u+CqPkBAu51c=
Subject key identifier: 22:8C:0C:C8:D3:F4:4C:58:7C:7D:1D:2C:9F:43:37:56:94:FE:AF:54
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 01941FFA418A34BA1368502EA92F760DCA68
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/IowMyNP0TFh8fR0sn0M3VpT-r1Q.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 194.169.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 16:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:41:8a:34:ba:13:68:50:2e:a9:2f:76:0d:ca:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=228c0cc8d3f44c587c7d1d2c9f43375694feaf54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:ce:be:2b:08:64:7d:6c:19:cd:c7:d2:1b:
44:f8:97:1d:47:fd:7a:b5:75:c3:cf:16:16:7d:cb:
8c:e1:c3:c1:bf:2d:24:4f:ad:08:21:da:04:21:2c:
a0:e6:b5:f8:48:c3:d2:06:81:db:89:a6:4d:f9:83:
9a:52:13:6f:97:30:b7:6a:c2:19:e1:46:15:72:7f:
39:fe:f2:d7:02:0b:59:20:3d:e5:33:ed:9e:d6:91:
7f:77:38:ff:87:49:ae:43:c9:33:fb:d6:f5:2e:79:
fd:ed:27:ae:e2:98:0c:bf:93:79:f6:05:7e:9d:ba:
a0:c5:c4:8f:04:dd:59:27:07:fa:7d:c6:68:a6:bf:
b7:db:d4:47:35:bd:28:e2:71:bc:c9:23:e5:f7:4f:
6b:ee:c8:00:6c:23:5a:ee:61:ac:f8:f0:2e:54:9e:
f7:4c:4f:a7:d6:6e:4f:c2:7b:79:38:c3:2b:ba:41:
27:ce:d9:0d:d8:d1:35:45:f4:ab:82:5e:7e:69:23:
b7:bd:8d:61:47:83:29:44:0f:3d:52:77:f5:77:d4:
a9:b1:0b:17:41:fe:4e:e2:eb:43:ac:c4:86:86:80:
51:02:f0:38:e4:c2:3c:a8:4b:28:17:14:fd:b5:f8:
8f:d6:88:3b:d8:e3:ff:16:a3:57:a8:01:fd:ab:6d:
26:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8C:0C:C8:D3:F4:4C:58:7C:7D:1D:2C:9F:43:37:56:94:FE:AF:54
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/IowMyNP0TFh8fR0sn0M3VpT-r1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.48.0/24
Signature Algorithm: sha256WithRSAEncryption
87:6c:78:8e:d8:08:e2:4f:d2:73:48:ce:18:92:8d:83:f6:f3:
2e:f4:a8:9a:53:f8:2a:9e:15:33:4b:cd:ae:ea:10:12:f3:a4:
6e:bc:f2:04:cd:c6:e7:d7:c7:5f:9e:b7:a5:d6:13:c4:79:df:
25:d7:b0:64:97:2b:be:ee:9c:f9:08:de:a5:25:75:76:e0:7b:
7a:53:b5:13:3f:2d:74:45:dd:46:46:a1:35:71:95:d2:ae:30:
0d:d4:70:6a:39:55:2f:81:f3:ad:20:a2:ec:4c:b6:a5:9c:63:
fe:41:53:3c:61:3f:d4:c2:af:33:74:f1:10:f3:6c:d3:df:ba:
c1:ca:d3:ea:ba:65:c6:38:90:b7:18:45:0d:1e:e3:e7:12:f6:
1d:23:41:7c:e4:45:21:c1:14:fb:34:7b:aa:54:28:8f:bd:de:
0a:fc:29:8b:b2:16:20:b4:19:5b:dc:45:cf:15:7f:1e:48:8f:
95:75:b0:cb:ea:e4:1b:d3:29:7c:90:2c:90:b1:f1:6d:a9:51:
da:fc:20:81:75:96:ea:07:c1:ea:35:37:9e:b6:51:36:ff:54:
a1:0a:42:f4:81:a9:c2:d0:82:39:02:90:36:1f:6b:98:2b:f4:
0d:b0:e4:b1:b3:8d:e9:57:10:95:72:4b:c2:61:27:94:1f:a1:
01:bd:1c:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+kGKNLoTaFAuqS92DcpoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ODI0N2QzZjgxNDcyZGJiYTA2ZGJlYTliZDE5Yzc4NWQx
OGJhYmUwHhcNMjUwMTAxMDM0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjhjMGNjOGQzZjQ0YzU4N2M3ZDFkMmM5ZjQzMzc1Njk0ZmVhZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw3OvisIZH1sGc3H0htE+JcdR/16
tXXDzxYWfcuM4cPBvy0kT60IIdoEISyg5rX4SMPSBoHbiaZN+YOaUhNvlzC3asIZ
4UYVcn85/vLXAgtZID3lM+2e1pF/dzj/h0muQ8kz+9b1Lnn97Seu4pgMv5N59gV+
nbqgxcSPBN1ZJwf6fcZopr+329RHNb0o4nG8ySPl909r7sgAbCNa7mGs+PAuVJ73
TE+n1m5Pwnt5OMMrukEnztkN2NE1RfSrgl5+aSO3vY1hR4MpRA89Unf1d9SpsQsX
Qf5O4utDrMSGhoBRAvA45MI8qEsoFxT9tfiP1og72OP/FqNXqAH9q20mmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCKMDMjT9ExYfH0dLJ9DN1aU/q9UMB8GA1UdIwQY
MBaAFNmCR9P4FHLbugbb6pvRnHhdGLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgt
YTMwMzI2MTU2NjBjLzEvSW93TXlOUDBURmg4ZlIwc24wTTNWcFQtcjFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgtYTMwMzI2MTU2NjBj
LzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwqkwMA0G
CSqGSIb3DQEBCwUAA4IBAQCHbHiO2AjiT9JzSM4Yko2D9vMu9KiaU/gqnhUzS82u
6hAS86RuvPIEzcbn18dfnrel1hPEed8l17Bklyu+7pz5CN6lJXV24Ht6U7UTPy10
Rd1GRqE1cZXSrjAN1HBqOVUvgfOtIKLsTLalnGP+QVM8YT/Uwq8zdPEQ82zT37rB
ytPqumXGOJC3GEUNHuPnEvYdI0F85EUhwRT7NHuqVCiPvd4K/CmLshYgtBlb3EXP
FX8eSI+VdbDL6uQb0yl8kCyQsfFtqVHa/CCBdZbqB8HqNTeetlE2/1ShCkL0ganC
0II5ApA2H2uYK/QNsOSxs43pVxCVckvCYSeUH6EBvRwB
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:18:28 2025 by rpki-client