Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/_1CBIKBTAYACZxrHQ7adktdzhe4.roa
File: _1CBIKBTAYACZxrHQ7adktdzhe4.roa (raw, json)
Hash identifier: ey3sBGHBu7CECM/iYfQUoyBz1tRyc7yPsbVGfTnpt9A=
Subject key identifier: FF:50:81:20:A0:53:01:80:02:67:1A:C7:43:B6:9D:92:D7:73:85:EE
Certificate issuer: /CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50
Certificate serial: 018CC8DCDA9D5897DE511E59F18C8752E2C9
Authority key identifier: 67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/_1CBIKBTAYACZxrHQ7adktdzhe4.roa
Signing time: Tue 02 Jan 2024 06:29:26 +0000
ROA not before: Tue 02 Jan 2024 06:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35442
IP address blocks: 193.239.254.0/23 maxlen: 23
91.195.96.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:da:9d:58:97:de:51:1e:59:f1:8c:87:52:e2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50
Validity
Not Before: Jan 2 06:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff508120a053018002671ac743b69d92d77385ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:81:3e:b1:a7:96:25:e9:00:4a:16:8f:f9:39:
2f:84:bc:70:b9:17:68:96:02:32:33:dc:37:97:f8:
66:40:12:9e:2a:05:d3:cd:65:4b:4d:0e:19:40:53:
97:31:d4:82:71:4c:74:d8:02:50:93:ce:3c:17:13:
79:79:c9:2f:8b:2f:f1:28:35:ae:c2:78:65:83:8f:
38:c6:03:51:3e:50:f5:a0:14:6b:87:29:e8:e7:d2:
07:25:0d:69:81:50:11:e9:4c:22:95:e4:a1:16:06:
b5:5d:e0:7f:52:77:10:c2:6e:b4:32:49:3c:a9:0a:
36:93:e1:72:49:ad:11:01:3f:0e:05:48:ce:3e:4b:
ad:e6:a9:66:77:dd:85:22:ce:f9:f3:ea:96:d8:aa:
d5:f1:82:cf:28:f0:bf:57:66:a9:6f:07:80:27:28:
50:2b:9c:05:3c:0e:69:e0:34:78:37:ea:d5:da:18:
f6:58:05:34:85:61:4f:93:1b:20:8a:e7:f1:0a:17:
e2:c4:b8:fb:1c:86:bf:aa:82:ee:01:ec:be:d0:8d:
1b:24:2f:64:22:a3:55:95:03:34:dd:99:55:80:8b:
07:d8:e9:e1:27:51:48:17:cb:cb:36:55:c3:00:fe:
54:4c:de:63:df:9c:14:c0:31:9d:4d:f8:44:30:ab:
b5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:50:81:20:A0:53:01:80:02:67:1A:C7:43:B6:9D:92:D7:73:85:EE
X509v3 Authority Key Identifier:
keyid:67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/_1CBIKBTAYACZxrHQ7adktdzhe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.96.0/23
193.239.254.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:81:79:e6:84:2c:22:bb:58:01:f6:5e:cc:42:c6:cb:7f:95:
74:6b:2c:c0:de:39:f5:5a:49:6f:2c:d1:78:32:5e:66:ba:e3:
96:23:66:3e:63:d0:66:37:51:d3:9b:ea:7e:2a:89:9d:59:63:
13:13:d8:4b:5e:1e:98:61:c9:03:98:e9:9e:dd:b0:b9:24:8f:
56:42:76:6b:eb:4c:32:43:9f:a7:d5:9e:7c:69:c1:44:6a:f9:
1e:b5:8f:9b:3e:22:e7:8b:d0:34:4e:45:88:cf:94:39:1c:0f:
b0:98:b8:67:52:bc:f5:d0:05:39:79:a4:3b:d4:6e:97:fc:d4:
8b:10:b4:41:11:52:4f:12:8a:fe:25:7e:35:dd:a3:f8:7a:f4:
49:cb:3f:d4:4c:f3:a9:2e:72:5c:6e:47:ba:f0:cd:b4:31:83:
14:6f:5f:f2:d7:a5:a9:d2:84:35:7d:b8:94:67:7c:1a:77:eb:
a1:a3:2e:24:b8:d1:08:d5:aa:3d:f1:e2:7c:8a:60:27:f5:90:
60:99:d0:f6:5d:00:93:ed:c4:bb:d1:cc:42:c6:d2:85:c7:27:
4c:35:cd:d3:55:80:b6:53:00:fd:fb:93:8e:9c:02:48:70:3b:
81:c9:b2:9f:4a:6a:4b:ce:17:54:72:26:ce:39:4a:bc:27:57:
13:bd:ec:84
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzI3NqdWJfeUR5Z8YyHUuLJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3Zjg0ZTc0NjkxYzNiN2ZkMmQ1MThlNTYyZjllYTg3ZGU1
ZDNmNTAwHhcNMjQwMTAyMDYyOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjUwODEyMGEwNTMwMTgwMDI2NzFhYzc0M2I2OWQ5MmQ3NzM4NWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYE+saeWJekAShaP+TkvhLxwuRdo
lgIyM9w3l/hmQBKeKgXTzWVLTQ4ZQFOXMdSCcUx02AJQk848FxN5eckviy/xKDWu
wnhlg484xgNRPlD1oBRrhyno59IHJQ1pgVAR6UwileShFga1XeB/UncQwm60Mkk8
qQo2k+FySa0RAT8OBUjOPkut5qlmd92FIs758+qW2KrV8YLPKPC/V2apbweAJyhQ
K5wFPA5p4DR4N+rV2hj2WAU0hWFPkxsgiufxChfixLj7HIa/qoLuAey+0I0bJC9k
IqNVlQM03ZlVgIsH2OnhJ1FIF8vLNlXDAP5UTN5j35wUwDGdTfhEMKu1swIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP9QgSCgUwGAAmcax0O2nZLXc4XuMB8GA1UdIwQY
MBaAFGf4TnRpHDt/0tUY5WL56ofeXT9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWl9oT2RHa2NPM19TMVJqbFl2bnFoOTVkUDFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lOTM2MGMtZDczZS00MzBiLWI3MmUt
ZDZjZjgzN2IwZWZhLzEvXzFDQklLQlRBWUFDWnhySFE3YWRrdGR6aGU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lOTM2MGMtZDczZS00MzBiLWI3MmUtZDZjZjgzN2IwZWZh
LzEvWl9oT2RHa2NPM19TMVJqbFl2bnFoOTVkUDFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW8NgAwQB
we/+MA0GCSqGSIb3DQEBCwUAA4IBAQDDgXnmhCwiu1gB9l7MQsbLf5V0ayzA3jn1
WklvLNF4Ml5muuOWI2Y+Y9BmN1HTm+p+KomdWWMTE9hLXh6YYckDmOme3bC5JI9W
QnZr60wyQ5+n1Z58acFEavketY+bPiLni9A0TkWIz5Q5HA+wmLhnUrz10AU5eaQ7
1G6X/NSLELRBEVJPEor+JX413aP4evRJyz/UTPOpLnJcbke68M20MYMUb1/y16Wp
0oQ1fbiUZ3wad+uhoy4kuNEI1ao98eJ8imAn9ZBgmdD2XQCT7cS70cxCxtKFxydM
Nc3TVYC2UwD9+5OOnAJIcDuBybKfSmpLzhdUcibOOUq8J1cTveyE
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:17:48 2025 by rpki-client