Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/93P_uAy2jCWI_VZW6VKTSEnFoLM.roa
File: 93P_uAy2jCWI_VZW6VKTSEnFoLM.roa (raw, json)
Hash identifier: wYlPckuibtt/JbqRoHV0OFpW9xsKBkisqP8+mA5WTUs=
Subject key identifier: F7:73:FF:B8:0C:B6:8C:25:88:FD:56:56:E9:52:93:48:49:C5:A0:B3
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 018CC6B8930E6E545E2D0ED759DD690227CC
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/93P_uAy2jCWI_VZW6VKTSEnFoLM.roa
Signing time: Mon 01 Jan 2024 20:30:34 +0000
ROA not before: Mon 01 Jan 2024 20:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208615
IP address blocks: 91.219.181.0/24 maxlen: 24
80.79.248.80/28 maxlen: 28
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:52:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:93:0e:6e:54:5e:2d:0e:d7:59:dd:69:02:27:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 1 20:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f773ffb80cb68c2588fd5656e952934849c5a0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0a:66:fb:d7:29:e7:96:03:7e:fb:44:1e:74:
31:71:fc:0f:75:32:00:ab:97:9a:9b:a9:9f:08:f3:
85:54:6d:24:0b:04:20:44:c7:82:13:c4:ea:42:6d:
b4:f1:41:53:bf:8b:30:20:f4:0e:e5:92:0c:69:67:
6d:89:cf:df:08:23:0a:a9:5a:cd:dc:90:41:5a:9a:
de:07:82:5a:e6:c5:47:9e:21:46:93:54:30:f4:87:
18:62:a8:65:be:18:23:f5:94:75:82:41:18:f2:92:
43:7b:7e:87:22:a3:c1:ee:8e:8b:5f:03:72:f8:4d:
f2:a9:cd:7f:1e:9e:8d:7a:11:d7:01:84:6c:ac:44:
e2:e8:0a:d6:1e:c2:c1:58:11:eb:92:fc:e6:24:d6:
f4:a0:ae:3f:57:7b:1f:ae:e5:ae:b9:55:47:ae:e6:
48:48:3d:7a:8d:93:32:45:4d:8d:15:bc:4b:69:1b:
5b:70:75:37:0a:bb:4c:f2:1a:a3:76:7b:9d:6e:bb:
66:c2:6e:20:9a:dc:cb:b6:e5:6c:08:64:33:8d:48:
63:f2:16:0b:62:66:ac:56:41:5f:ce:41:c6:7d:a3:
49:58:3c:9f:9b:a1:3a:c7:97:ae:da:3a:5e:29:d4:
fb:83:57:d8:f8:a5:1c:c6:10:43:d1:9d:84:ca:f2:
29:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:73:FF:B8:0C:B6:8C:25:88:FD:56:56:E9:52:93:48:49:C5:A0:B3
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/93P_uAy2jCWI_VZW6VKTSEnFoLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.248.80/28
91.219.181.0/24
Signature Algorithm: sha256WithRSAEncryption
37:29:90:20:6d:9c:c4:9a:95:53:78:2d:34:7e:17:9d:9c:ac:
98:19:02:8c:44:f7:1a:d0:7a:e8:36:51:c9:70:00:6d:7d:ce:
1b:87:b5:c6:cb:a4:a7:78:39:6b:14:e8:9d:a7:86:6e:8c:6b:
61:cf:60:69:b7:4f:f1:af:ac:a6:28:87:a2:ed:ca:4a:83:76:
ab:4f:3b:06:fd:1c:5b:b5:69:4d:2e:86:05:11:c0:0a:cc:16:
89:64:e6:dd:f7:bb:93:6b:8b:28:93:85:82:3f:30:7c:fd:a4:
ec:d8:b0:b9:e8:3f:95:01:5a:d7:b4:fa:cc:56:c7:a3:9d:5d:
16:19:45:5e:1c:5e:9e:4a:df:08:7c:24:29:6b:a9:0f:96:5b:
a5:fc:b5:d1:35:b4:5f:e5:fb:9a:04:31:d1:29:7c:a0:f5:e4:
9b:c1:aa:4b:08:5f:a3:2f:d6:92:ec:59:1f:c2:63:ba:71:09:
7d:f3:39:f8:2f:e8:73:7d:f4:f2:14:ae:11:db:db:b4:1b:b1:
0e:d1:f4:b3:29:d7:29:f1:6b:96:71:80:a1:4d:a7:10:5f:eb:
cc:76:55:1b:4a:7c:43:65:7e:12:7a:fe:80:24:76:7d:d8:fe:
e1:d3:59:75:43:c7:99:0e:ef:3a:f1:ee:9d:ed:1c:f5:61:f8:
e1:95:ce:50
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAYzGuJMOblReLQ7XWd1pAifMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYmE0OGM3ZTJjOWUwNWVkYTU0NmQ4OTkxNDZiODlmNzk5
ZGY4NWQwHhcNMjQwMTAxMjAzMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzczZmZiODBjYjY4YzI1ODhmZDU2NTZlOTUyOTM0ODQ5YzVhMGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQpm+9cp55YDfvtEHnQxcfwPdTIA
q5eam6mfCPOFVG0kCwQgRMeCE8TqQm208UFTv4swIPQO5ZIMaWdtic/fCCMKqVrN
3JBBWpreB4Ja5sVHniFGk1Qw9IcYYqhlvhgj9ZR1gkEY8pJDe36HIqPB7o6LXwNy
+E3yqc1/Hp6NehHXAYRsrETi6ArWHsLBWBHrkvzmJNb0oK4/V3sfruWuuVVHruZI
SD16jZMyRU2NFbxLaRtbcHU3CrtM8hqjdnudbrtmwm4gmtzLtuVsCGQzjUhj8hYL
YmasVkFfzkHGfaNJWDyfm6E6x5eu2jpeKdT7g1fY+KUcxhBD0Z2EyvIp3wIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPdz/7gMtowliP1WVulSk0hJxaCzMB8GA1UdIwQY
MBaAFL66SMfiyeBe2lRtiZFGuJ95nfhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYt
M2Q1MjIxODFhMmM0LzEvOTNQX3VBeTJqQ1dJX1ZaVzZWS1RTRW5Gb0xNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYtM2Q1MjIxODFhMmM0
LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANAwUEUE/4UAME
AFvbtTANBgkqhkiG9w0BAQsFAAOCAQEANymQIG2cxJqVU3gtNH4XnZysmBkCjET3
GtB66DZRyXAAbX3OG4e1xsukp3g5axTonaeGboxrYc9gabdP8a+spiiHou3KSoN2
q087Bv0cW7VpTS6GBRHACswWiWTm3fe7k2uLKJOFgj8wfP2k7Niwueg/lQFa17T6
zFbHo51dFhlFXhxenkrfCHwkKWupD5Zbpfy10TW0X+X7mgQx0Sl8oPXkm8GqSwhf
oy/WkuxZH8JjunEJffM5+C/oc3308hSuEdvbtBuxDtH0synXKfFrlnGAoU2nEF/r
zHZVG0p8Q2V+Enr+gCR2fdj+4dNZdUPHmQ7vOvHune0c9WH44ZXOUA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:07 2025 by rpki-client