Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/NAt1Z4Pzepc96SCQmPxJDr8ehdg.roa
File: NAt1Z4Pzepc96SCQmPxJDr8ehdg.roa (raw, json)
Hash identifier: JKsZ5wfYdyiF0URqrQo/wfGxnXfh+NTJyGBy8A+QAlQ=
Subject key identifier: 34:0B:75:67:83:F3:7A:97:3D:E9:20:90:98:FC:49:0E:BF:1E:85:D8
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194703E6C6AF46483B0AA9908C0711771A2
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/NAt1Z4Pzepc96SCQmPxJDr8ehdg.roa
Signing time: Thu 16 Jan 2025 17:52:06 +0000
ROA not before: Thu 16 Jan 2025 17:52:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200020
IP address blocks: 145.97.16.0/23 maxlen: 23
145.97.18.0/23 maxlen: 23
2001:610:2000::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 17 Jan 2025 07:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:70:3e:6c:6a:f4:64:83:b0:aa:99:08:c0:71:17:71:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 16 17:52:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=340b756783f37a973de9209098fc490ebf1e85d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:20:9e:40:b4:20:0b:0a:a8:c5:91:ce:ed:ec:
1c:3e:eb:37:0f:12:07:0b:b3:32:be:cc:32:e6:b7:
0a:ef:1e:2f:90:6d:2c:9a:cb:dc:95:95:aa:50:5a:
e3:69:eb:be:df:a4:9c:df:95:a6:2a:08:84:83:17:
32:15:f7:9c:4a:7f:75:1f:9e:5e:d1:ac:d3:56:a2:
a7:36:a1:84:c6:97:b4:24:b6:29:31:13:1b:d4:3a:
5d:6e:af:9c:fb:e8:af:b3:17:50:a7:65:44:0f:5b:
c0:0b:12:a3:95:14:ff:bc:df:74:ee:62:15:5c:ba:
c4:8f:f7:57:1a:58:88:f0:41:5e:2d:ad:cd:11:81:
12:ff:fd:cf:90:9c:8f:8d:32:b9:ec:56:fe:e9:cb:
26:0d:dc:2f:66:3d:c7:20:b9:ff:68:0a:bd:ed:37:
4a:7e:71:3e:ec:64:ef:c7:1e:a1:e9:d2:97:b5:2f:
f4:a9:43:ab:27:90:55:a9:99:c2:27:8a:d5:9a:6d:
15:e4:6d:c6:5d:89:15:6b:47:67:b6:b3:fb:78:c1:
5f:6f:fc:34:44:8d:ca:b5:76:77:8f:c6:35:38:3f:
bb:97:50:90:ff:29:e2:c6:7a:59:de:b9:49:08:5a:
95:f6:25:dc:21:4b:69:09:66:d9:1c:b9:19:c5:e0:
85:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0B:75:67:83:F3:7A:97:3D:E9:20:90:98:FC:49:0E:BF:1E:85:D8
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/NAt1Z4Pzepc96SCQmPxJDr8ehdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.97.16.0/22
IPv6:
2001:610:2000::/48
Signature Algorithm: sha256WithRSAEncryption
1f:a7:33:12:cc:4e:81:5d:2b:e3:b4:5e:f0:1a:b2:fd:c5:23:
8d:be:a6:57:9f:8d:b2:20:8d:45:59:8f:de:6f:b1:a3:db:73:
6f:15:89:92:8e:e6:40:80:d6:de:95:fb:0a:ce:4c:3e:69:83:
be:e9:32:da:47:b7:82:04:59:01:53:ed:43:cb:10:96:2c:92:
62:14:c2:ba:36:08:e3:39:ec:ab:55:38:82:d1:b3:e6:dd:df:
2f:5a:00:c9:46:7a:ce:7a:a1:00:ac:88:9a:f5:63:bb:e5:41:
7b:cf:03:95:86:bb:48:91:cd:cf:38:77:86:9f:b6:5f:67:83:
9e:e4:3b:b6:0e:df:99:a2:e8:71:f1:81:b7:e3:fc:e8:da:11:
35:0e:e9:eb:16:47:94:17:3a:26:d2:5c:04:4d:7d:fa:7b:d9:
ea:08:af:ac:90:5e:49:92:e1:a8:83:b5:f0:0d:fd:30:97:66:
56:69:73:c1:7d:9a:3f:0a:4f:f1:7a:a8:ec:da:a1:4b:e2:aa:
8e:70:ed:c6:b2:ac:e2:3e:51:54:b9:a9:7c:6f:0f:0a:b7:1f:
34:2a:db:5a:c5:99:55:55:b1:49:a6:93:80:ec:f6:93:d2:0c:
94:de:14:d5:81:4b:95:e8:67:b5:6c:a9:87:59:af:34:65:3b:
d7:a4:9d:22
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZRwPmxq9GSDsKqZCMBxF3GiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjUwMTE2MTc1MjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDBiNzU2NzgzZjM3YTk3M2RlOTIwOTA5OGZjNDkwZWJmMWU4NWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCCeQLQgCwqoxZHO7ewcPus3DxIH
C7Myvswy5rcK7x4vkG0smsvclZWqUFrjaeu+36Sc35WmKgiEgxcyFfecSn91H55e
0azTVqKnNqGExpe0JLYpMRMb1Dpdbq+c++ivsxdQp2VED1vACxKjlRT/vN907mIV
XLrEj/dXGliI8EFeLa3NEYES//3PkJyPjTK57Fb+6csmDdwvZj3HILn/aAq97TdK
fnE+7GTvxx6h6dKXtS/0qUOrJ5BVqZnCJ4rVmm0V5G3GXYkVa0dntrP7eMFfb/w0
RI3KtXZ3j8Y1OD+7l1CQ/ynixnpZ3rlJCFqV9iXcIUtpCWbZHLkZxeCF3QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDQLdWeD83qXPekgkJj8SQ6/HoXYMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvTkF0MVo0UHplcGM5NlNDUW1QeEpEcjhlaGRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCkWEQMA8E
AgACMAkDBwAgAQYQIAAwDQYJKoZIhvcNAQELBQADggEBAB+nMxLMToFdK+O0XvAa
sv3FI42+plefjbIgjUVZj95vsaPbc28ViZKO5kCA1t6V+wrOTD5pg77pMtpHt4IE
WQFT7UPLEJYskmIUwro2COM57KtVOILRs+bd3y9aAMlGes56oQCsiJr1Y7vlQXvP
A5WGu0iRzc84d4aftl9ng57kO7YO35mi6HHxgbfj/OjaETUO6esWR5QXOibSXARN
ffp72eoIr6yQXkmS4aiDtfAN/TCXZlZpc8F9mj8KT/F6qOzaoUviqo5w7cayrOI+
UVS5qXxvDwq3HzQq21rFmVVVsUmmk4Ds9pPSDJTeFNWBS5XoZ7VsqYdZrzRlO9ek
nSI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:05:51 2025 by rpki-client