Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/U0n-xAsmBIUbDkJ12X4Mg7uFMk0.roa
File: U0n-xAsmBIUbDkJ12X4Mg7uFMk0.roa (raw, json)
Hash identifier: fwZP7iet1oG+bI3bdoZUZCCYVRkoq4mmAP3OUScRUsI=
Subject key identifier: 53:49:FE:C4:0B:26:04:85:1B:0E:42:75:D9:7E:0C:83:BB:85:32:4D
Certificate issuer: /CN=3bf468d1515ad6f14ca69cf9c772e5cb57d277d6
Certificate serial: 01900C933D1B5AB212919921355614360A8B
Authority key identifier: 3B:F4:68:D1:51:5A:D6:F1:4C:A6:9C:F9:C7:72:E5:CB:57:D2:77:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/U0n-xAsmBIUbDkJ12X4Mg7uFMk0.roa
Signing time: Wed 12 Jun 2024 13:11:34 +0000
ROA not before: Wed 12 Jun 2024 13:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199296
IP address blocks: 91.233.136.0/22 maxlen: 22
95.141.243.0/24 maxlen: 24
2a13:60c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0c:93:3d:1b:5a:b2:12:91:99:21:35:56:14:36:0a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bf468d1515ad6f14ca69cf9c772e5cb57d277d6
Validity
Not Before: Jun 12 13:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5349fec40b2604851b0e4275d97e0c83bb85324d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:c3:f6:a4:b8:bf:6f:58:2e:26:f7:39:05:
75:44:16:42:0e:9e:51:8f:c5:db:a6:2e:10:65:cb:
9d:d1:e0:81:c4:91:20:05:be:30:c4:e5:2c:31:0f:
d5:03:48:e6:96:97:3a:ae:6b:3e:20:c5:c5:59:39:
a3:d6:a0:64:8a:8c:39:f1:e7:8e:60:b8:75:a1:b6:
30:41:f6:0b:c3:8d:74:46:30:ba:6a:5b:d6:30:77:
ad:66:12:b1:ea:a5:2f:47:ca:76:b9:a3:d7:1a:42:
d3:8a:4c:5a:0b:93:b9:6d:8b:a4:52:02:23:4b:ae:
ca:64:ef:c5:3a:ae:c8:bd:14:f1:e7:4b:90:c6:79:
8b:91:1f:15:c1:6a:00:af:74:11:89:a0:86:ff:24:
88:f5:f4:85:50:c5:ff:45:b3:d0:33:cb:4d:88:78:
2f:6f:34:a0:22:44:17:f0:f2:bb:c3:b5:0b:48:b0:
52:56:17:6f:69:71:53:47:1f:9d:92:13:5a:34:4e:
67:17:15:70:6e:6a:44:b4:93:1a:44:26:bf:91:4f:
f8:0e:4d:03:6d:a4:ca:82:05:27:11:cb:87:64:23:
a3:4c:96:04:37:8a:95:c9:e4:53:1f:03:4a:72:a7:
0c:cb:71:df:0f:5e:62:e9:a0:13:88:59:3a:bb:77:
2e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:49:FE:C4:0B:26:04:85:1B:0E:42:75:D9:7E:0C:83:BB:85:32:4D
X509v3 Authority Key Identifier:
keyid:3B:F4:68:D1:51:5A:D6:F1:4C:A6:9C:F9:C7:72:E5:CB:57:D2:77:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/U0n-xAsmBIUbDkJ12X4Mg7uFMk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.136.0/22
95.141.243.0/24
IPv6:
2a13:60c0::/32
Signature Algorithm: sha256WithRSAEncryption
91:3f:d2:ef:bb:1a:53:34:84:bf:98:24:33:f7:1a:bb:90:e9:
f8:97:de:7a:21:4b:16:1a:05:e6:83:e6:07:6e:3d:aa:b1:7c:
82:92:90:e8:34:88:75:eb:c8:35:9e:a2:1b:8d:d5:c6:a2:80:
fe:c8:09:db:28:e1:bc:83:13:82:97:72:a6:f5:75:f0:a0:80:
e4:94:85:35:60:9b:32:4f:46:03:18:21:61:3f:5a:0e:bf:95:
bf:03:97:ba:87:92:df:56:82:0a:c7:d3:e3:bb:f9:cc:83:48:
ef:17:9d:dc:22:26:b9:2f:47:02:3a:28:4c:57:dd:cc:59:cf:
9a:ff:35:41:45:fc:c2:91:67:33:4e:63:8a:03:b5:9d:ee:e8:
10:d9:72:76:82:8a:21:c5:00:92:bd:e2:bd:de:03:ee:a4:a3:
cd:98:b6:c7:b4:f0:24:34:e7:c3:25:27:bc:d3:ff:3e:34:d0:
c8:59:f6:85:51:ac:fc:f3:a4:9c:e6:69:f3:3f:11:8d:e6:12:
af:14:19:4a:3f:69:3a:8a:12:4c:22:a1:24:aa:c9:e4:06:7c:
c1:12:33:20:ca:e7:b5:80:96:a4:17:ed:b6:a0:e0:f6:28:b1:
fe:78:3b:98:b0:64:d3:49:a6:aa:a2:db:16:ba:b1:03:34:7c:
d0:83:6b:16
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZAMkz0bWrISkZkhNVYUNgqLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZjQ2OGQxNTE1YWQ2ZjE0Y2E2OWNmOWM3NzJlNWNiNTdk
Mjc3ZDYwHhcNMjQwNjEyMTMxMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzQ5ZmVjNDBiMjYwNDg1MWIwZTQyNzVkOTdlMGM4M2JiODUzMjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+HD9qS4v29YLib3OQV1RBZCDp5R
j8Xbpi4QZcud0eCBxJEgBb4wxOUsMQ/VA0jmlpc6rms+IMXFWTmj1qBkiow58eeO
YLh1obYwQfYLw410RjC6alvWMHetZhKx6qUvR8p2uaPXGkLTikxaC5O5bYukUgIj
S67KZO/FOq7IvRTx50uQxnmLkR8VwWoAr3QRiaCG/ySI9fSFUMX/RbPQM8tNiHgv
bzSgIkQX8PK7w7ULSLBSVhdvaXFTRx+dkhNaNE5nFxVwbmpEtJMaRCa/kU/4Dk0D
baTKggUnEcuHZCOjTJYEN4qVyeRTHwNKcqcMy3HfD15i6aATiFk6u3cukwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFNJ/sQLJgSFGw5Cddl+DIO7hTJNMB8GA1UdIwQY
MBaAFDv0aNFRWtbxTKac+cdy5ctX0nfWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT19SbzBWRmExdkZNcHB6NXgzTGx5MWZTZDlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC84MjFmMzUtYTg4MC00ZDY0LWFkYzAt
NDYxMTA0NmYxYTRlLzEvVTBuLXhBc21CSVViRGtKMTJYNE1nN3VGTWswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC84MjFmMzUtYTg4MC00ZDY0LWFkYzAtNDYxMTA0NmYxYTRl
LzEvT19SbzBWRmExdkZNcHB6NXgzTGx5MWZTZDlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCW+mIAwQA
X43zMA0EAgACMAcDBQAqE2DAMA0GCSqGSIb3DQEBCwUAA4IBAQCRP9LvuxpTNIS/
mCQz9xq7kOn4l956IUsWGgXmg+YHbj2qsXyCkpDoNIh168g1nqIbjdXGooD+yAnb
KOG8gxOCl3Km9XXwoIDklIU1YJsyT0YDGCFhP1oOv5W/A5e6h5LfVoIKx9Pju/nM
g0jvF53cIia5L0cCOihMV93MWc+a/zVBRfzCkWczTmOKA7Wd7ugQ2XJ2goohxQCS
veK93gPupKPNmLbHtPAkNOfDJSe80/8+NNDIWfaFUaz886Sc5mnzPxGN5hKvFBlK
P2k6ihJMIqEkqsnkBnzBEjMgyue1gJakF+22oOD2KLH+eDuYsGTTSaaqotsWurED
NHzQg2sW
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:00 2025 by rpki-client