Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/lE_uL0pXSi1vc2tYKS9C74wILwM.roa
File: lE_uL0pXSi1vc2tYKS9C74wILwM.roa (raw, json)
Hash identifier: Vs/+wKfAmZ/MaLyLoPXOfAz/4pe/W1GvPjq0+X7qb+4=
Subject key identifier: 94:4F:EE:2F:4A:57:4A:2D:6F:73:6B:58:29:2F:42:EF:8C:08:2F:03
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 0191329CC1F68CEBA5A853988BF34F7CBDD9
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/lE_uL0pXSi1vc2tYKS9C74wILwM.roa
Signing time: Thu 08 Aug 2024 15:30:19 +0000
ROA not before: Thu 08 Aug 2024 15:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62425
IP address blocks: 93.180.132.0/24 maxlen: 24
93.180.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:32:9c:c1:f6:8c:eb:a5:a8:53:98:8b:f3:4f:7c:bd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Aug 8 15:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=944fee2f4a574a2d6f736b58292f42ef8c082f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:3e:c4:e4:8b:58:2e:cc:66:b5:47:10:17:
21:74:31:de:30:5d:16:12:d7:3b:bc:94:62:dd:de:
33:7d:a4:20:ef:ba:92:fa:b1:61:eb:a9:6b:19:9c:
a4:64:aa:a5:80:8c:16:d5:c0:04:df:d1:38:9d:d5:
30:e7:c8:ed:9b:c8:fb:04:33:81:95:31:62:0c:ad:
c8:93:9a:f5:6b:03:bd:f8:d4:db:d8:e7:aa:8d:bb:
a2:7e:8a:7f:89:b9:43:f9:d5:14:9e:2c:30:4b:46:
d1:19:4a:67:0e:94:87:58:b5:fd:2a:27:11:c8:ee:
6f:30:06:94:ba:35:ac:4c:d4:f5:e2:ad:9e:47:50:
db:fb:08:6e:18:48:9f:53:aa:c3:4e:23:bd:41:6f:
b3:69:8f:c9:48:a7:0f:8c:7e:65:e6:c0:0d:c1:ef:
62:b2:12:e4:33:95:07:01:6e:61:87:b6:68:cb:22:
92:18:8a:4c:68:ad:c3:28:19:c2:fe:25:b7:5f:4c:
4c:8b:42:d1:85:34:e5:43:fb:7b:06:e8:fc:3f:98:
4a:06:69:91:5e:b4:60:06:b5:4d:94:06:76:95:e7:
d5:af:e2:91:3c:78:dd:e9:18:37:1e:ea:e1:f6:7c:
71:90:86:3d:a5:97:5c:a4:7f:17:e6:99:f7:f6:ef:
e8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4F:EE:2F:4A:57:4A:2D:6F:73:6B:58:29:2F:42:EF:8C:08:2F:03
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/lE_uL0pXSi1vc2tYKS9C74wILwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.132.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:e4:c0:b6:7f:29:12:0b:8f:4c:05:a0:62:19:75:cb:55:cb:
ee:f1:0d:cb:b2:33:96:1f:f6:54:ea:7d:08:91:6c:be:6b:80:
53:04:b9:07:9d:1a:84:b9:b0:b5:cc:b9:7c:60:36:0a:17:51:
f5:36:ba:76:85:ef:ce:b9:87:7e:73:52:34:17:cf:77:d8:5c:
45:4a:9d:87:f7:0f:29:34:1d:e7:2d:a9:93:91:09:5c:99:37:
5e:55:38:99:b5:39:93:fd:e7:d0:7b:74:f8:e6:0d:ac:3f:44:
dd:40:b8:17:47:cf:96:b7:81:10:47:3c:3c:52:f7:7c:2b:36:
62:3d:fa:b7:5b:7f:77:38:94:d0:e4:aa:c6:19:c6:d7:c8:ab:
61:19:ae:de:27:79:9a:79:95:42:c3:be:81:b8:85:2d:9a:bd:
eb:74:69:0d:20:37:ab:15:f0:68:2d:0a:96:00:e4:68:4e:cd:
0d:0c:98:a1:49:41:38:08:da:7f:6b:dc:65:e3:0e:5e:11:e0:
3a:f2:96:9a:f3:9a:b5:50:f9:15:58:ae:5c:25:ee:d3:1e:19:
63:0b:23:9b:ee:6e:88:c5:46:32:68:a5:65:df:0e:78:7f:92:
ad:d1:f8:10:ca:51:98:5e:a9:11:86:80:3b:d2:e1:e0:f5:c5:
a1:e9:bf:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZEynMH2jOulqFOYi/NPfL3ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2
NzdiY2QwHhcNMjQwODA4MTUzMDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDRmZWUyZjRhNTc0YTJkNmY3MzZiNTgyOTJmNDJlZjhjMDgyZjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLU+xOSLWC7MZrVHEBchdDHeMF0W
Etc7vJRi3d4zfaQg77qS+rFh66lrGZykZKqlgIwW1cAE39E4ndUw58jtm8j7BDOB
lTFiDK3Ik5r1awO9+NTb2Oeqjbuifop/iblD+dUUniwwS0bRGUpnDpSHWLX9KicR
yO5vMAaUujWsTNT14q2eR1Db+whuGEifU6rDTiO9QW+zaY/JSKcPjH5l5sANwe9i
shLkM5UHAW5hh7ZoyyKSGIpMaK3DKBnC/iW3X0xMi0LRhTTlQ/t7Buj8P5hKBmmR
XrRgBrVNlAZ2lefVr+KRPHjd6Rg3Hurh9nxxkIY9pZdcpH8X5pn39u/ovwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJRP7i9KV0otb3NrWCkvQu+MCC8DMB8GA1UdIwQY
MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt
NTU1OGE4YjUzZTNkLzEvbEVfdUwwcFhTaTF2YzJ0WUtTOUM3NHdJTHdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk
LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXbSEMA0G
CSqGSIb3DQEBCwUAA4IBAQAr5MC2fykSC49MBaBiGXXLVcvu8Q3LsjOWH/ZU6n0I
kWy+a4BTBLkHnRqEubC1zLl8YDYKF1H1Nrp2he/OuYd+c1I0F8932FxFSp2H9w8p
NB3nLamTkQlcmTdeVTiZtTmT/efQe3T45g2sP0TdQLgXR8+Wt4EQRzw8Uvd8KzZi
Pfq3W393OJTQ5KrGGcbXyKthGa7eJ3maeZVCw76BuIUtmr3rdGkNIDerFfBoLQqW
AORoTs0NDJihSUE4CNp/a9xl4w5eEeA68paa85q1UPkVWK5cJe7THhljCyOb7m6I
xUYyaKVl3w54f5Kt0fgQylGYXqkRhoA70uHg9cWh6b9t
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:42:39 2025 by rpki-client