Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/9-JEyQ_sefo2qI7s-kWF-9Hw68c.roa
File: 9-JEyQ_sefo2qI7s-kWF-9Hw68c.roa (raw, json)
Hash identifier: z0vyqTITupN75aWvyisiLA1zO/GNPE9c8AMUlrjyq7A=
Subject key identifier: F7:E2:44:C9:0F:EC:79:FA:36:A8:8E:EC:FA:45:85:FB:D1:F0:EB:C7
Certificate issuer: /CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Certificate serial: 018E7B103D9E837AEC01A79E8701DC053B84
Authority key identifier: 86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/9-JEyQ_sefo2qI7s-kWF-9Hw68c.roa
Signing time: Tue 26 Mar 2024 14:00:45 +0000
ROA not before: Tue 26 Mar 2024 14:00:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12577
IP address blocks: 206.225.20.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 27 Mar 2024 08:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7b:10:3d:9e:83:7a:ec:01:a7:9e:87:01:dc:05:3b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Validity
Not Before: Mar 26 14:00:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7e244c90fec79fa36a88eecfa4585fbd1f0ebc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:f2:eb:34:ef:12:5f:fd:50:17:58:09:82:
87:79:a7:eb:32:d5:39:5c:81:44:41:db:13:b5:68:
2e:31:fc:30:e3:85:43:6f:71:02:cf:23:4a:65:12:
a9:74:27:e2:b6:d1:b3:d9:6a:6e:eb:7f:ab:8e:33:
22:94:70:a0:00:15:a9:18:9c:db:61:2c:98:5a:bb:
ec:85:78:80:c3:0e:b7:fa:a5:94:1e:00:b2:7d:e0:
91:e8:b8:6c:82:3f:2c:83:c5:f8:7a:68:3a:91:7f:
b4:30:4a:56:e4:2d:69:b5:78:04:74:ed:f9:55:92:
61:c2:84:e6:05:e4:0b:78:08:12:0c:53:5f:8f:c4:
79:77:18:3a:16:eb:04:9a:68:49:01:0c:2a:44:83:
05:60:24:26:70:fb:58:ff:33:92:5a:ed:1e:dc:9e:
9a:38:b0:6d:73:0d:6b:41:05:29:ef:6d:bb:eb:01:
35:33:86:c8:b3:cf:00:a2:96:8a:67:56:e1:e0:3f:
8d:a7:8e:b6:a0:a9:e0:26:be:12:15:13:d1:68:34:
0c:9c:e9:68:7f:41:e4:b6:1c:c2:39:a9:e0:e9:44:
b4:08:24:92:87:99:24:66:56:24:52:91:e4:c5:5a:
0a:cd:55:3c:eb:16:5d:82:82:26:66:c8:80:9a:7f:
44:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E2:44:C9:0F:EC:79:FA:36:A8:8E:EC:FA:45:85:FB:D1:F0:EB:C7
X509v3 Authority Key Identifier:
keyid:86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/9-JEyQ_sefo2qI7s-kWF-9Hw68c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.225.20.0/22
Signature Algorithm: sha256WithRSAEncryption
21:3b:a8:62:b4:1f:00:f8:12:65:55:4a:ec:44:0f:80:34:35:
26:96:51:e0:95:81:85:bb:2e:76:c1:52:b6:bc:22:9f:a5:f9:
b7:62:00:5d:41:0a:2d:a5:d7:53:1c:5c:40:5c:8a:5e:ce:60:
9b:58:50:22:8b:3f:68:ca:c4:5d:27:d6:dc:ac:61:70:1b:93:
d1:2d:ff:69:64:d6:a2:e5:37:34:98:a6:66:fb:31:af:e5:08:
75:b8:19:93:5d:5f:98:84:a3:75:b6:6e:70:30:45:b1:bf:fe:
3f:49:8a:5d:cd:1f:75:d9:bb:36:68:32:3c:5f:65:ce:7f:45:
0e:07:85:da:a0:40:96:50:98:83:f4:51:77:df:64:1f:61:f1:
ad:89:c6:42:22:e6:89:24:a9:0d:5b:0f:fd:28:f7:9b:37:95:
5f:0c:09:85:52:82:a2:6c:e6:0e:0f:c4:a5:79:45:17:e9:28:
12:58:e0:a9:a8:f6:9e:6e:9b:ef:ab:83:e0:68:6e:79:40:d7:
cf:dc:34:2e:e3:5b:d1:b6:8e:a2:37:7e:86:69:31:91:cb:fd:
f6:6a:65:e2:ee:44:93:7b:f9:b4:56:75:4c:62:cb:bf:28:6f:
96:0a:7f:83:5f:b2:78:5f:9b:b4:46:de:ba:6f:47:d1:23:1a:
59:4f:a3:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY57ED2eg3rsAaeehwHcBTuEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MzZhNGUxNGE3MWRkZDUxMDE2NGI4NjMxYWQ5OWJiZmM3
NTk1M2EwHhcNMjQwMzI2MTQwMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2UyNDRjOTBmZWM3OWZhMzZhODhlZWNmYTQ1ODVmYmQxZjBlYmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoory6zTvEl/9UBdYCYKHeafrMtU5
XIFEQdsTtWguMfww44VDb3ECzyNKZRKpdCfittGz2Wpu63+rjjMilHCgABWpGJzb
YSyYWrvshXiAww63+qWUHgCyfeCR6Lhsgj8sg8X4emg6kX+0MEpW5C1ptXgEdO35
VZJhwoTmBeQLeAgSDFNfj8R5dxg6FusEmmhJAQwqRIMFYCQmcPtY/zOSWu0e3J6a
OLBtcw1rQQUp72276wE1M4bIs88AopaKZ1bh4D+Np462oKngJr4SFRPRaDQMnOlo
f0HkthzCOang6US0CCSSh5kkZlYkUpHkxVoKzVU86xZdgoImZsiAmn9EUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPfiRMkP7Hn6NqiO7PpFhfvR8OvHMB8GA1UdIwQY
MBaAFIY2pOFKcd3VEBZLhjGtmbv8dZU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGphazRVcHgzZFVRRmt1R01hMlp1X3gxbFRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZGVjYTMtNGVmMS00NWFkLTg5MjIt
MmY3Y2Y4NDQ2YTMxLzEvOS1KRXlRX3NlZm8ycUk3cy1rV0YtOUh3NjhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9jZGVjYTMtNGVmMS00NWFkLTg5MjItMmY3Y2Y4NDQ2YTMx
LzEvaGphazRVcHgzZFVRRmt1R01hMlp1X3gxbFRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzuEUMA0G
CSqGSIb3DQEBCwUAA4IBAQAhO6hitB8A+BJlVUrsRA+ANDUmllHglYGFuy52wVK2
vCKfpfm3YgBdQQotpddTHFxAXIpezmCbWFAiiz9oysRdJ9bcrGFwG5PRLf9pZNai
5Tc0mKZm+zGv5Qh1uBmTXV+YhKN1tm5wMEWxv/4/SYpdzR912bs2aDI8X2XOf0UO
B4XaoECWUJiD9FF332QfYfGticZCIuaJJKkNWw/9KPebN5VfDAmFUoKibOYOD8Sl
eUUX6SgSWOCpqPaebpvvq4PgaG55QNfP3DQu41vRto6iN36GaTGRy/32amXi7kST
e/m0VnVMYsu/KG+WCn+DX7J4X5u0Rt66b0fRIxpZT6O+
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:53 2025 by rpki-client