Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/Te5By6ehz9zI6LnkWc9_J5HMQRQ.roa
File: Te5By6ehz9zI6LnkWc9_J5HMQRQ.roa (raw, json)
Hash identifier: O/kOZpFwJXaz1sIeYI0UCHm/JK9R5t83w6giWHJmt3E=
Subject key identifier: 4D:EE:41:CB:A7:A1:CF:DC:C8:E8:B9:E4:59:CF:7F:27:91:CC:41:14
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0192F1F9A15BCD4CC552A721D8E7B6090E4B
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/Te5By6ehz9zI6LnkWc9_J5HMQRQ.roa
Signing time: Sun 03 Nov 2024 12:22:01 +0000
ROA not before: Sun 03 Nov 2024 12:22:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 93.89.216.0/24 maxlen: 24
193.109.160.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f1:f9:a1:5b:cd:4c:c5:52:a7:21:d8:e7:b6:09:0e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Nov 3 12:22:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4dee41cba7a1cfdcc8e8b9e459cf7f2791cc4114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:cf:5d:f2:05:d8:0e:6d:7d:f5:de:8d:f8:
49:ca:d7:25:14:90:f0:59:2e:67:ad:e4:07:ce:42:
37:f1:63:34:a7:fe:13:8e:df:13:61:6f:8b:f0:24:
80:cb:cc:dc:50:ac:64:c9:6b:fd:13:d8:9d:31:ea:
e8:3f:42:a7:fe:ab:8c:3e:0d:e6:9d:02:cf:dd:4e:
1d:6e:9b:57:c7:bc:93:9b:59:ae:d1:95:6d:fe:a5:
61:b4:a0:2c:3a:a9:0e:93:60:a4:35:cf:2e:48:21:
e7:16:3a:53:72:d7:61:52:85:cd:58:48:a3:50:0d:
35:16:e0:bd:60:c8:ad:8e:e0:0a:ef:2e:92:c6:b4:
e7:bf:02:27:50:a7:52:60:c0:e5:5b:c6:27:19:d0:
93:65:5d:70:07:f5:1c:fc:39:eb:c0:0a:b4:89:76:
39:0e:57:64:ec:0e:56:05:84:76:33:f4:40:74:6f:
0d:93:86:d2:e6:9b:e7:bf:7c:6b:0d:05:3c:b9:30:
66:66:5c:b9:e9:0b:ec:c9:69:c6:c1:67:8b:a2:cf:
5a:a8:e2:9b:bc:fc:ea:62:57:42:9b:54:ac:ad:45:
67:54:8f:1d:f0:6c:3c:16:d1:e9:1f:54:f8:eb:4d:
34:07:6d:96:ad:82:1c:ff:7c:99:a1:7a:7f:cc:d4:
d4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EE:41:CB:A7:A1:CF:DC:C8:E8:B9:E4:59:CF:7F:27:91:CC:41:14
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/Te5By6ehz9zI6LnkWc9_J5HMQRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.216.0/24
193.109.160.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:23:c6:2a:b0:ac:c1:7f:ec:82:94:0c:69:e4:5b:bc:5e:85:
3c:6c:c1:c2:84:f1:7a:14:3c:5d:07:e3:58:d7:7d:f1:4b:c0:
24:52:5d:f4:1f:9c:e5:90:fa:05:b5:d8:fc:91:4f:cb:2d:9c:
0a:d6:3a:57:fa:02:0c:d5:70:58:b7:54:0d:58:07:9f:77:4b:
3b:b7:3f:61:16:46:a6:e7:4c:6f:fa:68:84:9b:a5:7d:cf:fd:
50:54:1e:e6:f5:79:cb:a1:8b:ba:26:72:1d:c4:5f:b3:76:a1:
57:a9:58:32:61:22:f6:00:62:2c:35:9b:f7:94:02:13:59:e9:
b1:43:0b:a4:13:95:f8:54:99:34:70:aa:2c:e0:d7:bf:b7:52:
ed:47:37:9c:62:bf:47:6b:17:49:b4:ed:57:8b:cb:f7:57:63:
1f:83:56:f7:0a:25:41:5b:ac:18:bd:62:86:04:27:b8:a4:e9:
3b:2b:14:2a:f4:47:6c:79:0c:90:7f:2b:52:a8:6a:3a:1f:6e:
e3:93:69:10:92:51:95:97:bf:bc:f6:98:53:55:e0:d2:29:f0:
12:64:0f:2c:ec:fe:8a:89:a9:de:79:54:27:25:a2:a7:36:40:
8f:d9:41:be:67:3b:d7:ce:27:22:03:99:f6:21:a2:cc:65:51:
2f:34:1c:1b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZLx+aFbzUzFUqch2Oe2CQ5LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx
OWZiMjAwHhcNMjQxMTAzMTIyMjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGVlNDFjYmE3YTFjZmRjYzhlOGI5ZTQ1OWNmN2YyNzkxY2M0MTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsbPXfIF2A5tffXejfhJytclFJDw
WS5nreQHzkI38WM0p/4Tjt8TYW+L8CSAy8zcUKxkyWv9E9idMeroP0Kn/quMPg3m
nQLP3U4dbptXx7yTm1mu0ZVt/qVhtKAsOqkOk2CkNc8uSCHnFjpTctdhUoXNWEij
UA01FuC9YMitjuAK7y6SxrTnvwInUKdSYMDlW8YnGdCTZV1wB/Uc/DnrwAq0iXY5
Dldk7A5WBYR2M/RAdG8Nk4bS5pvnv3xrDQU8uTBmZly56QvsyWnGwWeLos9aqOKb
vPzqYldCm1SsrUVnVI8d8Gw8FtHpH1T46000B22WrYIc/3yZoXp/zNTUbQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE3uQcunoc/cyOi55FnPfyeRzEEUMB8GA1UdIwQY
MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt
NDI2OWI1NmJmN2Q0LzEvVGU1Qnk2ZWh6OXpJNkxua1djOV9KNUhNUVJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0
LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXVnYAwQC
wW2gMA0GCSqGSIb3DQEBCwUAA4IBAQC/I8YqsKzBf+yClAxp5Fu8XoU8bMHChPF6
FDxdB+NY133xS8AkUl30H5zlkPoFtdj8kU/LLZwK1jpX+gIM1XBYt1QNWAefd0s7
tz9hFkam50xv+miEm6V9z/1QVB7m9XnLoYu6JnIdxF+zdqFXqVgyYSL2AGIsNZv3
lAITWemxQwukE5X4VJk0cKos4Ne/t1LtRzecYr9HaxdJtO1Xi8v3V2Mfg1b3CiVB
W6wYvWKGBCe4pOk7KxQq9EdseQyQfytSqGo6H27jk2kQklGVl7+89phTVeDSKfAS
ZA8s7P6KianeeVQnJaKnNkCP2UG+ZzvXziciA5n2IaLMZVEvNBwb
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:17 2025 by rpki-client