Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/tFBo-RfwN36CzvnoHAcqNqRGJdE.roa
File: tFBo-RfwN36CzvnoHAcqNqRGJdE.roa (raw, json)
Hash identifier: 0Le29zikz0EPqJf+egCFxt1i93qqJOozT8WJi076WR0=
Subject key identifier: B4:50:68:F9:17:F0:37:7E:82:CE:F9:E8:1C:07:2A:36:A4:46:25:D1
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019424B29A0569C2AC730EDB957840777EB1
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/tFBo-RfwN36CzvnoHAcqNqRGJdE.roa
Signing time: Thu 02 Jan 2025 01:47:52 +0000
ROA not before: Thu 02 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 217.180.17.0/24 maxlen: 24
217.180.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 08:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:9a:05:69:c2:ac:73:0e:db:95:78:40:77:7e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jan 2 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b45068f917f0377e82cef9e81c072a36a44625d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c0:01:d7:55:13:92:f6:d8:a2:02:b5:dd:fe:
04:99:92:9b:e6:d3:54:7b:88:40:af:f7:fd:64:8a:
cc:a4:08:ed:03:e1:4b:29:de:ca:9b:ed:ee:66:80:
a7:e9:08:48:4e:cf:9f:c4:26:47:f1:d7:ff:27:ea:
32:a4:ba:1c:92:cf:92:47:07:f6:46:dc:c2:63:9e:
de:a2:76:44:53:7d:46:64:dc:03:47:45:34:9d:a3:
2f:c8:fb:fe:11:bd:52:39:52:c4:1c:2f:e2:cd:15:
21:e6:d7:d9:e6:3e:18:d2:a5:ce:63:66:21:ed:5a:
3d:6e:17:3d:ea:89:50:f5:87:f8:fb:4a:22:d7:28:
61:63:9e:ea:aa:89:3e:17:15:66:b4:0a:53:bd:f9:
f1:e5:0c:f2:f7:c0:6e:3b:ae:a1:75:d2:83:1e:58:
c7:7f:3f:66:48:4b:e2:56:10:0b:04:ee:fe:51:c6:
ff:73:ef:40:b3:05:3e:a4:27:54:1f:86:e3:90:96:
ac:06:d4:05:b1:0e:89:b0:a0:be:92:31:8e:64:e4:
dc:54:67:03:f6:77:8e:4e:1b:6d:bb:28:86:b9:ca:
33:45:90:8c:a3:a6:38:ee:5c:15:62:f0:2a:7d:1f:
48:63:0f:b9:32:e0:83:53:e6:47:9a:dd:37:1c:4b:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:50:68:F9:17:F0:37:7E:82:CE:F9:E8:1C:07:2A:36:A4:46:25:D1
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/tFBo-RfwN36CzvnoHAcqNqRGJdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.180.17.0/24
217.180.46.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:0e:81:c5:31:9e:48:55:d8:23:2a:99:68:0f:db:4b:11:52:
68:7b:4a:59:5c:17:53:48:37:bb:0d:ac:89:76:89:ed:f7:10:
e7:81:47:19:7f:1f:23:55:5b:f6:7f:c7:cf:eb:b6:77:e5:2c:
3c:7d:10:50:77:b7:e6:23:7c:f1:9b:e0:61:ec:47:31:db:a9:
1a:84:4f:83:28:2f:62:99:8a:dd:7c:34:c7:e4:df:d3:93:4f:
9a:d1:d1:97:69:35:d1:c8:cb:ca:ee:1c:20:5e:79:ec:0e:23:
f4:0e:62:98:4b:6d:da:66:74:10:6b:94:75:4c:e7:fc:8a:ef:
10:5a:cf:ed:a3:7f:fc:2c:0e:2c:a6:c2:b2:ab:fe:03:2f:3b:
a5:d2:c7:44:31:d7:7f:05:ae:af:98:ef:77:44:a3:90:ea:f7:
f0:ee:45:72:d9:5a:0c:0c:a1:e7:e9:81:04:63:a3:e7:83:24:
2a:43:50:34:6a:52:a0:41:08:3a:de:2c:88:2e:df:5e:97:13:
b9:d4:37:bf:06:ee:4d:d3:1c:5a:a6:8a:9d:ca:6a:d0:10:ca:
97:c1:55:44:1d:14:c8:d7:d2:9b:83:1f:0e:86:1a:6f:7c:35:
d7:c3:2a:a1:20:0e:70:31:9c:ac:a8:99:0e:0a:e8:19:36:74:
65:dd:b1:fd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQkspoFacKscw7blXhAd36xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy
ZGE3NGQwHhcNMjUwMTAyMDE0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDUwNjhmOTE3ZjAzNzdlODJjZWY5ZTgxYzA3MmEzNmE0NDYyNWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8AB11UTkvbYogK13f4EmZKb5tNU
e4hAr/f9ZIrMpAjtA+FLKd7Km+3uZoCn6QhITs+fxCZH8df/J+oypLocks+SRwf2
RtzCY57eonZEU31GZNwDR0U0naMvyPv+Eb1SOVLEHC/izRUh5tfZ5j4Y0qXOY2Yh
7Vo9bhc96olQ9Yf4+0oi1yhhY57qqok+FxVmtApTvfnx5Qzy98BuO66hddKDHljH
fz9mSEviVhALBO7+Ucb/c+9AswU+pCdUH4bjkJasBtQFsQ6JsKC+kjGOZOTcVGcD
9neOThttuyiGucozRZCMo6Y47lwVYvAqfR9IYw+5MuCDU+ZHmt03HEtT4wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLRQaPkX8Dd+gs756BwHKjakRiXRMB8GA1UdIwQY
MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt
YzE5OTQyNzM3ZTZkLzEvdEZCby1SZndOMzZDenZub0hBY3FOcVJHSmRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk
LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2bQRAwQA
2bQuMA0GCSqGSIb3DQEBCwUAA4IBAQCrDoHFMZ5IVdgjKploD9tLEVJoe0pZXBdT
SDe7DayJdont9xDngUcZfx8jVVv2f8fP67Z35Sw8fRBQd7fmI3zxm+Bh7Ecx26ka
hE+DKC9imYrdfDTH5N/Tk0+a0dGXaTXRyMvK7hwgXnnsDiP0DmKYS23aZnQQa5R1
TOf8iu8QWs/to3/8LA4spsKyq/4DLzul0sdEMdd/Ba6vmO93RKOQ6vfw7kVy2VoM
DKHn6YEEY6PngyQqQ1A0alKgQQg63iyILt9elxO51De/Bu5N0xxapoqdymrQEMqX
wVVEHRTI19Kbgx8OhhpvfDXXwyqhIA5wMZysqJkOCugZNnRl3bH9
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:27:21 2025 by rpki-client