Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/hYO0eBHcop_6GBiAmlinDIQmc4Q.roa
File: hYO0eBHcop_6GBiAmlinDIQmc4Q.roa (raw, json)
Hash identifier: +zTJ397RagFE+93ZE421mcXwYQ0lteV4gN4O0/NlN/Y=
Subject key identifier: 85:83:B4:78:11:DC:A2:9F:FA:18:18:80:9A:58:A7:0C:84:26:73:84
Certificate issuer: /CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Certificate serial: 018CC4251092E1AF3B034937C5C84BD47FAB
Authority key identifier: 1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/hYO0eBHcop_6GBiAmlinDIQmc4Q.roa
Signing time: Mon 01 Jan 2024 08:30:12 +0000
ROA not before: Mon 01 Jan 2024 08:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44858
IP address blocks: 193.105.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:10:92:e1:af:3b:03:49:37:c5:c8:4b:d4:7f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Validity
Not Before: Jan 1 08:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8583b47811dca29ffa1818809a58a70c84267384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:35:5c:cf:e2:11:e4:b9:24:a3:3c:a7:81:c2:
b1:db:31:9e:e0:31:9c:c8:3c:6c:ce:e5:25:b3:3c:
32:0e:ad:f9:d7:a2:24:b4:4c:8e:70:f4:37:84:e9:
f1:97:23:e3:76:bf:ea:f3:da:0f:05:c8:8a:cc:c4:
92:0a:49:ca:33:cc:c1:4d:13:20:1a:75:b8:1e:ca:
64:be:58:f1:b9:0f:a2:5e:da:f8:4f:0f:31:03:eb:
f7:3c:24:df:2c:10:49:cf:62:00:14:ed:19:6a:ae:
a3:e4:ef:04:ec:a2:96:89:d7:c5:25:1f:47:b7:c4:
bd:43:b7:ad:a9:ee:b2:97:03:a1:e8:5c:f9:09:18:
6d:2a:2a:9d:e5:40:8b:29:90:0f:04:8e:a9:34:e4:
77:16:3e:6e:08:a7:1e:01:1b:f1:c6:62:94:49:fb:
86:5a:37:c9:ed:4f:d6:4d:12:a1:9f:63:f8:c9:ca:
90:19:60:20:f4:f6:f5:fd:ee:99:59:ea:77:3a:86:
8b:2f:2c:4c:c7:89:e3:85:17:72:65:dd:db:a3:f8:
ae:43:5c:04:b5:44:c7:7e:96:68:20:72:af:21:47:
51:49:07:df:dc:5a:1b:d0:39:f9:06:c2:a2:89:65:
a6:e9:5a:74:78:31:c0:b1:c3:f4:ce:22:5f:39:26:
e8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:83:B4:78:11:DC:A2:9F:FA:18:18:80:9A:58:A7:0C:84:26:73:84
X509v3 Authority Key Identifier:
keyid:1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/hYO0eBHcop_6GBiAmlinDIQmc4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.50.0/24
Signature Algorithm: sha256WithRSAEncryption
40:e8:bd:aa:93:51:1f:17:27:07:2d:1d:80:bf:cc:ad:0f:51:
a1:77:fa:46:5d:e4:7c:a5:34:b3:ac:c4:97:84:77:29:d2:23:
7d:c2:ae:4e:c3:c1:6f:72:24:46:c6:90:51:a9:f7:2f:96:be:
61:11:a8:68:b2:4b:8b:36:09:29:5c:d0:02:b5:a7:c3:00:ed:
bb:95:99:6f:aa:29:9e:e8:7d:ae:57:fd:c9:e5:a5:7f:7a:78:
04:65:ec:49:cc:db:ac:30:3b:01:9f:4e:51:86:3d:09:8d:60:
53:e6:0b:8e:cc:47:78:9d:af:f8:92:f6:38:8e:3e:08:2c:b0:
52:0c:09:f3:f7:63:0d:4e:e8:5c:8c:d6:da:f9:18:ca:97:96:
42:49:5c:42:14:5b:58:d8:95:08:4d:d3:c9:cb:9a:06:a4:db:
87:4a:6f:42:67:fa:63:e9:86:fe:69:6a:47:c3:93:88:89:a8:
ee:3c:84:61:8c:3a:32:44:5c:e9:93:ac:26:c8:46:eb:8b:14:
56:01:e8:b6:af:97:bb:f8:30:a9:fe:77:f1:d7:08:4e:84:dc:
80:f5:28:7b:e8:73:21:a0:65:83:46:2a:cb:94:7b:dd:2b:8f:
5f:55:4b:f9:12:75:f2:49:67:86:fa:5d:0d:aa:e7:9f:2a:e3:
a3:45:35:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJRCS4a87A0k3xchL1H+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYzI5ZTU3NDllZTkxYzVhMzNhZThlMzBiN2RjOWZmZjM5
NWZmZTYwHhcNMjQwMTAxMDgzMDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTgzYjQ3ODExZGNhMjlmZmExODE4ODA5YTU4YTcwYzg0MjY3Mzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzVcz+IR5LkkozyngcKx2zGe4DGc
yDxszuUlszwyDq3516IktEyOcPQ3hOnxlyPjdr/q89oPBciKzMSSCknKM8zBTRMg
GnW4HspkvljxuQ+iXtr4Tw8xA+v3PCTfLBBJz2IAFO0Zaq6j5O8E7KKWidfFJR9H
t8S9Q7etqe6ylwOh6Fz5CRhtKiqd5UCLKZAPBI6pNOR3Fj5uCKceARvxxmKUSfuG
WjfJ7U/WTRKhn2P4ycqQGWAg9Pb1/e6ZWep3OoaLLyxMx4njhRdyZd3bo/iuQ1wE
tUTHfpZoIHKvIUdRSQff3Fob0Dn5BsKiiWWm6Vp0eDHAscP0ziJfOSboQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIWDtHgR3KKf+hgYgJpYpwyEJnOEMB8GA1UdIwQY
MBaAFB3CnldJ7pHFozro4wt9yf/zlf/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGNLZVYwbnVrY1dqT3VqakMzM0pfX09WXy1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jMWQ5N2EtNWI5ZC00MGJiLTliMjct
NTNmZmE1Zjk5ODVjLzEvaFlPMGVCSGNvcF82R0JpQW1saW5ESVFtYzRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9jMWQ5N2EtNWI5ZC00MGJiLTliMjctNTNmZmE1Zjk5ODVj
LzEvSGNLZVYwbnVrY1dqT3VqakMzM0pfX09WXy1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWkyMA0G
CSqGSIb3DQEBCwUAA4IBAQBA6L2qk1EfFycHLR2Av8ytD1Ghd/pGXeR8pTSzrMSX
hHcp0iN9wq5Ow8FvciRGxpBRqfcvlr5hEahoskuLNgkpXNACtafDAO27lZlvqime
6H2uV/3J5aV/engEZexJzNusMDsBn05Rhj0JjWBT5guOzEd4na/4kvY4jj4ILLBS
DAnz92MNTuhcjNba+RjKl5ZCSVxCFFtY2JUITdPJy5oGpNuHSm9CZ/pj6Yb+aWpH
w5OIiajuPIRhjDoyRFzpk6wmyEbrixRWAei2r5e7+DCp/nfx1whOhNyA9Sh76HMh
oGWDRirLlHvdK49fVUv5EnXySWeG+l0NquefKuOjRTUe
-----END CERTIFICATE-----
Generated at Wed Apr 16 19:22:04 2025 by rpki-client