Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/KH9de6h9ODbSFKEXRxOM6Ihuqe4.roa
File: KH9de6h9ODbSFKEXRxOM6Ihuqe4.roa (raw, json)
Hash identifier: aN9JA2PTE+wMWVnqlGCK7+Xl6zPoAGZ5I5p4Q43tYP4=
Subject key identifier: 28:7F:5D:7B:A8:7D:38:36:D2:14:A1:17:47:13:8C:E8:88:6E:A9:EE
Certificate issuer: /CN=16914c51d031411c1340171593603163c3d4a08e
Certificate serial: 01931BE8526618842C6DA0BA9A2438A648F5
Authority key identifier: 16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/KH9de6h9ODbSFKEXRxOM6Ihuqe4.roa
Signing time: Mon 11 Nov 2024 15:47:10 +0000
ROA not before: Mon 11 Nov 2024 15:47:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45054
IP address blocks: 91.203.152.0/22 maxlen: 22
176.123.128.0/19 maxlen: 19
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1b:e8:52:66:18:84:2c:6d:a0:ba:9a:24:38:a6:48:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16914c51d031411c1340171593603163c3d4a08e
Validity
Not Before: Nov 11 15:47:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=287f5d7ba87d3836d214a11747138ce8886ea9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:60:5a:71:91:3e:d6:01:fc:b4:25:d6:dd:d6:
62:4a:a3:61:c8:b7:92:46:95:a9:a8:e6:8a:1b:57:
30:cb:7f:35:e0:22:83:ad:56:6b:3c:85:54:a9:2a:
28:30:77:b5:89:0d:28:0d:a9:a1:4f:72:4a:e1:72:
47:c2:d5:36:e0:5b:f2:0e:d2:46:7c:0a:e3:05:5b:
11:0c:b4:98:7d:b1:a6:b1:86:d2:a3:16:f9:7d:be:
58:d5:33:24:4a:52:08:fd:60:8b:ee:30:f3:20:0a:
3f:7d:6f:72:20:b8:d1:4c:7a:c2:f1:39:66:c5:b0:
7e:81:9c:90:6b:4c:f3:de:e1:22:3f:89:74:f6:33:
ac:c6:c1:08:6d:61:d1:dc:f2:3a:07:94:02:d5:76:
13:a9:8a:8b:6c:e3:4a:49:f7:4c:49:47:28:ba:32:
93:27:80:9f:58:1a:50:7e:3b:64:86:bc:de:4f:9b:
22:03:85:5f:66:9c:96:4f:8b:1e:80:a9:02:3d:ca:
49:65:e8:72:1b:df:df:45:90:a0:0b:63:b8:ad:2e:
2f:99:0d:aa:f3:d1:f0:95:4a:c2:7a:36:d4:d3:b5:
ff:af:4a:73:c5:73:f6:eb:cc:ba:60:15:a9:89:49:
6a:f2:c4:02:03:7b:3a:fd:17:bd:9d:12:4e:b8:b7:
bc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7F:5D:7B:A8:7D:38:36:D2:14:A1:17:47:13:8C:E8:88:6E:A9:EE
X509v3 Authority Key Identifier:
keyid:16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/KH9de6h9ODbSFKEXRxOM6Ihuqe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.152.0/22
176.123.128.0/19
Signature Algorithm: sha256WithRSAEncryption
ab:ca:3e:ec:84:d2:6c:ad:22:0c:11:39:49:98:a1:a5:51:57:
fc:a1:3f:71:28:d4:df:4c:78:ea:1e:64:a1:b5:af:a9:bc:79:
9d:b5:04:de:c7:13:f3:13:10:86:c5:0b:1f:c9:3c:c9:41:49:
6e:ed:ad:59:1d:e2:e3:26:9d:fe:b2:5c:15:7f:f6:93:a8:06:
68:ff:e3:26:e6:25:0a:a4:15:db:e9:5d:04:57:52:bf:f7:40:
f3:c6:51:30:41:fc:a3:fe:d3:b5:b1:3b:cd:e5:ea:dd:52:d0:
a0:89:a7:92:94:cc:e1:da:56:c5:cb:8d:a7:75:5b:b6:ea:96:
08:59:b4:8f:d5:ef:de:fd:61:0e:31:b8:0c:3f:66:a6:33:45:
48:10:c1:50:de:96:f4:01:21:6c:e3:8c:21:5c:a4:49:66:c9:
11:e5:45:57:c8:20:f4:53:ea:4c:97:8c:a4:23:76:65:48:bc:
64:ed:e8:53:18:9b:25:ff:8a:06:c0:15:28:b0:1f:95:81:53:
7c:2a:bf:44:26:bf:46:d0:ce:85:2f:11:7d:09:b5:cb:a9:43:
2f:06:79:22:47:1b:31:5b:a6:17:00:15:58:da:32:a9:ab:7a:
64:c3:f5:1b:66:90:d1:97:72:c4:2b:f2:82:d0:8b:f9:27:0d:
52:26:d6:91
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZMb6FJmGIQsbaC6miQ4pkj1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTE0YzUxZDAzMTQxMWMxMzQwMTcxNTkzNjAzMTYzYzNk
NGEwOGUwHhcNMjQxMTExMTU0NzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODdmNWQ3YmE4N2QzODM2ZDIxNGExMTc0NzEzOGNlODg4NmVhOWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2BacZE+1gH8tCXW3dZiSqNhyLeS
RpWpqOaKG1cwy3814CKDrVZrPIVUqSooMHe1iQ0oDamhT3JK4XJHwtU24FvyDtJG
fArjBVsRDLSYfbGmsYbSoxb5fb5Y1TMkSlII/WCL7jDzIAo/fW9yILjRTHrC8Tlm
xbB+gZyQa0zz3uEiP4l09jOsxsEIbWHR3PI6B5QC1XYTqYqLbONKSfdMSUcoujKT
J4CfWBpQfjtkhrzeT5siA4VfZpyWT4segKkCPcpJZehyG9/fRZCgC2O4rS4vmQ2q
89HwlUrCejbU07X/r0pzxXP268y6YBWpiUlq8sQCA3s6/Re9nRJOuLe8UwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCh/XXuofTg20hShF0cTjOiIbqnuMB8GA1UdIwQY
MBaAFBaRTFHQMUEcE0AXFZNgMWPD1KCOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBGTVVkQXhRUndUUUJjVmsyQXhZOFBVb0k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mOTBhN2QtOGEwNS00NzU1LWI2NmIt
MDlmMTljNmU1MWIyLzEvS0g5ZGU2aDlPRGJTRktFWFJ4T002SWh1cWU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9mOTBhN2QtOGEwNS00NzU1LWI2NmItMDlmMTljNmU1MWIy
LzEvRnBGTVVkQXhRUndUUUJjVmsyQXhZOFBVb0k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8uYAwQF
sHuAMA0GCSqGSIb3DQEBCwUAA4IBAQCryj7shNJsrSIMETlJmKGlUVf8oT9xKNTf
THjqHmShta+pvHmdtQTexxPzExCGxQsfyTzJQUlu7a1ZHeLjJp3+slwVf/aTqAZo
/+Mm5iUKpBXb6V0EV1K/90DzxlEwQfyj/tO1sTvN5erdUtCgiaeSlMzh2lbFy42n
dVu26pYIWbSP1e/e/WEOMbgMP2amM0VIEMFQ3pb0ASFs44whXKRJZskR5UVXyCD0
U+pMl4ykI3ZlSLxk7ehTGJsl/4oGwBUosB+VgVN8Kr9EJr9G0M6FLxF9CbXLqUMv
BnkiRxsxW6YXABVY2jKpq3pkw/UbZpDRl3LEK/KC0Iv5Jw1SJtaR
-----END CERTIFICATE-----
Generated at Wed Apr 16 19:22:12 2025 by rpki-client