Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/1rxFp052LO9TkZw7Jr33UTppS4Y.roa
File: 1rxFp052LO9TkZw7Jr33UTppS4Y.roa (raw, json)
Hash identifier: YvxntzjsnK6afI71OTO7DrV+/krGGBKEmbsCBj/WmrA=
Subject key identifier: D6:BC:45:A7:4E:76:2C:EF:53:91:9C:3B:26:BD:F7:51:3A:69:4B:86
Certificate issuer: /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Certificate serial: 018CC26D73578106B27BECD1B07C573AF306
Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/1rxFp052LO9TkZw7Jr33UTppS4Y.roa
Signing time: Mon 01 Jan 2024 00:30:01 +0000
ROA not before: Mon 01 Jan 2024 00:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34599
IP address blocks: 193.104.76.0/24 maxlen: 24
193.104.80.0/24 maxlen: 24
193.104.94.0/24 maxlen: 24
193.104.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:73:57:81:06:b2:7b:ec:d1:b0:7c:57:3a:f3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Validity
Not Before: Jan 1 00:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6bc45a74e762cef53919c3b26bdf7513a694b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:5f:21:12:7a:80:bb:62:30:a6:f1:fa:3d:
a9:35:5a:0a:d9:54:dc:47:52:b9:8e:86:ab:0f:3e:
c5:64:5b:7a:97:f7:8a:0a:da:fc:c9:43:a8:1e:5c:
eb:30:58:1d:eb:e2:25:e2:15:b7:e3:3c:27:f5:1d:
36:94:37:0d:76:ff:e1:79:f9:78:bb:b1:34:ac:44:
7e:e1:90:5a:6b:26:7d:15:d7:8e:2f:30:39:fb:5d:
33:28:ed:62:14:b4:cc:3f:a9:7c:15:56:6e:4c:d1:
32:3e:bf:4b:81:07:83:e4:24:7d:ee:63:03:91:ae:
45:f2:90:b1:dd:62:44:e9:b0:0e:23:5e:52:ed:7c:
a3:21:10:9f:f8:db:f7:57:7c:85:73:f5:e0:c3:30:
07:37:bb:1a:14:13:b3:c4:c9:e2:e4:1d:43:90:c9:
5c:9d:ab:f8:41:0c:a5:a8:bb:ec:12:c3:80:2f:6d:
6b:ee:cf:b7:5c:43:d2:69:d7:a5:2e:3f:de:88:9a:
ba:47:91:52:7b:4a:8a:55:8a:9f:c6:5e:f7:a7:25:
1d:c5:4b:e5:b9:17:78:b7:71:85:9e:0e:fa:a2:8d:
0f:b3:a8:4e:7b:70:6d:ca:74:42:ef:be:bb:b1:73:
b5:de:26:24:31:49:3e:01:44:ad:10:56:02:fe:7d:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BC:45:A7:4E:76:2C:EF:53:91:9C:3B:26:BD:F7:51:3A:69:4B:86
X509v3 Authority Key Identifier:
keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/1rxFp052LO9TkZw7Jr33UTppS4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.76.0/24
193.104.80.0/24
193.104.93.0-193.104.94.255
Signature Algorithm: sha256WithRSAEncryption
bc:12:f9:40:b3:b2:18:52:7e:76:df:4a:20:74:25:d4:4b:e2:
0e:bf:b8:6e:78:9a:a0:18:a1:3c:95:47:49:69:84:c7:15:84:
b5:0e:fc:e8:9f:a9:37:83:55:e4:73:5a:cb:af:10:8e:ef:22:
73:c2:25:34:d1:31:d0:a1:ab:b0:a2:03:47:cf:68:a4:dc:6b:
57:6c:00:eb:a7:ad:35:ee:d2:aa:71:03:fc:4a:f6:cc:8d:6e:
77:b7:b4:dc:29:60:55:4f:1b:33:fb:8f:df:f7:f2:56:de:ba:
99:8f:f4:6b:0e:22:e8:1a:6a:44:aa:0c:bd:8c:4c:41:f6:a2:
a1:8b:5e:22:d5:eb:71:1f:71:84:6d:6d:bb:90:e7:8d:6f:15:
1e:c2:d4:65:44:9e:e2:52:96:b7:22:85:2f:4f:9d:74:63:ae:
5c:20:d4:32:fe:20:7a:5e:bf:48:90:be:04:36:d1:07:9a:41:
4a:f3:33:13:81:d6:33:3a:c0:a0:d8:4a:1c:09:00:8e:77:8f:
68:d9:31:09:27:31:8d:82:21:e3:a8:7f:98:76:28:ea:f0:88:
99:51:d0:5a:68:7a:64:f9:16:88:ff:36:ef:9e:68:4f:a2:d1:
05:9b:2c:cb:fb:c0:8d:ad:ee:ce:7b:dc:de:cc:18:52:cf:1e:
8e:76:c5:be
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYzCbXNXgQaye+zRsHxXOvMGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNGNmODgxNzc0NDJhNTRmMzIxYjhmYTgwYjZjZjVkZjQw
NGNmZjYwHhcNMjQwMTAxMDAzMDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmJjNDVhNzRlNzYyY2VmNTM5MTljM2IyNmJkZjc1MTNhNjk0Yjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUVfIRJ6gLtiMKbx+j2pNVoK2VTc
R1K5joarDz7FZFt6l/eKCtr8yUOoHlzrMFgd6+Il4hW34zwn9R02lDcNdv/hefl4
u7E0rER+4ZBaayZ9FdeOLzA5+10zKO1iFLTMP6l8FVZuTNEyPr9LgQeD5CR97mMD
ka5F8pCx3WJE6bAOI15S7XyjIRCf+Nv3V3yFc/XgwzAHN7saFBOzxMni5B1DkMlc
nav4QQylqLvsEsOAL21r7s+3XEPSadelLj/eiJq6R5FSe0qKVYqfxl73pyUdxUvl
uRd4t3GFng76oo0Ps6hOe3BtynRC7767sXO13iYkMUk+AUStEFYC/n168QIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFNa8RadOdizvU5GcOya991E6aUuGMB8GA1UdIwQY
MBaAFDxM+IF3RCpU8yG4+oC2z130BM/2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEV6NGdYZEVLbFR6SWJqNmdMYlBYZlFFel9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zYTQwYzAtMjQ3NS00ODE0LTg1NTkt
NzAwZTMwMjdmNjIzLzEvMXJ4RnAwNTJMTzlUa1p3N0pyMzNVVHBwUzRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8zYTQwYzAtMjQ3NS00ODE0LTg1NTktNzAwZTMwMjdmNjIz
LzEvUEV6NGdYZEVLbFR6SWJqNmdMYlBYZlFFel9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAwWhMAwQA
wWhQMAwDBADBaF0DBADBaF4wDQYJKoZIhvcNAQELBQADggEBALwS+UCzshhSfnbf
SiB0JdRL4g6/uG54mqAYoTyVR0lphMcVhLUO/OifqTeDVeRzWsuvEI7vInPCJTTR
MdChq7CiA0fPaKTca1dsAOunrTXu0qpxA/xK9syNbne3tNwpYFVPGzP7j9/38lbe
upmP9GsOIugaakSqDL2MTEH2oqGLXiLV63EfcYRtbbuQ541vFR7C1GVEnuJSlrci
hS9PnXRjrlwg1DL+IHpev0iQvgQ20QeaQUrzMxOB1jM6wKDYShwJAI53j2jZMQkn
MY2CIeOof5h2KOrwiJlR0FpoemT5Foj/Nu+eaE+i0QWbLMv7wI2t7s573N7MGFLP
Ho52xb4=
-----END CERTIFICATE-----
Generated at Sun Apr 13 07:12:39 2025 by rpki-client