Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/K8ufoa16Pu3zL4mlcVjonhXbmq8.roa
File: K8ufoa16Pu3zL4mlcVjonhXbmq8.roa (raw, json)
Hash identifier: V49Dc08Dm5OwoV9PMTcCWT7zpsSQRtEbftsOUT1lNnk=
Subject key identifier: 2B:CB:9F:A1:AD:7A:3E:ED:F3:2F:89:A5:71:58:E8:9E:15:DB:9A:AF
Certificate issuer: /CN=9d6b9774c94876c98321de3201b11b75a1358d19
Certificate serial: 01939C2136F0A84E0710C800960057BBFF3E
Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/K8ufoa16Pu3zL4mlcVjonhXbmq8.roa
Signing time: Fri 06 Dec 2024 13:20:42 +0000
ROA not before: Fri 06 Dec 2024 13:20:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211462
IP address blocks: 193.32.87.0/24 maxlen: 24
2a0d:8140::/48 maxlen: 48
2a0d:8140:2fff::/48 maxlen: 48
2a0d:8140:3fff::/48 maxlen: 48
2a0d:8140:4fff::/48 maxlen: 48
2a0d:8141::/48 maxlen: 48
2a0d:8142::/48 maxlen: 48
2a0d:8143::/48 maxlen: 48
2a0d:8144::/48 maxlen: 48
2a0d:8145::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9c:21:36:f0:a8:4e:07:10:c8:00:96:00:57:bb:ff:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19
Validity
Not Before: Dec 6 13:20:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bcb9fa1ad7a3eedf32f89a57158e89e15db9aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:f2:60:49:54:29:7f:b6:7f:f5:ae:71:f7:
e7:67:94:08:74:5e:37:b7:9d:ed:64:31:26:87:3e:
dc:be:4c:43:50:ed:8e:bb:df:b2:d9:23:84:50:f4:
55:fe:e3:69:83:86:a3:e7:3e:24:68:b3:df:53:da:
2e:43:07:59:e2:9a:a3:0a:a2:3e:67:e5:a3:d2:36:
37:c3:c9:89:23:53:5d:36:7f:26:17:59:f0:5f:2d:
99:6e:51:b2:64:e0:3f:8a:9e:c0:de:81:5b:18:4d:
92:59:52:ea:4b:13:be:7b:11:fc:29:90:8a:a9:43:
d5:4c:61:e5:1a:a4:74:23:22:24:20:66:f1:5d:a2:
26:af:53:5f:c6:9e:f0:fe:2f:88:50:bc:de:59:83:
e5:8a:e3:f4:d7:7b:bc:60:31:f8:c1:1e:4f:f3:0c:
1c:06:39:5c:3b:ba:d1:e0:01:68:52:e0:a4:7e:e6:
23:10:2c:43:87:5c:eb:2a:2a:ca:48:a9:27:fb:00:
b5:fa:31:96:0b:7c:6c:65:81:c3:e8:96:53:90:fc:
8d:84:f8:f4:5a:e8:25:92:b3:38:e2:74:f4:9b:42:
d6:55:1a:f9:91:86:f3:2f:7a:79:6c:03:27:03:5f:
8a:0a:50:8f:cb:02:ba:7e:7b:ac:18:b7:60:d7:cb:
94:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CB:9F:A1:AD:7A:3E:ED:F3:2F:89:A5:71:58:E8:9E:15:DB:9A:AF
X509v3 Authority Key Identifier:
keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/K8ufoa16Pu3zL4mlcVjonhXbmq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.87.0/24
IPv6:
2a0d:8140::/48
2a0d:8140:2fff::/48
2a0d:8140:3fff::/48
2a0d:8140:4fff::/48
2a0d:8141::/48
2a0d:8142::/48
2a0d:8143::/48
2a0d:8144::/48
2a0d:8145::/48
Signature Algorithm: sha256WithRSAEncryption
82:91:2a:91:0f:90:d8:81:c5:b9:45:d0:b1:fe:1e:a8:c5:8b:
43:fe:86:12:bc:49:6e:d8:8f:32:74:6b:6d:dd:aa:b4:66:93:
7e:ec:19:45:6f:3c:eb:f5:cb:3c:d8:ae:1f:71:b2:c8:bf:8c:
ad:f6:22:ca:c6:2e:84:55:4b:3d:73:98:1f:a3:a7:6a:60:95:
a2:40:10:32:e3:55:9d:db:98:0f:4b:50:70:17:9b:e3:fd:fc:
c9:99:52:38:71:6b:a3:ce:36:9b:f5:4e:f3:fc:95:8f:d1:fc:
1d:26:4c:aa:eb:fd:85:29:f0:02:70:f3:5a:85:2b:6d:2e:5c:
3e:48:ad:e5:f4:40:00:dd:6c:18:c0:92:31:19:3e:f5:e1:27:
66:88:a9:ee:bf:ab:8b:98:ab:91:97:6d:37:f9:53:15:69:3b:
cb:aa:33:79:6e:24:54:f7:54:66:f7:2f:c2:7b:0a:09:a7:40:
95:a0:bb:04:44:fc:2a:d5:48:3c:7d:2e:b3:dd:a2:1e:63:f6:
3f:2b:ec:a5:b3:cc:fe:97:fa:52:c4:33:c8:93:86:42:4c:4a:
15:8c:65:c3:9f:3b:85:2c:c0:2f:89:e4:da:b0:ad:9b:8f:7e:
1f:56:04:46:3b:4e:33:ea:90:00:bd:20:f4:d0:f3:8b:11:ab:
cd:38:1a:20
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgISAZOcITbwqE4HEMgAlgBXu/8+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNmI5Nzc0Yzk0ODc2Yzk4MzIxZGUzMjAxYjExYjc1YTEz
NThkMTkwHhcNMjQxMjA2MTMyMDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmNiOWZhMWFkN2EzZWVkZjMyZjg5YTU3MTU4ZTg5ZTE1ZGI5YWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+XyYElUKX+2f/WucffnZ5QIdF43
t53tZDEmhz7cvkxDUO2Ou9+y2SOEUPRV/uNpg4aj5z4kaLPfU9ouQwdZ4pqjCqI+
Z+Wj0jY3w8mJI1NdNn8mF1nwXy2ZblGyZOA/ip7A3oFbGE2SWVLqSxO+exH8KZCK
qUPVTGHlGqR0IyIkIGbxXaImr1Nfxp7w/i+IULzeWYPliuP013u8YDH4wR5P8wwc
BjlcO7rR4AFoUuCkfuYjECxDh1zrKirKSKkn+wC1+jGWC3xsZYHD6JZTkPyNhPj0
WuglkrM44nT0m0LWVRr5kYbzL3p5bAMnA1+KClCPywK6fnusGLdg18uU8wIDAQAB
o4ICYjCCAl4wHQYDVR0OBBYEFCvLn6Gtej7t8y+JpXFY6J4V25qvMB8GA1UdIwQY
MBaAFJ1rl3TJSHbJgyHeMgGxG3WhNY0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5Njgt
YTU2YmRmYWRiODFlLzEvSzh1Zm9hMTZQdTN6TDRtbGNWam9uaFhibXE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5NjgtYTU2YmRmYWRiODFl
LzEvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzAMBAIAATAGAwQAwSBXMFcE
AgACMFEDBwAqDYFAAAADBwAqDYFAL/8DBwAqDYFAP/8DBwAqDYFAT/8DBwAqDYFB
AAADBwAqDYFCAAADBwAqDYFDAAADBwAqDYFEAAADBwAqDYFFAAAwDQYJKoZIhvcN
AQELBQADggEBAIKRKpEPkNiBxblF0LH+HqjFi0P+hhK8SW7YjzJ0a23dqrRmk37s
GUVvPOv1yzzYrh9xssi/jK32IsrGLoRVSz1zmB+jp2pglaJAEDLjVZ3bmA9LUHAX
m+P9/MmZUjhxa6PONpv1TvP8lY/R/B0mTKrr/YUp8AJw81qFK20uXD5IreX0QADd
bBjAkjEZPvXhJ2aIqe6/q4uYq5GXbTf5UxVpO8uqM3luJFT3VGb3L8J7CgmnQJWg
uwRE/CrVSDx9LrPdoh5j9j8r7KWzzP6X+lLEM8iThkJMShWMZcOfO4UswC+J5Nqw
rZuPfh9WBEY7TjPqkAC9IPTQ84sRq804GiA=
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:51:55 2025 by rpki-client